File tree Expand file tree Collapse file tree 3 files changed +4
-4
lines changed
Expand file tree Collapse file tree 3 files changed +4
-4
lines changed Original file line number Diff line number Diff line change 66<overview >
77<p >
88Authentication cookies where the SameSite attribute is set to "None" can
9- potentially be used to perform cross-site request forgery (CSRF) attacks
9+ potentially be used to perform Cross-Site Request Forgery (CSRF) attacks
1010if no other CSRF protections are in place.
1111</p >
1212<p >
13- With SameSite set to "None" a third party website may create an authorized cross-site request
13+ With SameSite set to "None", a third party website may create an authorized cross-site request
1414that includes the cookie.
1515Such a cross-site request can allow that website to perform actions on behalf of a user.
1616</p >
Original file line number Diff line number Diff line change 11/**
22 * @name Sensitive cookie without SameSite restrictions
33 * @description Sensitive cookies where the SameSite attribute is set to "None" can
4- * in some cases allow for Cross-site request forgery (CSRF) attacks.
4+ * in some cases allow for Cross-Site Request Forgery (CSRF) attacks.
55 * @kind problem
66 * @problem.severity warning
77 * @security-severity 5.0
Original file line number Diff line number Diff line change 11---
22category : newQuery
33---
4- * A new query ` js/samesite-none-cookie ` has been added. The query detects when the SameSite attribute on a sensitive cookie is set to None.
4+ * A new query ` js/samesite-none-cookie ` has been added. The query detects when the SameSite attribute is set to None on a sensitive cookie .
You can’t perform that action at this time.
0 commit comments