Incomplete documentation for cs/web/broad-cookie-domain
未關閉
C#
documentation
- 主要語言
- CodeQL
- 星號
- 10.1k
- 分支
- 2.1k
- 平均合併
- 2 天 15 小時
- 30 天內合併 PR
- 141
描述
I believe the CodeQL documentation here conflicts with MDN by omission:
> In this example cookie1 is accessible from online-bank.com ...
> ```
> HttpCookie cookie1 = new HttpCookie("sessionID");
> cookie1.Domain = "online-bank.com";
> ```
https://codeql.github.com/codeql-query-help/csharp/cs-web-broad-cookie-domain/
According to MDN, that cookie would _also_ be available to subdomains:
> For example, if you set Domain=mozilla.org, cookies are available on mozilla.org and its subdomains like developer.mozilla.org.
https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies#domain_attribute
The CodeQL documentation should state that "In this example cookie1 is accessible from online-bank.com _and its subdomains_".
貢獻指南
評估
這個 Issue 還沒有評估資料。