| route-pattern | /_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format) |
| route-controller | voltron_pull_requests_fragments |
| route-action | pull_request_layout |
| fetch-nonce | v2:8880d9f3-de66-8af0-2dfd-2df0cb11ee16 |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | C88A:2B7857:4D92F5:687DA7:6A4DA20C |
| html-safe-nonce | 63b41a97cc0428889ec1053a918ae758631b7d5e5fca478397539ea4b9f95ce6 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJDODhBOjJCNzg1Nzo0RDkyRjU6Njg3REE3OjZBNERBMjBDIiwidmlzaXRvcl9pZCI6IjU3MzE3ODU1MzUwNjU1MzA4OTIiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ== |
| visitor-hmac | 8677094349284dfc9f27b27168e8f30fd2d89776b7bb02970522cb896d172a1a |
| hovercard-subject-tag | pull_request:456805271 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | ///voltron/pull_requests_fragments/pull_request_layout |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/github/codeql/3978/pull_request_layout |
| twitter:image | https://opengraph.githubassets.com/169c07f63cadd89085aa0e32c820a13a6bde81cfb28a2ec764f7c3e5791fa2aa/github/codeql/pull/3978 |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/169c07f63cadd89085aa0e32c820a13a6bde81cfb28a2ec764f7c3e5791fa2aa/github/codeql/pull/3978 |
| og:image:alt | Query to detect if the secure flag is set to cookies is available in java query but it is not available in javascript query.
This query detects if cookies are sent without the flag secure being set... |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| og:author:username | dellalibera |
| hostname | github.com |
| expected-hostname | github.com |
| None | 06b8a6144231bf3a234f1c2e9993861e07ce98a905912b114aa386c2d7e84b33 |
| turbo-cache-control | no-cache |
| go-import | github.com/github/codeql git https://github.com/github/codeql.git |
| octolytics-dimension-user_id | 9919 |
| octolytics-dimension-user_login | github |
| octolytics-dimension-repository_id | 143040428 |
| octolytics-dimension-repository_nwo | github/codeql |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 143040428 |
| octolytics-dimension-repository_network_root_nwo | github/codeql |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 7f13faa65cccc9b729d674da83335d5dcfdfd193 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
| Skip to content | https://github.com/github/codeql/pull/3978#start-of-content |
|
| https://github.com/ |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F3978 |
| GitHub CopilotWrite better code with AI | https://github.com/features/copilot |
| GitHub Copilot appDirect agents from issue to merge | https://github.com/features/ai/github-app |
| MCP RegistryNewIntegrate external tools | https://github.com/mcp |
| ActionsAutomate any workflow | https://github.com/features/actions |
| CodespacesInstant dev environments | https://github.com/features/codespaces |
| IssuesPlan and track work | https://github.com/features/issues |
| Code ReviewManage code changes | https://github.com/features/code-review |
| GitHub Advanced SecurityFind and fix vulnerabilities | https://github.com/security/advanced-security |
| Code securitySecure your code as you build | https://github.com/security/advanced-security/code-security |
| Secret protectionStop leaks before they start | https://github.com/security/advanced-security/secret-protection |
| Why GitHub | https://github.com/why-github |
| Documentation | https://docs.github.com |
| Blog | https://github.blog |
| Changelog | https://github.blog/changelog |
| Marketplace | https://github.com/marketplace |
| View all features | https://github.com/features |
| Enterprises | https://github.com/enterprise |
| Small and medium teams | https://github.com/team |
| Startups | https://github.com/enterprise/startups |
| Nonprofits | https://github.com/solutions/industry/nonprofits |
| App Modernization | https://github.com/solutions/use-case/app-modernization |
| DevSecOps | https://github.com/solutions/use-case/devsecops |
| DevOps | https://github.com/solutions/use-case/devops |
| CI/CD | https://github.com/solutions/use-case/ci-cd |
| View all use cases | https://github.com/solutions/use-case |
| Healthcare | https://github.com/solutions/industry/healthcare |
| Financial services | https://github.com/solutions/industry/financial-services |
| Manufacturing | https://github.com/solutions/industry/manufacturing |
| Government | https://github.com/solutions/industry/government |
| View all industries | https://github.com/solutions/industry |
