Skip to content

Commit 5c82ff8

Browse files
committed
Java: Fix qhelp, fix CWE reference
1 parent 2e30f2d commit 5c82ff8

File tree

2 files changed

+2
-3
lines changed

2 files changed

+2
-3
lines changed

java/ql/src/experimental/Security/CWE/CWE-295/JxBrowserWithoutCertValidation.qhelp

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -10,13 +10,12 @@ Versions smaller than 6.24 by default ignore any HTTPS certificate errors thereb
1010
</overview>
1111

1212
<recommendation>
13-
<p>Do either of these:
13+
<p>Do either of these:</p>
1414
<ul>
1515
<li>Update to version 6.24 or 7.x.x as these correctly reject certificate errors by default.</li>
1616
<li>Add a custom implementation of the <code>LoadHandler</code> interface whose <code>onCertificateError</code> method always returns <b>true</b> indicating that loading should be cancelled.
1717
Then use the <code>setLoadHandler</code> method with your custom <code>LoadHandler</code> on every <code>Browser</code> you use.</li>
1818
</ul>
19-
</p>
2019
</recommendation>
2120

2221
<example>

java/ql/src/experimental/Security/CWE/CWE-295/JxBrowserWithoutCertValidation.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44
* @kind problem
55
* @id java/jxbrowser/disabled-certificate-validation
66
* @tags security
7-
* external/cwe-295
7+
* external/cwe/cwe-295
88
*/
99

1010
import java

0 commit comments

Comments
 (0)