codeql/java/ql/test/query-tests/security/CWE-780/RsaWithoutOaepTest.java

import javax.crypto.Cipher;

class RsaWithoutOaep {
    public void test() throws Exception {
        Cipher rsaBad = Cipher.getInstance("RSA/ECB/NoPadding"); // $ Alert

        Cipher rsaGood = Cipher.getInstance("RSA/ECB/OAEPWithSHA-1AndMGF1Padding");
    }

    public Cipher getCipher(String spec) throws Exception {
        return Cipher.getInstance(spec); // $ Sink
    }

    public void test2() throws Exception {
        Cipher rsa = getCipher("RSA/ECB/NoPadding"); // $ Alert
    }
}