From e65daaae49cf6b9b3ce975f19b3985d01d6644fa Mon Sep 17 00:00:00 2001 From: smiddy007 <70818821+smiddy007@users.noreply.github.com> Date: Mon, 17 Apr 2023 13:15:10 -0400 Subject: [PATCH] Delete InsufficientPasswordHash_CryptoJS.js not used in qhelp file --- .../CWE-916/examples/InsufficientPasswordHash_CryptoJS.js | 8 -------- 1 file changed, 8 deletions(-) delete mode 100644 javascript/ql/src/Security/CWE-916/examples/InsufficientPasswordHash_CryptoJS.js diff --git a/javascript/ql/src/Security/CWE-916/examples/InsufficientPasswordHash_CryptoJS.js b/javascript/ql/src/Security/CWE-916/examples/InsufficientPasswordHash_CryptoJS.js deleted file mode 100644 index c0a621f85b1..00000000000 --- a/javascript/ql/src/Security/CWE-916/examples/InsufficientPasswordHash_CryptoJS.js +++ /dev/null @@ -1,8 +0,0 @@ -const crypto = require('crypto-js') -function hashPassword(email, password) { - var algo = crypto.algo.SHA512.create() - algo.update(password, 'utf-8') // BAD - algo.update(email.toLowerCase(), 'utf-8') - var hash = algo.finalize() - return hash.toString(crypto.enc.Base64) -} \ No newline at end of file