Skip to content

Commit 7e723e9

Browse files
author
edvraa
committed
Remove redundant iResponse.getAppendMethod() = mc.getTarget(), it is already covered by higher level exists
1 parent 98261a6 commit 7e723e9

File tree

1 file changed

+0
-1
lines changed

1 file changed

+0
-1
lines changed

csharp/ql/src/experimental/Security Features/CWE-1004/CookieWithoutHttpOnlyAspNetCore.ql

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -50,7 +50,6 @@ where
5050
// IResponseCookies.Append(String, String) was called, `HttpOnly` is set to `false` by default
5151
exists(AuthCookieNameConfiguration dataflow, DataFlow::Node source, DataFlow::Node sink |
5252
mc = c and
53-
iResponse.getAppendMethod() = mc.getTarget() and
5453
mc.getNumberOfArguments() < 3 and
5554
// It is a sensitive cookie name
5655
dataflow.hasFlow(source, sink) and

0 commit comments

Comments
 (0)