diff --git a/javascript/ql/src/Security/CWE-020/MissingOriginCheck.ql b/javascript/ql/src/Security/CWE-020/MissingOriginCheck.ql
index 543d3996abb..107f1c9a12c 100644
--- a/javascript/ql/src/Security/CWE-020/MissingOriginCheck.ql
+++ b/javascript/ql/src/Security/CWE-020/MissingOriginCheck.ql
@@ -9,6 +9,7 @@
  * @tags correctness
  *       security
  *       external/cwe/cwe-020
+ *       external/cwe/cwe-940
  */
 
 import javascript