mirror of
https://github.com/github/codeql.git
synced 2026-04-25 16:55:19 +02:00
Update ruby/ql/src/experimental/cwe-347/EmptyJWTSecret.ql
Co-authored-by: Alex Ford <alexrford@users.noreply.github.com>
This commit is contained in:
@@ -12,4 +12,4 @@ private import codeql.ruby.Concepts
|
||||
|
||||
from JwtEncoding jwtEncoding
|
||||
where not jwtEncoding.signsPayload()
|
||||
select jwtEncoding.getPayload(), "This JWT encoding uses empty key or none algorithm."
|
||||
select jwtEncoding.getPayload(), "This JWT encoding uses an empty key or none algorithm."
|
||||
|
||||
Reference in New Issue
Block a user