Update java/ql/src/experimental/Security/CWE/CWE-348/UseOfLessTrustedSource.ql

haby0 · smowton · web-flow · commit b1ee864ad94a · 2021-04-20T19:35:52.000+08:00
Co-authored-by: Chris Smowton &lt;smowton@github.com&gt;
diff --git a/java/ql/src/experimental/Security/CWE/CWE-348/UseOfLessTrustedSource.ql b/java/ql/src/experimental/Security/CWE/CWE-348/UseOfLessTrustedSource.ql
@@ -1,7 +1,6 @@
 /**
  * @name IP address spoofing
- * @description The software obtains the client ip from the remote endpoint identifier specified (`X-Forwarded-For`,
- *              `X-Real-IP`, `Proxy-Client-IP`, etc.) in the header and uses it. Attackers can modify these The value
+ * @description A remote endpoint identifier is read from an HTTP header. Attackers can modify the value
  *              of the identifier to forge the client ip.
  * @kind path-problem
  * @problem.severity error
