Skip to content

Commit ae2d156

Browse files
committed
update qhelp phrasing
1 parent 738a697 commit ae2d156

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

powershell/ql/src/queries/security/cwe-829/DomainSquattingStatic.qhelp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@
55
<qhelp>
66

77
<overview>
8-
<p> Do not use domains like <code>*.outlook.us</code> and <code>*.office.us</code> are domains that are not owned by Microsoft, or deprecated domains such as <code>goo.gl</code>.
8+
<p> Do not use domains like <code>*.outlook.us</code> and <code>*.office.us</code>, as these are domains that are not owned by Microsoft. Also avoid using deprecated domains like <code>goo.gl</code>.
99
These domains are subject to domain squatting, which can introduce a security risk to services that trust them. </p>
1010

1111
<p>In addition to the above, <code>ajax.microsoft.com</code> and <code>ajax.aspnetcdn.com</code> host old JavaScript or old CSS in a non-production CDN. This CDN has no SLA, and could disappear at any time. We recommend that you move your assets local or serve them from a fully supported production CDN, such as the <a href="https://eng.ms/docs/experiences-devices/global-experiences-platform/es365/idc-fundamentals-1js/1js-monorepo/1js-repo-docs/team-documentation/midgard/engineering-system/cdn">M365 Shared CDN (1CDN)</a>.</p>

0 commit comments

Comments
 (0)