Skip to content

Commit b896970

Browse files
committed
Delete the vulnerability flow image from the QHelp file.
1 parent 16ce024 commit b896970

File tree

2 files changed

+4
-5
lines changed

2 files changed

+4
-5
lines changed

python/ql/src/experimental/Security/CWE-176/UnicodeBypassValidation.qhelp

Lines changed: 4 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -2,11 +2,10 @@
22
<qhelp>
33
<overview>
44
<p>Security checks bypass due to a Unicode transformation</p>
5-
<p>
6-
If security checks or logical validation is performed before unicode normalization, the security checks or logical validation could be bypassed due to a potential Unicode character collision.
7-
The validation we consider are: any character escaping, any regex validation, or any string manipulation (such as <code>str.split</code>).
8-
</p>
9-
<img src="./vulnerability-flow.png" alt="Security checks bypassed" />
5+
<p> If security checks or logical validation is performed before unicode normalization, the
6+
security checks or logical validation could be bypassed due to a potential Unicode
7+
character collision. The validation we consider are: any character escaping, any regex
8+
validation, or any string manipulation (such as <code>str.split</code>). </p>
109
</overview>
1110
<recommendation>
1211
<p> Perform Unicode normalization before the logical validation. </p>
Binary file not shown.

0 commit comments

Comments
 (0)