Skip to content

Commit f5ff508

Browse files
committed
Updated qhelp for the use of html_escape()
1 parent cc3cc1f commit f5ff508

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

ruby/ql/src/experimental/cwe-176/UnicodeBypassValidation.qhelp

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -16,10 +16,10 @@
1616
<example>
1717

1818
<p> The following example showcases the bypass of all checks performed by <code>
19-
flask.escape()</code> due to a post-unicode normalization.</p>
20-
<p>For instance: the character U+FE64 (<code>﹤</code>) is not filtered-out by the flask
21-
escape function. But due to the Unicode normalization, the character is transformed and
22-
would become U+003C (<code> &lt; </code> ).</p>
19+
html_escape()</code> due to a post-unicode normalization.</p>
20+
<p>For instance: the character U+FE64 (<code>﹤</code>) is not filtered-out by the
21+
html_escape() function. But due to the Unicode normalization, the character is
22+
transformed and would become U+003C (<code> &lt; </code> ).</p>
2323

2424
<sample src="./examples/unicode_normalization.rb" />
2525

0 commit comments

Comments
 (0)