Skip to content

Commit 98261a6

Browse files
author
edvraa
committed
typo accessibe -> accessible
1 parent 89c4102 commit 98261a6

File tree

4 files changed

+4
-4
lines changed

4 files changed

+4
-4
lines changed

csharp/ql/src/experimental/Security Features/CWE-1004/CookieHttpOnlyFalseAspNetCore.qhelp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ property to <code>false</code> the cookie may be accessed by JavaScript.
1414
<recommendation>
1515
<p>
1616
Protect sensitive cookies, such as related to authentication, by setting <code>HttpOnly</code> to <code>true</code> to make
17-
them not accessibe to JavaScript.
17+
them not accessible to JavaScript.
1818
</p>
1919
</recommendation>
2020

csharp/ql/src/experimental/Security Features/CWE-1004/CookieHttpOnlyFalseSystemWeb.qhelp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@
77
<p>
88
Cookies without <code>HttpOnly</code> flag are accessible to JavaScript running in the same origin. In case of
99
Cross-Site Scripting (XSS) vulnerability the cookie can be stolen by malicious script. By default,
10-
cookies are accessibe to JavaScript. By explicitly setting <code>HttpOnly</code>
10+
cookies are accessible to JavaScript. By explicitly setting <code>HttpOnly</code>
1111
property to <code>false</code> the cookie may be accessed by JavaScript.
1212
</p>
1313
</overview>

csharp/ql/src/experimental/Security Features/CWE-1004/CookieWithoutHttpOnlyAspNetCore.qhelp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ Cross-Site Scripting (XSS) vulnerability the cookie can be stolen by malicious s
1313
<recommendation>
1414
<p>
1515
Protect sensitive cookies, such as related to authentication, by setting <code>HttpOnly</code> to <code>true</code> to make
16-
them not accessibe to JavaScript.
16+
them not accessible to JavaScript.
1717
</p>
1818
</recommendation>
1919

csharp/ql/src/experimental/Security Features/CWE-1004/CookieWithoutHttpOnlySystemWeb.qhelp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@
77
<p>
88
Cookies without <code>HttpOnly</code> flag are accessible to JavaScript running in the same origin. In case of
99
Cross-Site Scripting (XSS) vulnerability the cookie can be stolen by malicious script. By default,
10-
cookies are accessibe to JavaScript. This setting can be changed by setting the <code>httpOnlyCookies</code>
10+
cookies are accessible to JavaScript. This setting can be changed by setting the <code>httpOnlyCookies</code>
1111
attribute to <code>"true"</code> in <code>Web.config</code>.
1212
</p>
1313
</overview>

0 commit comments

Comments
 (0)