Skip to content

Commit 368572f

Browse files
lcarteyMarcono1234
andauthored
Update java/ql/src/Security/CWE/CWE-020/UntrustedDataToExternalAPI.qhelp
Co-authored-by: Marcono1234 <[email protected]>
1 parent 7928a02 commit 368572f

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

java/ql/src/Security/CWE/CWE-020/UntrustedDataToExternalAPI.qhelp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ some existing sanitization.</p>
4646

4747
<sample src="ExternalAPITaintStepExample.java" />
4848

49-
<p>If the query reported the call to <code>StringBuilder.append</code> on Line 7, this would suggest that this external API is
49+
<p>If the query reported the call to <code>StringBuilder.append</code> on line 7, this would suggest that this external API is
5050
not currently modeled as a taint step in the taint tracking library. The next step would be to model this as taint step, then
5151
re-run the query to determine what additional results might be found. In this example, it seems likely that the result of the
5252
<code>StringBuilder</code> will be executed as an SQL query, potentially leading to an SQL injection vulnerability.</p>

0 commit comments

Comments
 (0)