mirror of
https://github.com/github/codeql.git
synced 2026-04-29 18:55:14 +02:00
Update javascript/ql/src/experimental/Security/CWE-614/InsecureCookie.qll
Co-authored-by: Esben Sparre Andreasen <esbena@github.com>
This commit is contained in:
committed by
GitHub
parent
22f5ae4ad4
commit
57cf447188
@@ -77,7 +77,7 @@ module Cookie {
|
||||
*/
|
||||
class InsecureExpressCookieResponse extends Cookie {
|
||||
InsecureExpressCookieResponse() {
|
||||
this = any(Express::ResponseExpr response).flow().getALocalSource().getAMethodCall("cookie")
|
||||
this.calls(any(Express::ResponseExpr r).flow(), "cookie")
|
||||
}
|
||||
|
||||
override string getKind() { result = "response.cookie" }
|
||||
|
||||
Reference in New Issue
Block a user