diff --git a/go/ql/src/Security/CWE-022/TaintedPath.qhelp b/go/ql/src/Security/CWE-022/TaintedPath.qhelp index 3b54e80cd97c..94edec4e4f4b 100644 --- a/go/ql/src/Security/CWE-022/TaintedPath.qhelp +++ b/go/ql/src/Security/CWE-022/TaintedPath.qhelp @@ -64,9 +64,9 @@ path separators or ".." sequences. Note that this approach is only suitable if the input is expected to be a single file name.

-If the input can be a path with multiple components, we can make it safe by verifying +If the input can be a path with multiple components, you can make it safe by verifying that the path is within a specific directory that is considered safe. -This can be done by resolving the input with respect to that directory, and then checking +You can do this by resolving the input with respect to that directory, and then checking that the resulting path is still within it.