We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 065388d commit 4d0635dCopy full SHA for 4d0635d
rust/ql/src/queries/security/CWE-918/RequestForgery.qhelp
@@ -23,7 +23,7 @@ request, if the request response is handled in an unsafe way.
23
24
<recommendation>
25
<p>
26
-To guard against SSRF attacks you should avoid putting user-provided input
+To guard against SSRF attacks, you should avoid putting user-provided input
27
directly into a request URL. Instead, maintain a list of authorized URLs on the
28
server; then choose from that list based on the input provided. Alternatively,
29
ensure requests constructed from user input are limited to a particular host or
0 commit comments