Skip to content
This repository was archived by the owner on Jan 5, 2023. It is now read-only.

Commit 8b36822

Browse files
authored
Merge pull request #577 from intrigus-lgtm/patch-3
Update query description
2 parents cc1d1d8 + d26841d commit 8b36822

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

ql/src/experimental/CWE-942/CorsMisconfiguration.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
/**
22
* @name CORS misconfiguration
33
* @description If a CORS policy is configured to accept an origin value obtained from the request data,
4-
* or is set to `*` or `null`, and it allows credential sharing, then the users of the
4+
* or is set to `null`, and it allows credential sharing, then the users of the
55
* application are vulnerable to the same range of attacks as in XSS (credential stealing, etc.).
66
* @kind problem
77
* @problem.severity warning

0 commit comments

Comments
 (0)