Rasmus Wriedt Larsen 8f52089475 C#: Fix CWE tag for cs/insufficient-key-size ...

Since this targets

CWE-326 Inadequate Encryption Strength

> The software stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
> \- https://cwe.mitre.org/data/definitions/326.html

and not

CWE-327: Use of a Broken or Risky Cryptographic Algorithm

> The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of sensitive information.
> \- https://cwe.mitre.org/data/definitions/327.html

This matches what we do for similar query in Python: https://github.com/github/codeql/blob/main/python/ql/src/Security/CWE-326/WeakCryptoKey.ql

2021-09-07 12:59:10 +02:00

..

examples

Packaging: Normalize all qlpack.yml files for all languages

2021-09-03 11:53:28 -07:00

lib

Merge pull request #6629 from tamasvajk/feature/dispatch-fix

2021-09-07 12:35:45 +02:00

src

C#: Fix CWE tag for cs/insufficient-key-size

2021-09-07 12:59:10 +02:00

test

Merge pull request #6260 from tamasvajk/feature/method-name

2021-09-07 12:09:27 +02:00