File tree Expand file tree Collapse file tree 1 file changed +3
-3
lines changed
java/ql/src/Security/CWE/CWE-094 Expand file tree Collapse file tree 1 file changed +3
-3
lines changed Original file line number Diff line number Diff line change @@ -21,12 +21,12 @@ This can lead to remote code execution.
2121<sample src =" SSTIBad.java" />
2222
2323<p >
24- In the next example the problem is avoided by using a fixed template string <code >s</code >.
25- Since the template's code is not attacker-controlled in this case, the untrusted code execution is prevented .
24+ In the next example, the problem is avoided by using a fixed template string <code >s</code >.
25+ Since the template's code is not attacker-controlled in this case, this solution prevents the execution of untrusted code .
2626</p >
2727<sample src =" SSTIGood.java" />
2828</example >
2929<references >
30- <li >Portswigger: <a href =" https://portswigger.net/web-security/server-side-template-injection" >Server Side Template Injection</a ></li >
30+ <li >Portswigger: <a href =" https://portswigger.net/web-security/server-side-template-injection" >Server Side Template Injection</a >. </li >
3131</references >
3232</qhelp >
You can’t perform that action at this time.
0 commit comments