comments

Author: edvraa

csharp/ql/src/experimental/Security Features/CWE-614/CookieWithoutSecure.ql

@@ -63,7 +63,7 @@ where
         // the property wasn't explicitly set, so a default value from config is used
         not isPropertySet(oc, "Secure") and
         // the default in config is not set to `true`
-        // the `exists` below covers the `cs/web/cookie-secure-not-set`
+        // the `exists` below covers the `cs/web/requiressl-not-set`
         not exists(XMLElement element |
           element instanceof FormsElement and
           element.(FormsElement).isRequireSSL()