We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 5a82d21 commit 769ec16Copy full SHA for 769ec16
go/ql/src/Security/CWE-347/MissingJwtSignatureCheck.qhelp
@@ -2,10 +2,10 @@
2
<qhelp>
3
<overview>
4
<p>Applications decoding a JSON Web Token (JWT) may be vulnerable when the
5
- signature is not correctly verified in the process.</p>
+ signature is not correctly verified.</p>
6
</overview>
7
<recommendation>
8
- <p>Always verify the signature by using the appropriate methods depending on the JWT library,
+ <p>Always verify the signature by using the appropriate methods provided by the JWT library,
9
or use a library that verifies it by default.</p>
10
</recommendation>
11
<example>
0 commit comments