| View all solutions | https://github.com/solutions |
| AI | https://github.com/resources/articles?topic=ai |
| Software Development | https://github.com/resources/articles?topic=software-development |
| DevOps | https://github.com/resources/articles?topic=devops |
| Security | https://github.com/resources/articles?topic=security |
| View all topics | https://github.com/resources/articles |
| Customer stories | https://github.com/customer-stories |
| Events & webinars | https://github.com/resources/events |
| Ebooks & reports | https://github.com/resources/whitepapers |
| Business insights | https://github.com/solutions/executive-insights |
| GitHub Skills | https://skills.github.com |
| Documentation | https://docs.github.com |
| Customer support | https://support.github.com |
| Community forum | https://github.com/orgs/community/discussions |
| Trust center | https://github.com/trust-center |
| Partners | https://github.com/partners |
| View all resources | https://github.com/resources |
| GitHub SponsorsFund open source developers | https://github.com/sponsors |
| Security Lab | https://securitylab.github.com |
| Maintainer Community | https://maintainers.github.com |
| Accelerator | https://github.com/accelerator |
| GitHub Stars | https://stars.github.com |
| Archive Program | https://archiveprogram.github.com |
| Topics | https://github.com/topics |
| Trending | https://github.com/trending |
| Collections | https://github.com/collections |
| Enterprise platformAI-powered developer platform | https://github.com/enterprise |
| GitHub Advanced SecurityEnterprise-grade security features | https://github.com/security/advanced-security |
| Copilot for BusinessEnterprise-grade AI features | https://github.com/features/copilot/copilot-business |
| Premium SupportEnterprise-grade 24/7 support | https://github.com/premium-support |
| Pricing | https://github.com/pricing |
| Search syntax tips | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
| documentation | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F3978 |
|
Sign up
| https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=github%2Fcodeql |
| Reload | https://github.com/github/codeql/pull/3978 |
| Reload | https://github.com/github/codeql/pull/3978 |
| Reload | https://github.com/github/codeql/pull/3978 |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
|
github
| https://github.com/github |
| codeql | https://github.com/github/codeql |
|
Notifications
| https://github.com/login?return_to=%2Fgithub%2Fcodeql |
|
Fork
2k
| https://github.com/login?return_to=%2Fgithub%2Fcodeql |
|
Star
9.8k
| https://github.com/login?return_to=%2Fgithub%2Fcodeql |
|
Code
| https://github.com/github/codeql |
|
Issues
987
| https://github.com/github/codeql/issues |
|
Pull requests
426
| https://github.com/github/codeql/pulls |
|
Discussions
| https://github.com/github/codeql/discussions |
|
Actions
| https://github.com/github/codeql/actions |
|
Projects
| https://github.com/github/codeql/projects |
|
Models
| https://github.com/github/codeql/models |
|
Security and quality
0
| https://github.com/github/codeql/security |
|
Insights
| https://github.com/github/codeql/pulse |
|
Code
| https://github.com/github/codeql |
|
Issues
| https://github.com/github/codeql/issues |
|
Pull requests
| https://github.com/github/codeql/pulls |
|
Discussions
| https://github.com/github/codeql/discussions |
|
Actions
| https://github.com/github/codeql/actions |
|
Projects
| https://github.com/github/codeql/projects |
|
Models
| https://github.com/github/codeql/models |
|
Security and quality
| https://github.com/github/codeql/security |
|
Insights
| https://github.com/github/codeql/pulse |
| codeql-ci | https://github.com/codeql-ci |
| github:main | https://github.com/github/codeql/tree/main |
| dellalibera:js/insecure-cookies | https://github.com/dellalibera/codeql/tree/js/insecure-cookies |
| Conversation | https://github.com/github/codeql/pull/3978 |
| Commits37 (37) | https://github.com/github/codeql/pull/3978/commits |
| Checks | https://github.com/github/codeql/pull/3978/checks |
| Files changed | https://github.com/github/codeql/pull/3978/files |
| [javascript] CodeQL query to detect if cookies are sent without the flag secure being set | https://github.com/github/codeql/pull/3978#top |
| codeql-ci | https://github.com/codeql-ci |
| github:main | https://github.com/github/codeql/tree/main |
| dellalibera:js/insecure-cookies | https://github.com/dellalibera/codeql/tree/js/insecure-cookies |
