We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 9432fec commit 5124310Copy full SHA for 5124310
1 file changed
javascript/ql/src/Security/CWE-730/ServerCrash.qhelp
@@ -43,9 +43,9 @@
43
<p>
44
45
The following server code checks if a client-provided file path is valid
46
- before saving data to it. It would be reasonable to expect that the
47
- server responds with an error response to client requests with invalid
48
- file paths. However, the server instead throws an exception, which is
+ before saving data to that path. It would be reasonable to expect that the
+ server responds with an error in case the request contains an invalid
+ file path. However, the server instead throws an exception, which is
49
uncaught in the context of the asynchronous callback invocation
50
(<code>fs.access(...)</code>). This causes the entire server to
51
terminate abruptly.
0 commit comments