Weakness (CWE)
CWE-1113: Inappropriate Comment Style
Base Incomplete Mapping prohibited
The source code uses comment styles or formats that are
inconsistent or do not follow expected standards for the
product.
Source: MITRE CWE-1113
1 result · Clear filters · Feed
-
Medium 5.4
Hono: Cookie Attribute Injection via Unsanitized domain and path in setCookie()
Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.12.4, the setCookie() utility did not validate semicolons (;), carriage returns (\r), or newline characters (\n) in the domain and path options when const…