We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 15b965b commit f08eb3cCopy full SHA for f08eb3c
ruby/ql/src/experimental/cwe-347/EmptyJWTSecret.qhelp
@@ -11,7 +11,7 @@ Applications encoding a JSON Web Token (JWT) may be vulnerable when it's not ver
11
12
<recommendation>
13
<p>
14
-Use non-empty nor <code>None</code> values while encoding JWT payloads.
+JSON Web Tokens should be signed using a strong cryptographic algorithm and non-empty secret.
15
</p>
16
</recommendation>
17
0 commit comments