hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-25 16:55:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

Apply suggestions from code review

Browse Source 
Co-authored-by: Ben Ahmady <32935794+subatoi@users.noreply.github.com>
This commit is contained in:
Tony Torralba
2024-02-19 08:59:03 +01:00
committed by GitHub
parent 582f341d9e
commit 8b8cebd599
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
go/ql/src/Security/CWE-347/MissingJwtSignatureCheck.qhelp
View File

@@ -9,11 +9,11 @@
library, or use a library that verifies it by default.</p>
</recommendation>
<example>
<p>The following example shows a case where a JWT is parsed without verifying the
<p>The following (bad) example shows a case where a JWT is parsed without verifying the
signature.</p>
<sample src="MissingJwtSignatureCheckBad.go" />
<p>In the example below, the appropriate function for parsing a JWT
and verifying its signature is used.</p>
<p>The following (good) example uses the appropriate function for parsing a JWT
and verifying its signature.</p>
<sample src="MissingJwtSignatureCheckGood.go" />
</example>
<references>

2
go/ql/src/Security/CWE-347/MissingJwtSignatureCheck.ql
View File

@@ -1,6 +1,6 @@
/**
* @name Missing JWT signature check
* @description Failing to check the Json Web Token (JWT) signature may allow an attacker to forge their own tokens.
* @description Failing to check the JSON Web Token (JWT) signature may allow an attacker to forge their own tokens.
* @kind path-problem
* @problem.severity error
* @security-severity 7.8