mirror of
https://github.com/github/codeql.git
synced 2026-04-25 08:45:14 +02:00
Update wording of alert (accepting review suggestion)
Co-authored-by: Chris Smowton <smowton@github.com>
This commit is contained in:
@@ -219,7 +219,7 @@ predicate insecureAlgorithm(string name, string reason) {
|
||||
or
|
||||
name = "ECB" and
|
||||
reason =
|
||||
"Encryption mode ECB like AES/ECB/NoPadding is vulnerable to replay and other attacks. Consider using a different encryption mode, like CBC or GCM, instead."
|
||||
"Encryption mode ECB, as in AES/ECB/NoPadding for example, is vulnerable to replay and other attacks. Consider using a different encryption mode, like CBC or GCM, instead."
|
||||
or
|
||||
name = "AES/CBC/PKCS[57]Padding" and
|
||||
reason =
|
||||
|
||||
Reference in New Issue
Block a user