Chris Smowton 45e1a61d7b Mark test as bad-but-missed ...

This test ought ideally to be caught, but isn't by the current version of the query.

2021-04-13 10:36:27 +01:00

..

options

Exclude CSRF cookies to reduce FPs

2021-03-11 17:28:07 +00:00

SensitiveCookieNotHttpOnly.expected

Change method check to taint flow

2021-03-25 01:45:13 +00:00

SensitiveCookieNotHttpOnly.java

Mark test as bad-but-missed

2021-04-13 10:36:27 +01:00

SensitiveCookieNotHttpOnly.qlref

Query to check sensitive cookies without the HttpOnly flag set

2021-03-01 22:06:52 +00:00