Update javascript/ql/src/experimental/Security/CWE-614/InsecureCookie.qll

Co-authored-by: Esben Sparre Andreasen <esbena@github.com>
This commit is contained in:
Alessio Della Libera
2020-08-26 01:46:59 +02:00
committed by GitHub
parent 22f5ae4ad4
commit 57cf447188

View File

@@ -77,7 +77,7 @@ module Cookie {
*/
class InsecureExpressCookieResponse extends Cookie {
InsecureExpressCookieResponse() {
this = any(Express::ResponseExpr response).flow().getALocalSource().getAMethodCall("cookie")
this.calls(any(Express::ResponseExpr r).flow(), "cookie")
}
override string getKind() { result = "response.cookie" }