Added comments for HTTP response building code path (#10657)

* Added CodeQL suppression justification comments for oop layer response handling code path. * Updated codeql comment based on PR feedback.
Azure · Dec 9, 2024 · ba3e9ef · ba3e9ef
1 parent d8bfc69
commit ba3e9ef
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/WebJobs.Script/Binding/Http/RawScriptResult.cs b/src/WebJobs.Script/Binding/Http/RawScriptResult.cs
@@ -79,10 +79,12 @@ public async Task ExecuteResultAsync(ActionContext context)
                 {
                     if (cookie.Item3 != null)
                     {
+                        // CodeQL [SM02373] This code path constructs the cookie collection based on what the out-of-process function app (where customers can set these cookies) sends to the host. Overriding this behavior would introduce a breaking change for those customers.
                         response.Cookies.Append(cookie.Item1, cookie.Item2, cookie.Item3);
                     }
                     else
                     {
+                        // CodeQL [SM02373] This code path constructs the cookie collection based on what the out-of-process function app (where customers can set these cookies) sends to the host. Overriding this behavior would introduce a breaking change for those customers.
                         response.Cookies.Append(cookie.Item1, cookie.Item2);
                     }
                 }