Skip to content

Commit ed13c17

Browse files
committed
Fix qhelp file
1 parent 132a187 commit ed13c17

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

java/ql/src/Security/CWE/CWE-917/OgnlInjection.qhelp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ attacker to modify Java objects' properties or execute arbitrary code.</p>
1111

1212
<recommendation>
1313
<p>The general recommendation is to not evaluate untrusted ONGL expressions. If user provided OGNL
14-
expressions must be evaluated, do this in sandbox (add `-Dognl.security.manager` to JVM arguments)
14+
expressions must be evaluated, do this in sandbox (add <code>-Dognl.security.manager</code> to JVM arguments)
1515
and validate the expressions before evaluation.</p>
1616
</recommendation>
1717

0 commit comments

Comments
 (0)