File tree Expand file tree Collapse file tree 3 files changed +5
-5
lines changed Expand file tree Collapse file tree 3 files changed +5
-5
lines changed Original file line number Diff line number Diff line change 11/**
2- * @name Cookie missing `HttpOnly` attribute.
2+ * @name Sensitive cookie missing `HttpOnly` attribute.
33 * @description Cookies without the `HttpOnly` attribute set can be accessed by JS scripts, making them more vulnerable to XSS attacks.
44 * @kind problem
55 * @problem.severity warning
@@ -18,4 +18,4 @@ from Http::Server::CookieWrite cookie
1818where
1919 cookie .hasHttpOnlyFlag ( false ) and
2020 cookie .isSensitive ( )
21- select cookie , "Cookie is added without the HttpOnly attribute properly set ."
21+ select cookie , "Sensitive cookie is set without HttpOnly flag ."
Original file line number Diff line number Diff line change 11/**
2- * @name Cookie with `SameSite` attribute set to `None`.
2+ * @name Sensitive cookie with `SameSite` attribute set to `None`.
33 * @description Cookies with `SameSite` set to `None` can allow for Cross-Site Request Forgery (CSRF) attacks.
44 * @kind problem
55 * @problem.severity warning
@@ -18,4 +18,4 @@ from Http::Server::CookieWrite cookie
1818where
1919 cookie .hasSameSiteAttribute ( any ( Http:: Server:: CookieWrite:: SameSiteNone v ) ) and
2020 cookie .isSensitive ( )
21- select cookie , "Cookie is added with the SameSite attribute set to None."
21+ select cookie , "Sensitive cookie with SameSite set to ' None' ."
Original file line number Diff line number Diff line change @@ -19,4 +19,4 @@ from Http::Server::CookieWrite cookie
1919where
2020 cookie .hasSecureFlag ( false ) and
2121 cookie .isSensitive ( )
22- select cookie , "Cookie is added without the Secure attribute properly set."
22+ select cookie , "Cookie is added to response without the 'secure' flag being set."
You can’t perform that action at this time.
0 commit comments