mirror of
https://github.com/github/codeql.git
synced 2025-12-16 16:53:25 +01:00
3 lines
278 B
Markdown
3 lines
278 B
Markdown
lgtm,codescanning
|
|
* The query "Use of constant `state` value in OAuth 2.0 URL" (`go/constant-oauth2-state`) has been promoted from experimental status. This checks for use of a constant state value in generating an OAuth2 redirect URL, which may open the way for a CSRF attack.
|