fix: remove rsa/ecb/* from getASecureAlgorithmName

Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>
2026-04-20 22:44:52 +02:00 · 2024-06-04 10:34:37 -07:00
parent 97f9a882c6
commit 65af2556ed
1 changed files with 1 additions and 2 deletions
--- a/java/ql/lib/semmle/code/java/security/Encryption.qll
+++ b/java/ql/lib/semmle/code/java/security/Encryption.qll
@@ -250,8 +250,7 @@ string getASecureAlgorithmName() {
  result =
    [
      "RSA", "SHA-?256", "SHA-?512", "CCM", "GCM", "AES(?![^a-zA-Z](ECB|CBC/PKCS[57]Padding))",
-      "Blowfish", "ECIES", "RSA/ECB/OAEPWithSHA-1AndMGF1Padding",
-      "RSA/ECB/OAEPWithSHA-256AndMGF1Padding"
+      "Blowfish", "ECIES"
    ]
 }