Skip to content

Added community rule to detect the decoding of a JWT token without a verify step

Chathumina Vimukthi requested to merge feat/issue-438809/jwt-decode-without-verify into main

Added community rule to detect the decoding of a JWT token without a verify step Issue - gitlab-org/gitlab#438809 (closed)

I couldn’t locate a mapping for this bug pattern in SpotBugs. Could you please advise on the additions needed for the mapping file?

Merge request reports