Skip to content

Commit 4d0635d

Browse files
Update qhelp for request forgery query
Co-authored-by: mc <[email protected]>
1 parent 065388d commit 4d0635d

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

rust/ql/src/queries/security/CWE-918/RequestForgery.qhelp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ request, if the request response is handled in an unsafe way.
2323

2424
<recommendation>
2525
<p>
26-
To guard against SSRF attacks you should avoid putting user-provided input
26+
To guard against SSRF attacks, you should avoid putting user-provided input
2727
directly into a request URL. Instead, maintain a list of authorized URLs on the
2828
server; then choose from that list based on the input provided. Alternatively,
2929
ensure requests constructed from user input are limited to a particular host or

0 commit comments

Comments
 (0)