|
| https://github.com/dellalibera |
| dellalibera | https://github.com/dellalibera |
| Jul 26, 2020 | https://github.com/github/codeql/pull/3978#issue-665859743 |
| https://github.com/expressjs/cookie-session | https://github.com/expressjs/cookie-session |
| https://github.com/expressjs/session | https://github.com/expressjs/session |
| https://expressjs.com/en/api.html#res.cookie | https://expressjs.com/en/api.html#res.cookie |
| https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie | https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie |
| https://github.com/js-cookie/js-cookie | https://github.com/js-cookie/js-cookie |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
|
| https://github.com/dellalibera |
| Add Codeql query to detect if cookies are sent without the flag being… | https://github.com/github/codeql/pull/3978/commits/c469f71957051e768b8e481867a7194524a6674e |
| c469f71 | https://github.com/github/codeql/pull/3978/commits/c469f71957051e768b8e481867a7194524a6674e |
| https://github.com/dellalibera |
| dellalibera | https://github.com/dellalibera |
| code owner | https://github.com/github/codeql/blob/bb5b161d72a135869b5ab48b53e94c7f74afe17e/CODEOWNERS#L4 |
| July 26, 2020 21:04 | https://github.com/github/codeql/pull/3978#event-3587408416 |
| https://github.com/dellalibera |
| dellalibera | https://github.com/dellalibera |
| Jul 26, 2020 | https://github.com/github/codeql/pull/3978#event-3587408720 |
|
| https://github.com/dellalibera |
| Update .qhelp | https://github.com/github/codeql/pull/3978/commits/2cec8f7e9d5a4914f0e83a289fbee963ad89c4c2 |
| 2cec8f7 | https://github.com/github/codeql/pull/3978/commits/2cec8f7e9d5a4914f0e83a289fbee963ad89c4c2 |
| https://github.com/intrigus-lgtm |
| intrigus-lgtm | https://github.com/intrigus-lgtm |
|
Jul 26, 2020
| https://github.com/github/codeql/pull/3978#pullrequestreview-455397049 |
|
View reviewed changes
| https://github.com/github/codeql/pull/3978/files/2cec8f7e9d5a4914f0e83a289fbee963ad89c4c2 |
| javascript/ql/src/experimental/Security/CWE-614/InsecureCookie.qhelp | https://github.com/github/codeql/pull/3978/files/c469f71957051e768b8e481867a7194524a6674e..2cec8f7e9d5a4914f0e83a289fbee963ad89c4c2#diff-21bfc6b983a14a590a05c2deeb5cb65d86da89d39500765a413e953be4f5304c |
| intrigus-lgtm | https://github.com/intrigus-lgtm |
| Jul 26, 2020 | https://github.com/github/codeql/pull/3978#discussion_r460575975 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
| dellalibera | https://github.com/dellalibera |
| Jul 26, 2020 | https://github.com/github/codeql/pull/3978#discussion_r460577529 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
| dellalibera | https://github.com/dellalibera |
| July 26, 2020 23:47 | https://github.com/github/codeql/pull/3978#commits-pushed-ac7c511 |
|
| https://github.com/dellalibera |
| Update .qhelp | https://github.com/github/codeql/pull/3978/commits/ac7c511d86f5da9c4ab97a9b7a8094c23c140be1 |
| ac7c511 | https://github.com/github/codeql/pull/3978/commits/ac7c511d86f5da9c4ab97a9b7a8094c23c140be1 |
|
| https://github.com/dellalibera |
| Update .qhelp | https://github.com/github/codeql/pull/3978/commits/8dee3da4fee2d45d22d7f9e570c09132bc059bc9 |
| 8dee3da | https://github.com/github/codeql/pull/3978/commits/8dee3da4fee2d45d22d7f9e570c09132bc059bc9 |
| https://github.com/esbena |
| esbena | https://github.com/esbena |
| Aug 3, 2020 | https://github.com/github/codeql/pull/3978#event-3615836984 |
| https://github.com/asgerf |
| asgerf | https://github.com/asgerf |
|
JS
| https://github.com/github/codeql/issues?q=state%3Aopen%20label%3AJS |
| Aug 3, 2020 | https://github.com/github/codeql/pull/3978#event-3615840157 |
| https://github.com/esbena |
| esbena | https://github.com/esbena |
|
Aug 4, 2020
| https://github.com/github/codeql/pull/3978#pullrequestreview-460541760 |
|
View reviewed changes
| https://github.com/github/codeql/pull/3978/files/8dee3da4fee2d45d22d7f9e570c09132bc059bc9 |
| esbena | https://github.com/esbena |
| https://github.com/github/codeql/pull/3978#pullrequestreview-460541760 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| https://github.com/github/codeql/blob/71933a4d8a32d32f085f14b7b44f41d1cdcae2e4/javascript/ql/src/semmle/javascript/frameworks/CookieLibraries.qll | https://github.com/github/codeql/blob/71933a4d8a32d32f085f14b7b44f41d1cdcae2e4/javascript/ql/src/semmle/javascript/frameworks/CookieLibraries.qll |
| #3835 (comment) | https://github.com/github/codeql/pull/3835#issuecomment-654731537 |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
