Skip to content

Commit 0aaa8af

Browse files
Update javascript/ql/src/experimental/Security/CWE-94/ServerSideTemplateInjection.qhelp
Co-authored-by: Erik Krogh Kristensen <[email protected]>
1 parent 056566e commit 0aaa8af

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

javascript/ql/src/experimental/Security/CWE-94/ServerSideTemplateInjection.qhelp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ run arbitrary code on the application server.
1515
<p>
1616
Avoid including user input in any expression or template which may be dynamically rendered.
1717
If user input must be included, use context-specific escaping before including it or run
18-
render engine with sandbox options.
18+
the rendering engine with sandbox options.
1919
</p>
2020
</recommendation>
2121

0 commit comments

Comments
 (0)