Merge pull request #13934 from egregius313/egregius313/add-dashes-to-sha-algorithms

Java: Add dashes to SHA algorithm names in `Encryption.qll`
This commit is contained in:
Edward Minnix III
2023-08-17 13:03:15 -04:00
committed by GitHub
2 changed files with 5 additions and 1 deletions

View File

@@ -270,7 +270,7 @@ string getInsecureAlgorithmRegex() {
string getASecureAlgorithmName() {
result =
[
"RSA", "SHA256", "SHA512", "CCM", "GCM", "AES(?![^a-zA-Z](ECB|CBC/PKCS[57]Padding))",
"RSA", "SHA-?256", "SHA-?512", "CCM", "GCM", "AES(?![^a-zA-Z](ECB|CBC/PKCS[57]Padding))",
"Blowfish", "ECIES"
]
}