codeql/go/old-change-notes/2020-08-18-oauth2.md

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

3 строки
278 B
Markdown
Исходник Обычный вид История

lgtm,codescanning
* The query "Use of constant `state` value in OAuth 2.0 URL" (`go/constant-oauth2-state`) has been promoted from experimental status. This checks for use of a constant state value in generating an OAuth2 redirect URL, which may open the way for a CSRF attack.