feat(JS rules): add CWE to JS insecure cookie (#687)

* feat: add CWE to JS insecure cookie * fix: update snapshots
Bearer · Mar 1, 2023 · ff9c4d9 · ff9c4d9
1 parent 28d99ed
commit ff9c4d9
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 0 deletions.
diff --git a/pkg/commands/process/settings/rules/javascript/express/insecure_cookie.yml b/pkg/commands/process/settings/rules/javascript/express/insecure_cookie.yml
@@ -37,4 +37,5 @@ metadata:
   cwe_id:
     - 1004
     - 614
+    - 523
   id: "express_insecure_cookie"
diff --git a/...ules/javascript/express/insecure_cookie/.snapshots/TestExpressSecureCookie--http_only.yml b/...ules/javascript/express/insecure_cookie/.snapshots/TestExpressSecureCookie--http_only.yml
@@ -3,6 +3,7 @@ low:
         cwe_ids:
             - "1004"
             - "614"
+            - "523"
         id: express_insecure_cookie
         description: Missing secure options for cookie detected.
         documentation_url: https://docs.bearer.com/reference/rules/express_insecure_cookie

diff --git a/...avascript/express/insecure_cookie/.snapshots/TestExpressSecureCookie--insecure_cookie.yml b/...avascript/express/insecure_cookie/.snapshots/TestExpressSecureCookie--insecure_cookie.yml
@@ -3,6 +3,7 @@ low:
         cwe_ids:
             - "1004"
             - "614"
+            - "523"
         id: express_insecure_cookie
         description: Missing secure options for cookie detected.
         documentation_url: https://docs.bearer.com/reference/rules/express_insecure_cookie