Skip to content

Commit 43d79dc

Browse files
egregius313saritai
andcommitted
Apply docs review suggestions
Co-authored-by: Sarita Iyer <[email protected]>
1 parent 0eaf222 commit 43d79dc

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

java/ql/src/Security/CWE/CWE-522/InsecureLdapAuth.qhelp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@
3333

3434
<p>
3535
In the following (good) example, a <code>ldap://</code> URL is used, but
36-
SASL authentication is enabled.
36+
SASL authentication is enabled so that the credentials will be encrypted.
3737
</p>
3838
<sample src="LdapEnableSasl.java"/>
3939
</example>
Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
11
---
22
category: newQuery
33
---
4-
* The query `java/insecure-ldap-auth` has been promoted from experimental to the main query pack. This query was originally [submitted as an experimental query by @luchua-bc](https://github.com/github/codeql/pull/4854)
4+
* The query `java/insecure-ldap-auth` has been promoted from experimental to the main query pack. This query detects transmission of cleartext credentials in LDAP authentication. Insecure LDAP authentication causes sensitive information to be vulnerable to remote attackers. This query was originally [submitted as an experimental query by @luchua-bc](https://github.com/github/codeql/pull/4854)

0 commit comments

Comments
 (0)