mirror of
https://github.com/github/codeql.git
synced 2025-12-16 16:53:25 +01:00
State that ruby broken crypto algo doesn't deal with hashing
This commit is contained in:
@@ -13,6 +13,12 @@
|
||||
algorithm means that encrypted or hashed data is less
|
||||
secure than it appears to be.
|
||||
</p>
|
||||
<p>
|
||||
This query alerts on any use of a weak cryptographic algorithm, that is
|
||||
not a hashing algorithm. Use of broken or weak cryptographic hash
|
||||
functions are handled by the
|
||||
<code>rb/weak-sensitive-data-hashing</code> query.
|
||||
</p>
|
||||
</overview>
|
||||
<recommendation>
|
||||
<p>
|
||||
|
||||
Reference in New Issue
Block a user