mirror of
https://github.com/github/codeql.git
synced 2026-04-28 18:25:24 +02:00
49d826f667
Specifically in Rails apps, we look for root ActionController classes without a call to `protect_from_forgery`.
2 lines
171 B
Plaintext
2 lines
171 B
Plaintext
| railsapp/app/controllers/alternative_root_controller.rb:1:1:3:3 | AlternativeRootController | Potential CSRF vulnerability due to forgery protection not being enabled |
|