| javascript/ql/src/experimental/Security/CWE-614/InsecureCookie.qll | https://github.com/github/codeql/pull/3978/files/8dee3da4fee2d45d22d7f9e570c09132bc059bc9#diff-449e9835ab971609280c13a75a070d98cc09421306bc648ae53762851a7236f5 |
| esbena | https://github.com/esbena |
| Aug 4, 2020 | https://github.com/github/codeql/pull/3978#discussion_r464838080 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
| dellalibera | https://github.com/dellalibera |
| Aug 16, 2020 | https://github.com/github/codeql/pull/3978#discussion_r471109724 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
| javascript/ql/src/experimental/Security/CWE-614/InsecureCookie.qll | https://github.com/github/codeql/pull/3978/files/8dee3da4fee2d45d22d7f9e570c09132bc059bc9#diff-449e9835ab971609280c13a75a070d98cc09421306bc648ae53762851a7236f5 |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
| javascript/ql/src/experimental/Security/CWE-614/InsecureCookie.qll | https://github.com/github/codeql/pull/3978/files/8dee3da4fee2d45d22d7f9e570c09132bc059bc9#diff-449e9835ab971609280c13a75a070d98cc09421306bc648ae53762851a7236f5 |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
| javascript/ql/src/experimental/Security/CWE-614/InsecureCookie.qll | https://github.com/github/codeql/pull/3978/files/8dee3da4fee2d45d22d7f9e570c09132bc059bc9#diff-449e9835ab971609280c13a75a070d98cc09421306bc648ae53762851a7236f5 |
| esbena | https://github.com/esbena |
| Aug 4, 2020 | https://github.com/github/codeql/pull/3978#discussion_r464840634 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
| dellalibera | https://github.com/dellalibera |
| Aug 16, 2020 | https://github.com/github/codeql/pull/3978#discussion_r471112659 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
| javascript/ql/src/experimental/Security/CWE-614/InsecureCookie.qll | https://github.com/github/codeql/pull/3978/files/8dee3da4fee2d45d22d7f9e570c09132bc059bc9#diff-449e9835ab971609280c13a75a070d98cc09421306bc648ae53762851a7236f5 |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
| javascript/ql/src/experimental/Security/CWE-614/InsecureCookie.qll | https://github.com/github/codeql/pull/3978/files/8dee3da4fee2d45d22d7f9e570c09132bc059bc9#diff-449e9835ab971609280c13a75a070d98cc09421306bc648ae53762851a7236f5 |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
| javascript/ql/src/experimental/Security/CWE-614/InsecureCookie.qll | https://github.com/github/codeql/pull/3978/files/8dee3da4fee2d45d22d7f9e570c09132bc059bc9#diff-449e9835ab971609280c13a75a070d98cc09421306bc648ae53762851a7236f5 |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
| javascript/ql/src/experimental/Security/CWE-614/InsecureCookie.qll | https://github.com/github/codeql/pull/3978/files/8dee3da4fee2d45d22d7f9e570c09132bc059bc9#diff-449e9835ab971609280c13a75a070d98cc09421306bc648ae53762851a7236f5 |
| esbena | https://github.com/esbena |
| Aug 4, 2020 | https://github.com/github/codeql/pull/3978#discussion_r464852079 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
| dellalibera | https://github.com/dellalibera |
| Aug 16, 2020 | https://github.com/github/codeql/pull/3978#discussion_r471109255 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
| javascript/ql/src/experimental/Security/CWE-614/InsecureCookie.qll | https://github.com/github/codeql/pull/3978/files/8dee3da4fee2d45d22d7f9e570c09132bc059bc9#diff-449e9835ab971609280c13a75a070d98cc09421306bc648ae53762851a7236f5 |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
| javascript/ql/src/experimental/Security/CWE-614/InsecureCookie.qll | https://github.com/github/codeql/pull/3978/files/8dee3da4fee2d45d22d7f9e570c09132bc059bc9#diff-449e9835ab971609280c13a75a070d98cc09421306bc648ae53762851a7236f5 |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
| https://github.com/adityasharad |
| adityasharad | https://github.com/adityasharad |
| August 14, 2020 18:33 | https://github.com/github/codeql/pull/3978#event-3657280686 |
| dellalibera | https://github.com/dellalibera |
| August 16, 2020 14:13 | https://github.com/github/codeql/pull/3978#commits-pushed-67fccac |
|
| https://github.com/dellalibera |
|
| https://github.com/esbena |
| Update javascript/ql/src/experimental/Security/CWE-614/InsecureCookie… | https://github.com/github/codeql/pull/3978/commits/67fccac8a97f7902504eb079fa22a2a1c90cf8e6 |
| 67fccac | https://github.com/github/codeql/pull/3978/commits/67fccac8a97f7902504eb079fa22a2a1c90cf8e6 |
