hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-03-30 12:18:18 +02:00
Code Issues Packages Projects Releases Wiki Activity

Allow NonKeyCiphers to include truncated SHA-512 MDs in Forge JS library.

Browse Source
This commit is contained in:
smiddy007
2023-04-13 23:16:20 -04:00
parent 15d5ad7a66
commit ec97cdc8a0
2 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
javascript/ql/lib/change-notes/2023-04-13-Forge-truncated-sha512-hash Normal file
View File

@@ -0,0 +1,5 @@
---
category: minorAnalysis
---
* The Forge module in `CryptoLibraries.qll` now correctly classifies SHA-512/224,
* SHA-512/256, and SHA-512/384 hashes used in message digests as NonKeyCiphers.