Skip to content

Commit b456a8c

Browse files
Apply suggestions from code review
Co-authored-by: mc <[email protected]>
1 parent 4d0635d commit b456a8c

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

rust/ql/src/queries/security/CWE-918/RequestForgery.qhelp

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ To guard against SSRF attacks, you should avoid putting user-provided input
2727
directly into a request URL. Instead, maintain a list of authorized URLs on the
2828
server; then choose from that list based on the input provided. Alternatively,
2929
ensure requests constructed from user input are limited to a particular host or
30-
more restrictive URL prefix.
30+
a more restrictive URL prefix.
3131
</p>
3232
</recommendation>
3333

@@ -44,7 +44,7 @@ known fixed string.
4444

4545
<references>
4646
<li>
47-
<a href="https://owasp.org/www-community/attacks/Server_Side_Request_Forgery">OWASP SSRF</a>
47+
<a href="https://owasp.org/www-community/attacks/Server_Side_Request_Forgery">OWASP Server Side Request Forgery</a>.
4848
</li>
4949
</references>
5050

0 commit comments

Comments
 (0)