We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 8f1ecf5 commit 0a986adCopy full SHA for 0a986ad
java/ql/src/Security/CWE/CWE-074/JndiInjection.qhelp
@@ -11,7 +11,7 @@ code execution.</p>
11
</overview>
12
13
<recommendation>
14
-<p>The general recommendation is to not pass untrusted data to the <code>InitialContext.lookup
+<p>The general recommendation is to avoid passing untrusted data to the <code>InitialContext.lookup
15
</code> method. If the name being used to look up the object must be provided by the user, make
16
sure that it's not in the form of an absolute URL or that it's the URL pointing to a trused server.
17
</p>
0 commit comments