hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-29 10:45:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Apply suggestions from code review

Browse Source 
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
This commit is contained in:
Toufik Airane
2020-06-22 19:27:36 +02:00
committed by GitHub
parent 4853b8a281
commit bb7ba50e23
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
javascript/ql/src/experimental/Security/CWE-347/JWTMissingSecretOrPublicKeyVerification.ql
View File

@@ -4,7 +4,7 @@
* @kind problem
* @problem.severity warning
* @precision high
* @id js/jwt-missing-secret-or-public-key-verification
* @id js/jwt-missing-verification
* @tags security
* external/cwe/cwe-347
*/
@@ -15,5 +15,5 @@ import DataFlow
from CallNode call
where
call = moduleMember("jsonwebtoken", "verify").getACall() and
call.getArgument(1).analyze().getABooleanValue() = false
unique(boolean b | b = call.getArgument(1).analyze().getABooleanValue()) = false
select call