hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-03-22 15:36:48 +01:00
Code Issues Packages Projects Releases Wiki Activity

JS: review fixups in documentation and comments

Browse Source
This commit is contained in:
Esben Sparre Andreasen
2018-08-20 11:23:53 +02:00
parent 0c4fb15651
commit 6950bfe915
6 changed files with 21 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
javascript/ql/src/Security/CWE-312/CleartextLogging.ql
View File

@@ -1,11 +1,11 @@
/**
* @name Clear text logging of sensitive information
* @description Sensitive information logged without encryption or hashing can expose it to an
* attacker.
* @name Clear-text logging of sensitive information
* @description Logging sensitive information without encryption or hashing can
* expose it to an attacker.
* @kind problem
* @problem.severity error
* @precision high
* @id js/cleartext-logging
* @id js/clear-text-logging
* @tags security
* external/cwe/cwe-312
* external/cwe/cwe-315

2
javascript/ql/src/Security/CWE-312/CleartextStorage.qhelp
View File

@@ -15,7 +15,7 @@ which are stored on the machine of the end-user.
<p>
Ensure that sensitive information is always encrypted before being stored.
If possible, avoid placing sensitive information in cookies altogether.
Instead, prefer storing, in the cookie, a key that can be used to lookup the
Instead, prefer storing, in the cookie, a key that can be used to look up the
sensitive information.
</p>
<p>