Skip to content

Commit f587db4

Browse files
C# remove spurious spaces in <code> tag
1 parent c4322fd commit f587db4

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

csharp/ql/src/Input Validation/ValueShadowingServerVariable.qhelp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@
66
<p>Relying on <code>HttpRequest</code> to provide access to a particular server variable is not
77
safe as it can be overridden by the client. The <code>HttpRequest</code> class implements an
88
indexer to provide a simplified, combined access to its <code>QueryString</code>, <code>Form</code>
9-
, <code>Cookies</code>, or <code> ServerVariables</code> collections, in that particular order.
9+
, <code>Cookies</code>, or <code>ServerVariables</code> collections, in that particular order.
1010
When searching for a variable, the first match is returned: <code>QueryString</code> parameters
1111
hence supersede values from forms, cookies and server variables, and so on. This is a serious
1212
attack vector since an attacker could inject a value in the query string that you do not expect,

0 commit comments

Comments
 (0)