Update wording of alert (accepting review suggestion)

Co-authored-by: Chris Smowton <smowton@github.com>
This commit is contained in:
Owen Mansel-Chan
2024-12-04 10:31:14 +00:00
committed by GitHub
parent 95116eec51
commit 5351f5b69d

View File

@@ -219,7 +219,7 @@ predicate insecureAlgorithm(string name, string reason) {
or
name = "ECB" and
reason =
"Encryption mode ECB like AES/ECB/NoPadding is vulnerable to replay and other attacks. Consider using a different encryption mode, like CBC or GCM, instead."
"Encryption mode ECB, as in AES/ECB/NoPadding for example, is vulnerable to replay and other attacks. Consider using a different encryption mode, like CBC or GCM, instead."
or
name = "AES/CBC/PKCS[57]Padding" and
reason =