|
| https://github.com/dellalibera |
|
| https://github.com/esbena |
| Update javascript/ql/src/experimental/Security/CWE-614/InsecureCookie… | https://github.com/github/codeql/pull/3978/commits/0c121062b6b2e6ceafff652403b8dbb0b58fd071 |
| 0c12106 | https://github.com/github/codeql/pull/3978/commits/0c121062b6b2e6ceafff652403b8dbb0b58fd071 |
|
| https://github.com/dellalibera |
|
| https://github.com/esbena |
| Update javascript/ql/src/experimental/Security/CWE-614/InsecureCookie… | https://github.com/github/codeql/pull/3978/commits/8d26b810eee5f8e2340998ea5a35fca33fb8d382 |
| 8d26b81 | https://github.com/github/codeql/pull/3978/commits/8d26b810eee5f8e2340998ea5a35fca33fb8d382 |
|
| https://github.com/dellalibera |
|
| https://github.com/esbena |
| Update javascript/ql/src/experimental/Security/CWE-614/InsecureCookie… | https://github.com/github/codeql/pull/3978/commits/10bd745740e76ddb09fec19429f2e900d9680dda |
| 10bd745 | https://github.com/github/codeql/pull/3978/commits/10bd745740e76ddb09fec19429f2e900d9680dda |
|
| https://github.com/dellalibera |
|
| https://github.com/esbena |
| Update javascript/ql/src/experimental/Security/CWE-614/InsecureCookie… | https://github.com/github/codeql/pull/3978/commits/5cae3005f39b73ec67363eae15f1119b27ceb917 |
| 5cae300 | https://github.com/github/codeql/pull/3978/commits/5cae3005f39b73ec67363eae15f1119b27ceb917 |
|
| https://github.com/dellalibera |
|
| https://github.com/esbena |
| Update javascript/ql/src/experimental/Security/CWE-614/InsecureCookie… | https://github.com/github/codeql/pull/3978/commits/e46301475915102e52443e9a67abbb3ba617fd01 |
| e463014 | https://github.com/github/codeql/pull/3978/commits/e46301475915102e52443e9a67abbb3ba617fd01 |
|
| https://github.com/dellalibera |
|
| https://github.com/esbena |
| Update javascript/ql/src/experimental/Security/CWE-614/InsecureCookie… | https://github.com/github/codeql/pull/3978/commits/fb3ffb895a841e55693804ed34032b99eb54d695 |
| fb3ffb8 | https://github.com/github/codeql/pull/3978/commits/fb3ffb895a841e55693804ed34032b99eb54d695 |
|
| https://github.com/dellalibera |
|
| https://github.com/esbena |
| Update javascript/ql/src/experimental/Security/CWE-614/InsecureCookie… | https://github.com/github/codeql/pull/3978/commits/97f039af3adc79c220a5fff032d84c4d360be5e2 |
| 97f039a | https://github.com/github/codeql/pull/3978/commits/97f039af3adc79c220a5fff032d84c4d360be5e2 |
|
| https://github.com/dellalibera |
|
| https://github.com/esbena |
| Update javascript/ql/src/experimental/Security/CWE-614/InsecureCookie… | https://github.com/github/codeql/pull/3978/commits/40e101de5af10c36853484fa895728f382bd0948 |
| 40e101d | https://github.com/github/codeql/pull/3978/commits/40e101de5af10c36853484fa895728f382bd0948 |
|
| https://github.com/dellalibera |
|
| https://github.com/esbena |
| Update javascript/ql/src/experimental/Security/CWE-614/InsecureCookie… | https://github.com/github/codeql/pull/3978/commits/ab128f71728a353d832c13f9a4e96e267febf3cf |
| ab128f7 | https://github.com/github/codeql/pull/3978/commits/ab128f71728a353d832c13f9a4e96e267febf3cf |
|
| https://github.com/dellalibera |
|
| https://github.com/esbena |
| Update javascript/ql/src/experimental/Security/CWE-614/InsecureCookie… | https://github.com/github/codeql/pull/3978/commits/9292e3b80e0e1c81cd30da93d0772994a54e738b |
| 9292e3b | https://github.com/github/codeql/pull/3978/commits/9292e3b80e0e1c81cd30da93d0772994a54e738b |
|
| https://github.com/dellalibera |
|
| https://github.com/esbena |
| Update javascript/ql/src/experimental/Security/CWE-614/InsecureCookie… | https://github.com/github/codeql/pull/3978/commits/275b8dfda2e16047b31251c7317f2442df0cc630 |
| 275b8df | https://github.com/github/codeql/pull/3978/commits/275b8dfda2e16047b31251c7317f2442df0cc630 |
|
| https://github.com/dellalibera |
|
| https://github.com/esbena |
| Update javascript/ql/src/experimental/Security/CWE-614/InsecureCookie… | https://github.com/github/codeql/pull/3978/commits/14c8e4ce768fc48c5578084b01c731537ce5e4d3 |
| 14c8e4c | https://github.com/github/codeql/pull/3978/commits/14c8e4ce768fc48c5578084b01c731537ce5e4d3 |
|
| https://github.com/dellalibera |
|
| https://github.com/esbena |
| Update javascript/ql/src/experimental/Security/CWE-614/InsecureCookie… | https://github.com/github/codeql/pull/3978/commits/a2e945645022db47e7c152a97d46f6bdedba1ce1 |
| a2e9456 | https://github.com/github/codeql/pull/3978/commits/a2e945645022db47e7c152a97d46f6bdedba1ce1 |
|
