Skip to content

Commit b9d4092

Browse files
Update java/ql/src/Security/CWE/CWE-023/PartialPathTraversalRemainder.inc.qhelp
Co-authored-by: Tony Torralba <[email protected]>
1 parent e641505 commit b9d4092

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

java/ql/src/Security/CWE/CWE-023/PartialPathTraversalRemainder.inc.qhelp

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -27,8 +27,8 @@ and not just children of <code>parent</code>, which is a security issue.
2727
<p>
2828

2929
In this example, the <code>if</code> statement checks if <code>parent.toPath()</code>
30-
is a prefix of <code>dir.normalize()</code>. Because <code>Path#startsWith</code> will do the correct check that
31-
<code>dir</code> is ia child children of <code>parent</code>, as desired.
30+
is a prefix of <code>dir.normalize()</code>. Because <code>Path#startsWith</code> does the correct check that
31+
<code>dir</code> is a child of <code>parent</code>, users will not be able to access siblings of <code>parent</code>, as desired.
3232

3333
</p>
3434

0 commit comments

Comments
 (0)