class

Flaw::CorsWildcardCredentials

Inherits Flaw::Rule < Reference < Object

FLAW024 — CORS with Allow-Origin: * and Allow-Credentials: true.

Constants

CREDS_TRUE = /Access-Control-Allow-Credentials.{0,40}true/i
ECHO_ORIGIN = /Access-Control-Allow-Origin.{0,40}(?:request\.headers\[|env\.request\.headers\[|origin\b)/i
ORIGIN_ANY = /Access-Control-Allow-Origin.{0,40}["'*]\*["']?/

Instance methods

check(source : String, path : String) : Array(Finding)
Source
default_severity
Source
description
Source
title
Source