Skip to content

Commit 769ec16

Browse files
atorralbasmowton
andcommitted
Apply suggestions from code review
Co-authored-by: Chris Smowton <[email protected]>
1 parent 5a82d21 commit 769ec16

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

go/ql/src/Security/CWE-347/MissingJwtSignatureCheck.qhelp

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
<qhelp>
33
<overview>
44
<p>Applications decoding a JSON Web Token (JWT) may be vulnerable when the
5-
signature is not correctly verified in the process.</p>
5+
signature is not correctly verified.</p>
66
</overview>
77
<recommendation>
8-
<p>Always verify the signature by using the appropriate methods depending on the JWT library,
8+
<p>Always verify the signature by using the appropriate methods provided by the JWT library,
99
or use a library that verifies it by default.</p>
1010
</recommendation>
1111
<example>

0 commit comments

Comments
 (0)