| https://github.com/dellalibera |
|
| https://github.com/esbena |
| Update javascript/ql/src/experimental/Security/CWE-614/InsecureCookie… | https://github.com/github/codeql/pull/3978/commits/bfef84e1b57983ef7fc950ba72af6a737d3fad81 |
| bfef84e | https://github.com/github/codeql/pull/3978/commits/bfef84e1b57983ef7fc950ba72af6a737d3fad81 |
|
| https://github.com/dellalibera |
|
| https://github.com/esbena |
| Update javascript/ql/src/experimental/Security/CWE-614/InsecureCookie… | https://github.com/github/codeql/pull/3978/commits/ab20beba565c5de0ac2a2d9dc09eecd82b3d0e77 |
| ab20beb | https://github.com/github/codeql/pull/3978/commits/ab20beba565c5de0ac2a2d9dc09eecd82b3d0e77 |
|
| https://github.com/dellalibera |
|
| https://github.com/esbena |
| Update javascript/ql/src/experimental/Security/CWE-614/InsecureCookie… | https://github.com/github/codeql/pull/3978/commits/05ffd672d70635d2b07330996d814f14ee005945 |
| 05ffd67 | https://github.com/github/codeql/pull/3978/commits/05ffd672d70635d2b07330996d814f14ee005945 |
|
| https://github.com/dellalibera |
|
| https://github.com/esbena |
| Update javascript/ql/src/experimental/Security/CWE-614/InsecureCookie… | https://github.com/github/codeql/pull/3978/commits/1ba39e4130e6d1fc190f4e11d19161ad8f638e72 |
| 1ba39e4 | https://github.com/github/codeql/pull/3978/commits/1ba39e4130e6d1fc190f4e11d19161ad8f638e72 |
|
| https://github.com/dellalibera |
| Remove redundancy | https://github.com/github/codeql/pull/3978/commits/e2908026c556bb2ec89c25b4c21d0f51bd45410d |
| e290802 | https://github.com/github/codeql/pull/3978/commits/e2908026c556bb2ec89c25b4c21d0f51bd45410d |
| dellalibera | https://github.com/dellalibera |
| August 16, 2020 14:48 | https://github.com/github/codeql/pull/3978#commits-pushed-d4b231b |
|
| https://github.com/dellalibera |
| Replace regex | https://github.com/github/codeql/pull/3978/commits/d4b231b86796ba2ed1572aaf9a07b082832ce357 |
| d4b231b | https://github.com/github/codeql/pull/3978/commits/d4b231b86796ba2ed1572aaf9a07b082832ce357 |
|
| https://github.com/dellalibera |
| Replace class and module name | https://github.com/github/codeql/pull/3978/commits/91d44854c07c42a666e7996fae85618bb4241f05 |
| 91d4485 | https://github.com/github/codeql/pull/3978/commits/91d44854c07c42a666e7996fae85618bb4241f05 |
|
| https://github.com/dellalibera |
| Changed .qhelp | https://github.com/github/codeql/pull/3978/commits/2a322976c62a45a9f5f68337bb25ab395236288d |
| 2a32297 | https://github.com/github/codeql/pull/3978/commits/2a322976c62a45a9f5f68337bb25ab395236288d |
|
| https://github.com/dellalibera |
| Remove examples | https://github.com/github/codeql/pull/3978/commits/3e9142bf7187c6ecfff8182c78c443ca0840784c |
| 3e9142b | https://github.com/github/codeql/pull/3978/commits/3e9142bf7187c6ecfff8182c78c443ca0840784c |
|
| https://github.com/dellalibera |
| Add query-tests | https://github.com/github/codeql/pull/3978/commits/5d6e6be4e45033c5e90770ba489350417085bc1e |
| 5d6e6be | https://github.com/github/codeql/pull/3978/commits/5d6e6be4e45033c5e90770ba489350417085bc1e |
|
| https://github.com/dellalibera |
| Change polarity predicate isInsecure | https://github.com/github/codeql/pull/3978/commits/8ec91ef0c69e7fa51562395a9f6150b6c865bb02 |
| 8ec91ef | https://github.com/github/codeql/pull/3978/commits/8ec91ef0c69e7fa51562395a9f6150b6c865bb02 |
| https://github.com/dellalibera |
| dellalibera | https://github.com/dellalibera |
| Aug 16, 2020 | https://github.com/github/codeql/pull/3978#issuecomment-674526801 |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
| @esbena | https://github.com/esbena |
| https://github.com/github/codeql/blob/71933a4d8a32d32f085f14b7b44f41d1cdcae2e4/javascript/ql/src/semmle/javascript/frameworks/CookieLibraries.qll | https://github.com/github/codeql/blob/71933a4d8a32d32f085f14b7b44f41d1cdcae2e4/javascript/ql/src/semmle/javascript/frameworks/CookieLibraries.qll |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
| https://github.com/esbena |
| esbena | https://github.com/esbena |
| Aug 24, 2020 | https://github.com/github/codeql/pull/3978#issuecomment-678963614 |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
|
| https://github.com/dellalibera |
| Format code | https://github.com/github/codeql/pull/3978/commits/22f5ae4ad432f7a4ad60181ccdeddf145e667d92 |
| 22f5ae4 | https://github.com/github/codeql/pull/3978/commits/22f5ae4ad432f7a4ad60181ccdeddf145e667d92 |
| https://github.com/dellalibera |
| dellalibera | https://github.com/dellalibera |
