mirror of
https://github.com/github/codeql.git
synced 2026-03-01 13:23:49 +01:00
404 B
404 B
0.0.8
New Queries
- Added a new query,
rb/weak-cookie-configuration. The query finds cases where cookie configuration options are set to values that may make an application more vulnerable to certain attacks.
Minor Analysis Improvements
- The query
rb/csrf-protection-disabledhas been extended to find calls to the Rails methodprotect_from_forgerythat may weaken CSRF protection.