hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-29 14:23:03 +01:00
Code Issues Packages Projects Releases Wiki Activity

reformat

Browse Source
This commit is contained in:
edvraa
2021-05-10 23:08:19 +03:00
committed by Owen Mansel-Chan
parent 4eb4787692
commit d32fa19c12
1 changed files with 10 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
ql/test/experimental/CWE-1004/CookieWithoutHttpOnly.go
View File

@@ -2,6 +2,7 @@ package main
import (
"net/http"
"github.com/gin-gonic/gin"
"github.com/gorilla/sessions"
)
@@ -146,7 +147,7 @@ func handler15(w http.ResponseWriter, r *http.Request) {
session.Values["foo"] = "secret"
session.Options = &sessions.Options{
MaxAge: -1,
MaxAge: -1,
}
session.Save(r, w) // BAD: default (false) is used
@@ -179,16 +180,16 @@ func handler17(w http.ResponseWriter, r *http.Request, httpOnly bool) {
func main() {
router := gin.Default()
router := gin.Default()
router.GET("/cookie", func(c *gin.Context) {
router.GET("/cookie", func(c *gin.Context) {
_, err := c.Cookie("session")
_, err := c.Cookie("session")
if err != nil {
c.SetCookie("session", "test", 3600, "/", "localhost", false, false) // BAD: httpOnly set to false
}
})
if err != nil {
c.SetCookie("session", "test", 3600, "/", "localhost", false, false) // BAD: httpOnly set to false
}
})
router.Run()
router.Run()
}