Skip to content

Commit 9765598

Browse files
Python: Reword qhelp text
Co-authored-by: Felicity Chapman <felicitymay@github.com>
1 parent a9ce067 commit 9765598

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

python/ql/src/Security/CWE-022/PathInjection.qhelp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ In the second example, it appears that the user is restricted to opening a file
4343
special characters. For example, the string <code>"../../../etc/passwd"</code> will result in the code
4444
reading the file located at <code>"/server/static/images/../../../etc/passwd"</code>, which is the system's
4545
password file. This file would then be sent back to the user, giving them access to all the
46-
system's passwords. Note that it is still possible to use an absolute path, since the result of
46+
system's passwords. Note that a user could also use an absolute path here, since the result of
4747
<code>os.path.join("/server/static/images/", "/etc/passwd")</code> is <code>"/etc/passwd"</code>.
4848
</p>
4949

0 commit comments

Comments
 (0)