Skip to content

Commit 8d88af1

Browse files
Apply docs review suggestions
Co-authored-by: Sam Browning <106113886+sabrowning1@users.noreply.github.com>
1 parent 4eb1035 commit 8d88af1

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

java/ql/src/Security/CWE/CWE-501/TrustBoundaryViolation.qhelp

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -22,18 +22,18 @@
2222

2323
<recommendation>
2424
<p>
25-
In order to maintain a trust boundary, data from less trusted sources should be validated before being used.
25+
To maintain a trust boundary, validate data from less trusted sources before use.
2626
</p>
2727
</recommendation>
2828

2929
<example>
3030
<p>
31-
In the first (bad) example, the server accepts a parameter from the user and uses it to set the username without validation.
31+
In the first (bad) example, the server accepts a parameter from the user, then uses it to set the username without validation.
3232
</p>
3333
<sample src="TrustBoundaryVulnerable.java" />
3434

3535
<p>
36-
In the second (good) example, the server validates the parameter before using it to set the username.
36+
In the second (good) example, the server validates the parameter from the user, then uses it to set the username.
3737
</p>
3838
<sample src="TrustBoundaryFixed.java" />
3939

0 commit comments

Comments
 (0)