hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-21 11:16:30 +01:00
Code Issues Packages Projects Releases Wiki Activity

Update java/ql/src/Security/CWE/CWE-347/MissingJWTSignatureCheck.ql

Browse Source 
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
This commit is contained in:
Tony Torralba
2021-07-29 16:10:49 +02:00
committed by GitHub
parent ebf004a4df
commit 4ea6729c53
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
java/ql/src/Security/CWE/CWE-347/MissingJWTSignatureCheck.ql
View File

@@ -1,6 +1,6 @@
/**
* @name Missing JWT signature check
* @description Not checking the JWT signature allows an attacker to forge their own tokens.
* @description Failing to check the JWT signature may allow an attacker to forge their own tokens.
* @kind problem
* @problem.severity error
* @precision high