hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 11:15:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

apply all doc fixes

Browse Source 
Co-authored-by: hubwriter <hubwriter@github.com>
This commit is contained in:
Erik Krogh Kristensen
2021-10-28 18:19:37 +02:00
committed by GitHub
parent c34b089bc5
commit cfc5629435
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
javascript/ql/src/Security/CWE-1004/ClientExposedCookie.qhelp
View File

@@ -21,7 +21,7 @@ Set the <code>httpOnly</code> flag on all cookies that are not needed by the cli
<example>
<p>
The following example stores an authentication token in a cookie that can
viewed by the client.
be viewed by the client.
</p>
<sample src="examples/ClientExposedCookieGood.js"/>
<p>
@@ -34,7 +34,7 @@ attribute on the cookie.
<references>
<li>ExpressJS: <a href="https://expressjs.com/en/advanced/best-practice-security.html#use-cookies-securely">Use cookies securely</a>.</li>
<li>OWASP: <a href="https://cheatsheetseries.owasp.org/cheatsheets/Nodejs_Security_Cheat_Sheet.html#set-cookie-flags-appropriately">Set cookie flags appropriately</a>.</li>
<li><a href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie">Set-Cookie</a>.</li>
<li>Mozilla: <a href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie">Set-Cookie</a>.</li>
</references>
</qhelp>

2
javascript/ql/src/Security/CWE-614/ClearTextCookie.qhelp
View File

@@ -33,6 +33,6 @@ attribute on the cookie.
<references>
<li>ExpressJS: <a href="https://expressjs.com/en/advanced/best-practice-security.html#use-cookies-securely">Use cookies securely</a>.</li>
<li>OWASP: <a href="https://cheatsheetseries.owasp.org/cheatsheets/Nodejs_Security_Cheat_Sheet.html#set-cookie-flags-appropriately">Set cookie flags appropriately</a>.</li>
<li><a href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie">Set-Cookie</a>.</li>
<li>Mozilla: <a href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie">Set-Cookie</a>.</li>
</references>
</qhelp>