hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-17 01:03:14 +01:00
Code Issues Packages Projects Releases Wiki Activity

Update alert message

Browse Source
This commit is contained in:
Joe Farebrother
2025-09-25 09:52:27 +01:00
parent 9f5bfeb7f4
commit cb7b1efe81
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
python/ql/src/Security/CWE-1004/NonHttpOnlyCookie.ql
View File

@@ -18,4 +18,4 @@ from Http::Server::CookieWrite cookie
where where
cookie.hasHttpOnlyFlag(false) and cookie.hasHttpOnlyFlag(false) and
cookie.isSensitive() cookie.isSensitive()
select cookie, "Sensitive cookie is set without HttpOnly flag." select cookie, "Sensitive server cookie is set without HttpOnly flag."

6
python/ql/test/query-tests/Security/CWE-1004-NonHttpOnlyCookie/NonHttpOnlyCookie.expected
View File

@@ -1,3 +1,3 @@
| test.py:8:5:8:38 | ControlFlowNode for Attribute() | Sensitive cookie is set without HttpOnly flag. | | test.py:8:5:8:38 | ControlFlowNode for Attribute() | Sensitive server cookie is set without HttpOnly flag. |
| test.py:9:5:9:51 | ControlFlowNode for Attribute() | Sensitive cookie is set without HttpOnly flag. | | test.py:9:5:9:51 | ControlFlowNode for Attribute() | Sensitive server cookie is set without HttpOnly flag. |
| test.py:11:5:11:57 | ControlFlowNode for Attribute() | Sensitive cookie is set without HttpOnly flag. | | test.py:11:5:11:57 | ControlFlowNode for Attribute() | Sensitive server cookie is set without HttpOnly flag. |