Skip to content

Commit bf80840

Browse files
atorralbasubatoi
andauthored
Apply suggestions from code review
Co-authored-by: Ben Ahmady <[email protected]>
1 parent 9d2b049 commit bf80840

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

swift/ql/src/queries/Security/CWE-022/PathInjection.qhelp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ such as <code>..</code>. Such a path could point to any directory on the file sy
1818
<li>Do not allow more than a single <code>.</code> character.</li>
1919
<li>Do not allow directory separators such as <code>/</code> or <code>\</code> (depending on the file system).</li>
2020
<li>Do not rely on simply replacing problematic sequences such as <code>../</code>. For example, after applying this filter to
21-
".../...//" the resulting string would still be "../".</li>
21+
<code>.../...//</code> the resulting string would still be <code>../</code>.</li>
2222
<li>Use a whitelist of known good patterns.</li>
2323
</ul>
2424

0 commit comments

Comments
 (0)