hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 18:25:24 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #15585 from atorralba/atorralba/go/promote-jwt-unsafe-verification

Browse Source 
Go: Promote `go/missing-jwt-signature-check` from experimental
This commit is contained in:
Tony Torralba
2024-02-19 15:35:44 +01:00
committed by GitHub
parent 164250186a 8b8cebd599
commit 1704bfe2bf
27 changed files with 346 additions and 142 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
shared/mad/codeql/mad/ModelValidation.qll
View File

@@ -39,7 +39,9 @@ module KindValidation<KindValidationConfigSig Config> {
"mongodb.sink", "nosql-injection", "unsafe-deserialization",
// Swift-only currently, but may be shared in the future
"database-store", "format-string", "hash-iteration-count", "predicate-injection",
"preferences-store", "tls-protocol-version", "transmission", "webview-fetch", "xxe"
"preferences-store", "tls-protocol-version", "transmission", "webview-fetch", "xxe",
// Go-only currently, but may be shared in the future
"jwt"
]
or
this.matches([