| Aug 24, 2020 | https://github.com/github/codeql/pull/3978#issuecomment-679248782 |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
| https://github.com/esbena |
| esbena | https://github.com/esbena |
|
Aug 24, 2020
| https://github.com/github/codeql/pull/3978#pullrequestreview-473151038 |
|
View reviewed changes
| https://github.com/github/codeql/pull/3978/files/8ec91ef0c69e7fa51562395a9f6150b6c865bb02 |
| esbena | https://github.com/esbena |
| https://github.com/github/codeql/pull/3978#pullrequestreview-473151038 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
| javascript/ql/src/experimental/Security/CWE-614/InsecureCookie.qll | https://github.com/github/codeql/pull/3978/files/8ec91ef0c69e7fa51562395a9f6150b6c865bb02#diff-449e9835ab971609280c13a75a070d98cc09421306bc648ae53762851a7236f5 |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
| javascript/ql/src/experimental/Security/CWE-614/InsecureCookie.qll | https://github.com/github/codeql/pull/3978/files/8ec91ef0c69e7fa51562395a9f6150b6c865bb02#diff-449e9835ab971609280c13a75a070d98cc09421306bc648ae53762851a7236f5 |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
| javascript/ql/src/experimental/Security/CWE-614/InsecureCookie.qll | https://github.com/github/codeql/pull/3978/files/8ec91ef0c69e7fa51562395a9f6150b6c865bb02#diff-449e9835ab971609280c13a75a070d98cc09421306bc648ae53762851a7236f5 |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
| javascript/ql/src/experimental/Security/CWE-614/InsecureCookie.qll | https://github.com/github/codeql/pull/3978/files/8ec91ef0c69e7fa51562395a9f6150b6c865bb02#diff-449e9835ab971609280c13a75a070d98cc09421306bc648ae53762851a7236f5 |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
| dellalibera | https://github.com/dellalibera |
| August 26, 2020 01:46 | https://github.com/github/codeql/pull/3978#commits-pushed-57cf447 |
|
| https://github.com/dellalibera |
|
| https://github.com/esbena |
| Update javascript/ql/src/experimental/Security/CWE-614/InsecureCookie… | https://github.com/github/codeql/pull/3978/commits/57cf447188583ee0bb93533a5ae7d3cec2d69b4c |
| 57cf447 | https://github.com/github/codeql/pull/3978/commits/57cf447188583ee0bb93533a5ae7d3cec2d69b4c |
|
| https://github.com/dellalibera |
|
| https://github.com/esbena |
| Update javascript/ql/src/experimental/Security/CWE-614/InsecureCookie… | https://github.com/github/codeql/pull/3978/commits/3bd7615a75167fc75c899197b80ca4bc1b35ea01 |
| 3bd7615 | https://github.com/github/codeql/pull/3978/commits/3bd7615a75167fc75c899197b80ca4bc1b35ea01 |
|
| https://github.com/dellalibera |
|
| https://github.com/esbena |
| Update javascript/ql/src/experimental/Security/CWE-614/InsecureCookie… | https://github.com/github/codeql/pull/3978/commits/a1f64e26cfd0056d2e35716f2cb579ec8d9171d7 |
| a1f64e2 | https://github.com/github/codeql/pull/3978/commits/a1f64e26cfd0056d2e35716f2cb579ec8d9171d7 |
|
| https://github.com/dellalibera |
|
| https://github.com/esbena |
| Update javascript/ql/src/experimental/Security/CWE-614/InsecureCookie… | https://github.com/github/codeql/pull/3978/commits/e027c8cc1356224ebda40585eeb838e8ea182269 |
| e027c8c | https://github.com/github/codeql/pull/3978/commits/e027c8cc1356224ebda40585eeb838e8ea182269 |
| https://github.com/dellalibera |
| dellalibera | https://github.com/dellalibera |
| Aug 25, 2020 | https://github.com/github/codeql/pull/3978#issuecomment-680324491 |
| @esbena | https://github.com/esbena |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
| https://github.com/intrigus-lgtm |
| intrigus-lgtm | https://github.com/intrigus-lgtm |
| Aug 26, 2020 | https://github.com/github/codeql/pull/3978#issuecomment-680353411 |
| github/codeql-go#66 (comment) | https://github.com/github/codeql-go/pull/66#issuecomment-601748477 |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
| https://github.com/esbena |
| esbena | https://github.com/esbena |
|
Aug 26, 2020
| https://github.com/github/codeql/pull/3978#pullrequestreview-475207610 |
|
View reviewed changes
| https://github.com/github/codeql/pull/3978/files/e027c8cc1356224ebda40585eeb838e8ea182269 |
| esbena | https://github.com/esbena |
| https://github.com/github/codeql/pull/3978#pullrequestreview-475207610 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
| javascript/ql/src/experimental/Security/CWE-614/InsecureCookie.ql | https://github.com/github/codeql/pull/3978/files/e027c8cc1356224ebda40585eeb838e8ea182269#diff-fa2523db5fd9a229dab9f307b11fdc648764bdd995b46a42f94cc3d037734ba8 |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
