Thanks to visit codestin.com Credit goes to github.com
We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 7536c49 commit 16429c8Copy full SHA for 16429c8
1 file changed
javascript/ql/src/Security/CWE-020/ExternalAPIsUsedWithUntrustedData.qhelp
@@ -11,7 +11,7 @@ may be relevant for security analysis of this application.</p>
11
<p>An external API is defined as a call to a function that is not defined in the source code, not overridden
12
in the source code, and is not modeled as a taint step in the default taint library. External APIs may be from the
13
third party dependencies or from internal dependencies. The query will report the external package name, followed
14
-by an access path leading to the function, followed <code>[param x]</code> where <code>x</code>
+by an access path leading to the function, followed by <code>[param x]</code> where <code>x</code>
15
indicates the position of the parameter receiving the untrusted data.</p>
16
17
</overview>
0 commit comments