hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 11:15:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix good/bad mixup in ClientExposedCookie qhelp

Browse Source
This commit is contained in:
Erik Krogh Kristensen
2022-01-24 15:34:30 +01:00
parent b2dc02b831
commit bb786bc557
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
javascript/ql/src/Security/CWE-1004/ClientExposedCookie.qhelp
View File

@@ -23,12 +23,12 @@ Set the <code>httpOnly</code> flag on all cookies that are not needed by the cli
The following example stores an authentication token in a cookie that can
be viewed by the client.
</p>
<sample src="examples/ClientExposedCookieGood.js"/>
<sample src="examples/ClientExposedCookieBad.js"/>
<p>
To force the cookie to be transmitted using SSL, set the <code>secure</code>
attribute on the cookie.
</p>
<sample src="examples/ClientExposedCookieBad.js"/>
<sample src="examples/ClientExposedCookieGood.js"/>
</example>
<references>