diff --git a/java/src/security/CWE-089/MyBatisMapperXmlSqlInjection.ql b/java/src/security/CWE-089/MyBatisMapperXmlSqlInjection.ql index e347b40f..58b899f8 100644 --- a/java/src/security/CWE-089/MyBatisMapperXmlSqlInjection.ql +++ b/java/src/security/CWE-089/MyBatisMapperXmlSqlInjection.ql @@ -2,7 +2,7 @@ * @name SQL injection in MyBatis Mapper XML * @description Constructing a dynamic SQL statement with input that comes from an * untrusted source could allow an attacker to modify the statement's - * meaning or to execute arbitrary SQL commands. + * meaning or to execute arbitrary SQL commands. (test: targeted CI validation) * @kind path-problem * @problem.severity error * @precision high