hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 11:15:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

JS: Add crypto test with AES-ECB

Browse Source
This commit is contained in:
Asger F
2023-03-16 14:52:18 +01:00
parent a9e5b34ad6
commit e907d685f4
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
javascript/ql/test/query-tests/Security/CWE-327/tst.js
View File

@@ -17,3 +17,6 @@ unknownCipher.update(secretText, 'utf8', 'hex'); // OK: unknown algorithm
desCipher.write(o.trusted, 'utf8', 'hex'); // BAD
desCipher.write(password, 'utf8', 'hex'); // OK (flagged by js/insufficient-password-hash)
const aesEcbCipher = crypto.createCipher('aes-128-ecb', key);
aesEcbCipher.update(secretText, 'utf8', 'hex'); // BAD