class

Flaw::JwtAlgNone

Inherits Flaw::Rule < Reference < Object

FLAW023 — JWT alg:none or signature verification disabled.

Constants

PATTERNS = [/\balg(?:orithm)?:\s*(?:"none"|'none'|nil|JWT::Algorithm::None)/i, /JWT\.decode\s*\([^)]*verify:\s*false/, /JWT\.decode\s*\([^)]*\bnil\s*,\s*(?:"none"|'none')/i]

Instance methods

check(source : String, path : String) : Array(Finding)

default_severity

description

title