mirror of
https://github.com/github/codeql.git
synced 2026-08-03 17:03:02 +02:00
38 lines
1.3 KiB
Ruby
38 lines
1.3 KiB
Ruby
require 'rails'
|
|
|
|
module App
|
|
class Application < Rails::Application
|
|
config.load_defaults 6.0
|
|
|
|
# GOOD: strong cipher
|
|
config.action_dispatch.encrypted_cookie_cipher = "aes-256-gcm"
|
|
|
|
# GOOD: strong cipher
|
|
config.action_dispatch.encrypted_cookie_cipher = "ChaCha"
|
|
|
|
# BAD: weak block encryption algorithm
|
|
config.action_dispatch.encrypted_cookie_cipher = "DES" # $ Alert[rb/weak-cookie-configuration]
|
|
|
|
# BAD: weak block encryption mode
|
|
config.action_dispatch.encrypted_cookie_cipher = "AES-256-ECB" # $ Alert[rb/weak-cookie-configuration]
|
|
|
|
# GOOD
|
|
config.action_dispatch.use_authenticated_cookie_encryption = true
|
|
|
|
# BAD: less secure block encryption mode
|
|
config.action_dispatch.use_authenticated_cookie_encryption = false # $ Alert[rb/weak-cookie-configuration]
|
|
|
|
# GOOD
|
|
config.action_dispatch.cookies_same_site_protection = :lax
|
|
|
|
# GOOD
|
|
config.action_dispatch.cookies_same_site_protection = "strict"
|
|
|
|
# BAD: disabling same-site protections for sending cookies
|
|
config.action_dispatch.cookies_same_site_protection = :none # $ Alert[rb/weak-cookie-configuration]
|
|
|
|
# BAD: not all browsers default to `lax` if unset
|
|
config.action_dispatch.cookies_same_site_protection = nil # $ Alert[rb/weak-cookie-configuration]
|
|
end
|
|
end
|