Skip to content

Commit

Permalink
Update webservice-ssrf.yaml (#3380)
Browse files Browse the repository at this point in the history
I corrected the word runnig to running in the message(:

Co-authored-by: Vasilii Ermilov <inkz@xakep.ru>
  • Loading branch information
amitfurman and inkz committed May 9, 2024
1 parent 9bc127c commit 48f6e91
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion scala/play/security/webservice-ssrf.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ rules:
A parameter being passed directly into `WSClient` most likely lead to SSRF.
This could allow an attacker to send data to their own server, potentially exposing sensitive data
sent with this request.
They could also probe internal servers or other resources that the server runnig this code can access.
They could also probe internal servers or other resources that the server running this code can access.
Do not allow arbitrary hosts. Instead, create an allowlist for approved hosts hardcode the correct
host.
metadata:
Expand Down

0 comments on commit 48f6e91

Please sign in to comment.