Files
codeql/python/ql/test/experimental/query-tests/Security/CWE-347/python_jwt.py
2026-06-15 16:15:17 +01:00

15 lines
226 B
Python

import python_jwt
# GOOD
def good(token):
python_jwt.process_jwt(token)
python_jwt.verify_jwt(token, "key", "HS256")
# BAD
def bad(token):
python_jwt.process_jwt(token) # $ Alert[py/jwt-missing-verification]