Skip to content

Commit 49985a7

Browse files
JLLeitschuhMarcono1234owen-mc
authored
Apply suggestions from code review
Co-authored-by: Marcono1234 <Marcono1234@users.noreply.github.com> Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com>
1 parent f00b0ba commit 49985a7

File tree

1 file changed

+5
-5
lines changed

1 file changed

+5
-5
lines changed

java/ql/src/Security/CWE/CWE-1104/MavenPomDependsOnBintray.qhelp

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -10,29 +10,29 @@ for example, artifacts being resolved from different artifact server or total br
1010
<p>When artifact repositories are left unmaintained for a long period of time, vulnerabilities may emerge.
1111
Theoretically, this could allow attackers to inject malicious code into the artifacts that you are resolving and infect build artifacts
1212
that are being produced. This can be used by attackers to perform a
13-
<a href="https://en.wikipedia.org/wiki/Supply_chain_attack">Supply chain attack</a>
13+
<a href="https://en.wikipedia.org/wiki/Supply_chain_attack">supply chain attack</a>
1414
against your project's users.
1515
</p>
1616

1717
</overview>
1818
<recommendation>
1919

20-
<p>Always use the cononical repository for resolving your dependencies.</p>
20+
<p>Always use the canonical repository for resolving your dependencies.</p>
2121

2222
</recommendation>
2323

2424
<example>
2525

26-
<p>This examples show examples of locations in Maven POM files where artifact repository upload/download is configured.
27-
The use of Bintray in any of these locaitons is not advised.
26+
<p>The following example shows locations in a Maven POM file where artifact repository upload/download is configured.
27+
The use of Bintray in any of these locations is not advised.
2828
</p>
2929

3030
<sample src="bad-bintray-pom.xml" />
3131

3232
</example>
3333
<references>
3434
<li>
35-
Blog:
35+
JFrog blog:
3636
<a href="https://jfrog.com/blog/into-the-sunset-bintray-jcenter-gocenter-and-chartcenter/">
3737
Into the Sunset on May 1st: Bintray, JCenter, GoCenter, and ChartCenter
3838
</a>

0 commit comments

Comments
 (0)