Merge pull request #16482 from grakshith/rakshith/tune-java-crypto

Java: Add RSA/ECB/OEAP ciphers to the list of secure algorithms

java/ql/lib/semmle/code/java/security/BrokenCryptoAlgorithmQuery.qll

@@ -15,6 +15,8 @@ private class ShortStringLiteral extends StringLiteral {
 class BrokenAlgoLiteral extends ShortStringLiteral {
   BrokenAlgoLiteral() {
     this.getValue().regexpMatch(getInsecureAlgorithmRegex()) and
+    // Exclude RSA/ECB/.* ciphers.
+    not this.getValue().regexpMatch("RSA/ECB.*") and
     // Exclude German and French sentences.
     not this.getValue().regexpMatch(".*\\p{IsLowercase} des \\p{IsLetter}.*")
   }