Files
codeql/ruby/ql/test/query-tests/security/cwe-352/CSRFProtectionNotEnabled.expected
Harry Maclean 32b775fdc3 Ruby: reduce duplicate alerts for csrf query
Only generate an alert on the top-most vulnerable Rails controller in
the controller tree.
2024-02-23 11:13:17 +00:00

2 lines
172 B
Plaintext

| railsapp/app/controllers/alternative_root_controller.rb:1:1:3:3 | AlternativeRootController | Potential CSRF vulnerability due to forgery protection not being enabled. |