| dellalibera | https://github.com/dellalibera |
| August 26, 2020 23:33 | https://github.com/github/codeql/pull/3978#commits-pushed-dcf51c7 |
|
| https://github.com/dellalibera |
|
| https://github.com/esbena |
| Update javascript/ql/src/experimental/Security/CWE-614/InsecureCookie.ql | https://github.com/github/codeql/pull/3978/commits/dcf51c75e9f019de168e6d2d82ba56efc43abbe3 |
| dcf51c7 | https://github.com/github/codeql/pull/3978/commits/dcf51c75e9f019de168e6d2d82ba56efc43abbe3 |
|
| https://github.com/dellalibera |
| Update expected output | https://github.com/github/codeql/pull/3978/commits/cd1d50b63791d7e7834067da76f35e34f48973db |
| cd1d50b | https://github.com/github/codeql/pull/3978/commits/cd1d50b63791d7e7834067da76f35e34f48973db |
| https://github.com/dellalibera |
| dellalibera | https://github.com/dellalibera |
| Aug 26, 2020 | https://github.com/github/codeql/pull/3978#issuecomment-681142739 |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
| @intrigus-lgtm | https://github.com/intrigus-lgtm |
| @esbena | https://github.com/esbena |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
|
| https://github.com/esbena |
| JS: fix formatting of InsecureCookie.qll | https://github.com/github/codeql/pull/3978/commits/9aa1404646a77ac48dbfc6c5445a9e82b031029c |
| 9aa1404 | https://github.com/github/codeql/pull/3978/commits/9aa1404646a77ac48dbfc6c5445a9e82b031029c |
| https://github.com/esbena |
| esbena | https://github.com/esbena |
| Aug 27, 2020 | https://github.com/github/codeql/pull/3978#issuecomment-681716073 |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
| https://github.com/esbena |
| esbena | https://github.com/esbena |
|
Aug 27, 2020
| https://github.com/github/codeql/pull/3978#pullrequestreview-476467884 |
|
View reviewed changes
| https://github.com/github/codeql/pull/3978/files/9aa1404646a77ac48dbfc6c5445a9e82b031029c |
| https://github.com/codeql-ci |
| codeql-ci | https://github.com/codeql-ci |
| ac94869 | https://github.com/github/codeql/commit/ac9486997845355ed20ab9668c34a0e36c50672a |
| Aug 28, 2020 | https://github.com/github/codeql/pull/3978#event-3702737964 |
| https://github.com/esbena |
| esbena | https://github.com/esbena |
| Aug 28, 2020 | https://github.com/github/codeql/pull/3978#issuecomment-682376049 |
| @dellalibera | https://github.com/dellalibera |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
| https://github.com/dellalibera |
| dellalibera | https://github.com/dellalibera |
| Aug 29, 2020 | https://github.com/github/codeql/pull/3978#issuecomment-683260178 |
| @esbena | https://github.com/esbena |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
| https://github.com/dellalibera |
| dellalibera | https://github.com/dellalibera |
|
Aug 29, 2020
| https://github.com/github/codeql/pull/3978#ref-issue-688498054 |
|
[javascript] CWE-614: CodeQL query to detect if cookies are sent without the flag secure being set
github/securitylab#169
| https://github.com/github/securitylab/issues/169 |
| https://github.co/hiddenchars |
| https://github.com/github/codeql/pull/{{ revealButtonHref }} |
| Sign up for free | https://github.com/join?source=comment-repo |
| Sign in to comment | https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F3978 |
|
| https://github.com/esbena |
|
esbena
| https://github.com/esbena |
|
| https://github.com/github/codeql/pull/3978/files/9aa1404646a77ac48dbfc6c5445a9e82b031029c |
|
| https://github.com/intrigus-lgtm |
|
intrigus-lgtm
| https://github.com/intrigus-lgtm |
|
| https://github.com/github/codeql/pull/3978/files/2cec8f7e9d5a4914f0e83a289fbee963ad89c4c2 |
|
| https://github.com/esbena |
|
esbena
| https://github.com/esbena |
|
JS
| https://github.com/github/codeql/issues?q=state%3Aopen%20label%3AJS |
| Please reload this page | https://github.com/github/codeql/pull/3978 |
|
| https://github.com/dellalibera |
|
| https://github.com/esbena |
|
| https://github.com/intrigus-lgtm |
|
| https://github.com/asgerf |
|
| https://github.com/codeql-ci |
|
| https://github.com |
| Terms | https://docs.github.com/site-policy/github-terms/github-terms-of-service |
| Privacy | https://docs.github.com/site-policy/privacy-policies/github-privacy-statement |
| Security | https://github.com/security |
| Status | https://www.githubstatus.com/ |
| Community | https://github.community/ |
| Docs | https://docs.github.com/ |
| Contact | https://support.github.com?tags=dotcom-footer |