Provides default sources, sinks and barriers for detecting insecure
cookie vulnerabilities, as well as extension points for adding your own.
Import path
import codeql.rust.security.InsecureCookieExtensions
Predicates
| cookieSetNode | Holds if cookie attribute attrib (secure or partitioned) is set to value (true or false) at node. For example, the call: cookie.secure(true) sets the "secure" attribute to true. A value that cannot be determined is treated as false.
|
Classes
| Barrier | A barrier for insecure cookie vulnerabilities.
|
| Sink | A data flow sink for insecure cookie vulnerabilities.
|
| Source | A data flow source for insecure cookie vulnerabilities.
|