Skip to content

Commit f7cbc8a

Browse files
committed
Enhance query ouput
- add valuable text to assess the query results - add an example of the output
1 parent 0f88797 commit f7cbc8a

File tree

2 files changed

+7
-1
lines changed

2 files changed

+7
-1
lines changed

javascript/ql/src/experimental/Security/CWE-347/JWTMissingSecretOrPublicKeyVerification.ql

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,4 +16,5 @@ from CallNode call
1616
where
1717
call = moduleMember("jsonwebtoken", "verify").getACall() and
1818
unique(boolean b | b = call.getArgument(1).analyze().getABooleanValue()) = false
19-
select call
19+
select call.getStartLine(), call,
20+
"does not verify the JWT payload with a cryptographic secret or public key."
Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
| col0 | call | col2 |
2+
+------+---------------------+----------------------------------------------------------------------------+
3+
| 9 | jwt.ver ... ne"] }) | does not verify the JWT payload with a cryptographic secret or public key. |
4+
| 10 | jwt.ver ... ne"] }) | does not verify the JWT payload with a cryptographic secret or public key. |
5+
| 11 | jwt.ver ... ne"] }) | does not verify the JWT payload with a cryptographic secret or public key. |

0 commit comments

Comments
 (0)