Skip to content

Commit f08eb3c

Browse files
Doc change
Co-authored-by: Alex Ford <[email protected]>
1 parent 15b965b commit f08eb3c

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

ruby/ql/src/experimental/cwe-347/EmptyJWTSecret.qhelp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ Applications encoding a JSON Web Token (JWT) may be vulnerable when it's not ver
1111

1212
<recommendation>
1313
<p>
14-
Use non-empty nor <code>None</code> values while encoding JWT payloads.
14+
JSON Web Tokens should be signed using a strong cryptographic algorithm and non-empty secret.
1515
</p>
1616
</recommendation>
1717

0 commit comments

Comments
 (0)