We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
False
None
1 parent c8a7f48 commit 54ed25aCopy full SHA for 54ed25a
1 file changed
python/ql/src/experimental/Security/CWE-614/InsecureCookie.ql
@@ -15,7 +15,7 @@ import semmle.python.dataflow.new.DataFlow
15
import semmle.python.Concepts
16
import experimental.semmle.python.Concepts
17
18
-from Expr cookieExpr, False f, None n
+from Expr cookieExpr
19
where
20
exists(HeaderDeclaration headerWrite, StrConst headerName, StrConst headerValue |
21
headerName.getText() = "Set-Cookie" and
@@ -25,7 +25,7 @@ where
25
cookieExpr = headerWrite.asExpr()
26
)
27
or
28
- exists(ExperimentalHTTP::CookieWrite cookieWrite |
+ exists(ExperimentalHTTP::CookieWrite cookieWrite, False f, None n |
29
[DataFlow::exprNode(f), DataFlow::exprNode(n)]
30
.(DataFlow::LocalSourceNode)
31
.flowsTo(cookieWrite.(DataFlow::CallCfgNode).getArgByName("secure")) and
0 commit comments