hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-23 07:45:17 +02:00
Code Issues Packages Projects Releases Wiki Activity

Ruby: recognise csrf_meta_tag

Browse Source 
csrf_meta_tag is an alias for csrf_meta_tags, retained for backwards
compatibility.
This commit is contained in:
Harry Maclean
2023-10-10 12:13:59 +01:00
parent f19a5a9837
commit 0597b2ed1b
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
ruby/ql/src/queries/security/cwe-352/CSRFProtectionNotEnabled.ql
View File

@@ -44,6 +44,6 @@ where
(
railsPreVersion3()
or
not any(MethodCall m).getMethodName() = "csrf_meta_tags"
not any(MethodCall m).getMethodName() = ["csrf_meta_tags", "csrf_meta_tag"]
)
select c, "Potential CSRF vulnerability due to forgery protection not being enabled."