Skip to content

Commit e387d60

Browse files
committed
C# remove spurious spaces in <code> tag
1 parent aa19fe6 commit e387d60

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

csharp/ql/src/Input Validation/ValueShadowing.qhelp

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,8 +5,8 @@
55
<overview>
66
<p>Relying on <code>HttpRequest</code> to provide access to a particular client variable is not
77
safe. The <code>HttpRequest</code> class implements an indexer to provide a simplified, combined
8-
access to its <code>QueryString</code>, <code>Form</code>, <code>Cookies</code>, or <code>
9-
ServerVariables</code> collections, in that particular order. When searching for a variable, the
8+
access to its <code>QueryString</code>, <code>Form</code>, <code>Cookies</code>, or
9+
<code>ServerVariables</code> collections, in that particular order. When searching for a variable, the
1010
first match is returned: <code>QueryString</code> parameters hence supersede values from forms,
1111
cookies and server variables, and so on. This is a serious attack vector since an attacker could
1212
inject a value in the query string that you do not expect, and which supersedes the value of a more

0 commit comments

Comments
 (0)