Skip to content

Commit

Permalink
Merge pull request #102 from mweiden/fix-injection-copy
Browse files Browse the repository at this point in the history
Fix injection copy.
  • Loading branch information
h3xstream committed Sep 24, 2015
2 parents 69dbdc2 + f59cf04 commit e46f1ca
Showing 1 changed file with 4 additions and 4 deletions.
8 changes: 4 additions & 4 deletions plugin/src/main/resources/metadata/messages.xml
Original file line number Diff line number Diff line change
Expand Up @@ -1065,7 +1065,7 @@ This class should be analyzed to make sure that remotely exposed methods are saf

<BugPattern type="CUSTOM_INJECTION">
<ShortDescription>Potential Injection</ShortDescription>
<LongDescription>The use of the method {3} is potentially vulnerable injection.</LongDescription>
<LongDescription>The use of the method {3} is potentially vulnerable to injection.</LongDescription>
<Details>
<![CDATA[
<p>
Expand Down Expand Up @@ -1168,7 +1168,7 @@ q.execute();</pre>
<!-- JDOQL Injection -->
<BugPattern type="SQL_INJECTION_JDO">
<ShortDescription>Potential SQL/JDOQL Injection (JDO)</ShortDescription>
<LongDescription>The query is potentially vulnerable SQL/JDOQL injection</LongDescription>
<LongDescription>The query is potentially vulnerable to SQL/JDOQL injection</LongDescription>
<Details>
<![CDATA[
<p>
Expand Down Expand Up @@ -1377,7 +1377,7 @@ Therefore, the primary defense against LDAP injection is strong input validation

<BugPattern type="SCRIPT_ENGINE_INJECTION">
<ShortDescription>Potential code injection when using Script Engine</ShortDescription>
<LongDescription>This code evaluation could be vulnerable code injection</LongDescription>
<LongDescription>This code evaluation could be vulnerable to code injection</LongDescription>
<Details>
<![CDATA[
<p>
Expand Down Expand Up @@ -1440,7 +1440,7 @@ public void runCustomTrigger(String script) {

<BugPattern type="SPEL_INJECTION">
<ShortDescription>Potential code injection when using Spring Expression</ShortDescription>
<LongDescription>This code evaluation could be vulnerable code injection</LongDescription>
<LongDescription>This code evaluation could be vulnerable to code injection</LongDescription>
<Details>
<![CDATA[
<p>
Expand Down

0 comments on commit e46f1ca

Please sign in to comment.