Correct identifier

[sydseter]

5 has been used for the previous list above.

[jgadsden]

a good change, thanks @sydseter
As we have the hood up, could we also consider rewording this line 52:

9. Avoid the use of known vulnerable functions (e.g., printf, strcat, strcpy etc.)

to be less C language specific? such as rewording as "9. Avoid the use of known vulnerable functions"

Unless it is only C that has known vulnerable functions, which may be the case