hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-16 16:53:25 +01:00
Code Issues Packages Projects Releases Wiki Activity

Align alert messages across languages.

Browse Source
This commit is contained in:
Joe Farebrother
2025-09-23 15:46:53 +01:00
parent 2cffb21604
commit 1208195d8a
3 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
python/ql/src/Security/CWE-1004/NonHttpOnlyCookie.ql
View File

@@ -1,5 +1,5 @@
/**
* @name Cookie missing `HttpOnly` attribute.
* @name Sensitive cookie missing `HttpOnly` attribute.
* @description Cookies without the `HttpOnly` attribute set can be accessed by JS scripts, making them more vulnerable to XSS attacks.
* @kind problem
* @problem.severity warning
@@ -18,4 +18,4 @@ from Http::Server::CookieWrite cookie
where
cookie.hasHttpOnlyFlag(false) and
cookie.isSensitive()
select cookie, "Cookie is added without the HttpOnly attribute properly set."
select cookie, "Sensitive cookie is set without HttpOnly flag."

4
python/ql/src/Security/CWE-1275/SameSiteNoneCookie.ql
View File

@@ -1,5 +1,5 @@
/**
* @name Cookie with `SameSite` attribute set to `None`.
* @name Sensitive cookie with `SameSite` attribute set to `None`.
* @description Cookies with `SameSite` set to `None` can allow for Cross-Site Request Forgery (CSRF) attacks.
* @kind problem
* @problem.severity warning
@@ -18,4 +18,4 @@ from Http::Server::CookieWrite cookie
where
cookie.hasSameSiteAttribute(any(Http::Server::CookieWrite::SameSiteNone v)) and
cookie.isSensitive()
select cookie, "Cookie is added with the SameSite attribute set to None."
select cookie, "Sensitive cookie with SameSite set to 'None'."

2
python/ql/src/Security/CWE-614/InsecureCookie.ql
View File

@@ -19,4 +19,4 @@ from Http::Server::CookieWrite cookie
where
cookie.hasSecureFlag(false) and
cookie.isSensitive()
select cookie, "Cookie is added without the Secure attribute properly set."
select cookie, "Cookie is added to response without the 'secure' flag being set."