hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-18 09:43:15 +01:00
Code Issues Packages Projects Releases Wiki Activity

add x-gitlab-token to sensitive headers

Browse Source
This commit is contained in:
Ahmed Farid
2022-08-23 12:27:20 +01:00
committed by GitHub
parent bd45ea94d0
commit ee05e2ca76
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
python/ql/src/experimental/semmle/python/security/TimingAttack.qll
View File

@@ -162,7 +162,7 @@ private string sensitiveheaders() {
result =
[
"x-auth-token", "x-csrf-token", "http_x_csrf_token", "x-csrf-param", "x-csrf-header",
"http_x_csrf_token", "x-api-key", "authorization", "proxy-authorization"
"http_x_csrf_token", "x-api-key", "authorization", "proxy-authorization", "x-gitlab-token"
]
}