Skip to content

Commit 65b9947

Browse files
committed
Incorporate jksco's feedback
1 parent 781a2a7 commit 65b9947

1 file changed

Lines changed: 3 additions & 3 deletions

File tree

java/ql/src/Security/CWE/CWE-023/PartialPathTraversal.qhelp

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -3,9 +3,9 @@
33
"qhelp.dtd">
44
<qhelp>
55
<overview>
6-
<p>User supplied file paths can often pose security risks if a program does not correctly handle them. In particular, if a user
7-
is meant to access files under a certain directory but does not enters a path under that directory, they can gain access to
8-
(and potentially modify/delete) unexpected, possibly sensitive resources. </p>
6+
<p>User supplied file paths can often pose security risks if a program does not handle them correctly. In particular, if a user
7+
is meant to access files under a certain directory but does not enter a path under that directory, they can
8+
unexpectedly gain access to (and potentially modify/delete) possibly sensitive resources. </p>
99

1010
<p>Suppose a program is to only accept paths that point to files/folders within directory <code>DIR</code>.
1111
To ensure that a user supplied path, say <code>SUBDIR</code>, is a subdirectory of <code>DIR</code>, the

0 commit comments

Comments
 (0)