Skip to content

Commit ad63dd9

Browse files
jcogs33mchammer01
andauthored
Apply suggestions from docs review
Co-authored-by: mc <[email protected]>
1 parent 0eec951 commit ad63dd9

File tree

3 files changed

+3
-3
lines changed

3 files changed

+3
-3
lines changed

java/ql/src/Security/CWE/CWE-200/SpringBootActuators.qhelp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ even to remote code execution.</p>
1212
<p>Since actuator endpoints may contain sensitive information, carefully consider when to expose them,
1313
and secure them as you would any sensitive URL. Actuators are secured by default when using Spring
1414
Security without a custom configuration. If you wish to define a custom security configuration,
15-
consider only allowing users with certain roles access to the endpoints.
15+
consider only allowing users with certain roles to access these endpoints.
1616
</p>
1717

1818
</recommendation>

java/ql/src/Security/CWE/CWE-200/SpringBootActuators.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
/**
22
* @name Exposed Spring Boot actuators
3-
* @description Exposing Spring Boot actuators may lead to internal application's information leak
3+
* @description Exposing Spring Boot actuators may lead to information leak from the internal application,
44
* or even to remote code execution.
55
* @kind problem
66
* @problem.severity error
Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
11
---
22
category: newQuery
33
---
4-
* The query `java/spring-boot-exposed-actuators` has been promoted from experimental to the main query pack. Its results will now appear by default, and it will be removed from the [CodeQL Community Packs](https://github.com/GitHubSecurityLab/CodeQL-Community-Packs). This query was originally submitted as an experimental query [by @ggolawski](https://github.com/github/codeql/pull/2901).
4+
* The query `java/spring-boot-exposed-actuators` has been promoted from experimental to the main query pack. Its results will now appear by default, and the query itself will be removed from the [CodeQL Community Packs](https://github.com/GitHubSecurityLab/CodeQL-Community-Packs). This query was originally submitted as an experimental query [by @ggolawski](https://github.com/github/codeql/pull/2901).

0 commit comments

Comments
 (0)