We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 7d36c23 commit 2579791Copy full SHA for 2579791
2 files changed
go/ql/src/experimental/CWE-321-V2/Example.go
@@ -1,9 +1,14 @@
1
+package main
2
3
+import (
4
+ "fmt"
5
+ "log"
6
+)
7
8
var JwtKey = []byte("AllYourBase")
9
10
func main() {
- // BAD: usage of a harcoded Key
11
+ // BAD: usage of a harcoded Key
12
verifyJWT(token)
13
}
14
@@ -18,4 +23,4 @@ func verifyJWT(signedToken string) {
18
23
} else {
19
24
log.Fatal(err)
20
25
21
-}
26
+}
go/ql/src/experimental/CWE-347/Example.go
@@ -1,5 +1,9 @@
-
// BAD: only decode jwt without verification
@@ -30,4 +34,4 @@ func verifyJWT(signedToken string) {
30
34
31
35
32
36
33
37
0 commit comments