diff --git a/ql/src/Security/CWE-295/DisabledCertificateCheck.ql b/ql/src/Security/CWE-295/DisabledCertificateCheck.ql index 268a9a5bf09..7b4340818b1 100644 --- a/ql/src/Security/CWE-295/DisabledCertificateCheck.ql +++ b/ql/src/Security/CWE-295/DisabledCertificateCheck.ql @@ -8,7 +8,9 @@ * @id go/disabled-certificate-check * @tags security * external/cwe/cwe-295 - * + */ + +/* * The approach taken by this query is to look for assignments that set `InsecureSkipVerify` * (from struct `Config` of package `crypto/tls`) to `true`. We exclude assignments that are * guarded by a feature-flag selecting whether verification should be skipped or not, since