hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 18:25:24 +02:00
Code Issues Packages Projects Releases Wiki Activity

prepare move to non-experimental

Browse Source
This commit is contained in:
Erik Krogh Kristensen
2021-10-04 22:41:48 +02:00
parent 44db920f10
commit 26a24a3895
3 changed files with 46 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
javascript/ql/src/experimental/Security/CWE-1004/CookieWithoutHttpOnly.ql
View File

@@ -13,8 +13,15 @@
*/
import javascript
import experimental.semmle.javascript.security.InsecureCookie::Cookie
import experimental.semmle.javascript.security.InsecureCookie::Cookie as ExperimentalCookie
from CookieWrite cookie
where cookie.isSensitive() and not cookie.isHttpOnly()
select cookie, "Cookie attribute 'HttpOnly' is not set to true for this sensitive cookie."
from DataFlow::Node node
where
exists(ExperimentalCookie::CookieWrite cookie | cookie = node |
cookie.isSensitive() and not cookie.isHttpOnly()
)
or
exists(CookieWrites::CookieWrite cookie | cookie = node |
cookie.isSensitive() and not cookie.isHttpOnly()
)
select node, "Cookie attribute 'HttpOnly' is not set to true for this sensitive cookie."

11
javascript/ql/src/experimental/Security/CWE-614/InsecureCookie.ql
View File

@@ -11,8 +11,11 @@
*/
import javascript
import experimental.semmle.javascript.security.InsecureCookie::Cookie
import experimental.semmle.javascript.security.InsecureCookie::Cookie as ExperimentalCookie
from CookieWrite cookie
where not cookie.isSecure()
select cookie, "Cookie is added to response without the 'secure' flag being set to true"
from DataFlow::Node node
where
exists(ExperimentalCookie::CookieWrite cookie | cookie = node | not cookie.isSecure())
or
exists(CookieWrites::CookieWrite cookie | cookie = node | not cookie.isSecure())
select node, "Cookie is added to response without the 'secure' flag being set to true"