hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-01 03:35:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

JS: Clarify that strings are case insensitive by default

Browse Source
This commit is contained in:
Asger F
2022-06-28 10:09:56 +02:00
parent b1251f0c63
commit 9cf48fc804
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
javascript/ql/src/Security/CWE-178/CaseSensitiveMiddlewarePath.qhelp
View File

@@ -7,6 +7,7 @@
<p>
Using a case-sensitive regular expression path in a middleware route enables an attacker to bypass that middleware
when accessing an endpoint with a case-insensitive path.
Paths specified using a string are case insensitive, whereas regular expressions are case sensitive by default.
</p>
</overview>