Skip to content

Commit b1ee864

Browse files
haby0smowton
andauthored
Update java/ql/src/experimental/Security/CWE/CWE-348/UseOfLessTrustedSource.ql
Co-authored-by: Chris Smowton <[email protected]>
1 parent 9e87f4e commit b1ee864

File tree

1 file changed

+1
-2
lines changed

1 file changed

+1
-2
lines changed

java/ql/src/experimental/Security/CWE/CWE-348/UseOfLessTrustedSource.ql

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,6 @@
11
/**
22
* @name IP address spoofing
3-
* @description The software obtains the client ip from the remote endpoint identifier specified (`X-Forwarded-For`,
4-
* `X-Real-IP`, `Proxy-Client-IP`, etc.) in the header and uses it. Attackers can modify these The value
3+
* @description A remote endpoint identifier is read from an HTTP header. Attackers can modify the value
54
* of the identifier to forge the client ip.
65
* @kind path-problem
76
* @problem.severity error

0 commit comments

Comments
 (0)