diff --git a/rules/python/django/cookie_missing_http_only.yml b/rules/python/django/cookie_missing_http_only.yml index 67085161..d2b96de9 100644 --- a/rules/python/django/cookie_missing_http_only.yml +++ b/rules/python/django/cookie_missing_http_only.yml @@ -17,24 +17,24 @@ auxiliary: patterns: - pattern: $.set_cookie($<...>) filters: - - either: - - variable: CALLER - detection: python_shared_django_http_response - scope: cursor - - variable: CALLER - detection: python_shared_lang_instance - scope: cursor - filters: - - variable: CLASS - detection: python_shared_lang_import2 - scope: cursor - filters: - - variable: MODULE1 - values: [django] - - variable: MODULE2 - values: [shortcuts] - - variable: NAME - values: [render] + - either: + - variable: CALLER + detection: python_shared_django_http_response + scope: cursor + - variable: CALLER + detection: python_shared_lang_instance + scope: cursor + filters: + - variable: CLASS + detection: python_shared_lang_import2 + scope: cursor + filters: + - variable: MODULE1 + values: [django] + - variable: MODULE2 + values: [shortcuts] + - variable: NAME + values: [render] - id: python_django_cookie_missing_http_only_set_cookie_http_only patterns: - pattern: $<_>($<...>httponly=$)