Files
codeql/python/ql/src/Security
Rasmus Wriedt Larsen 605bd19306 Python: Add CWE-328 to py/weak-sensitive-data-hashing
Reading over the description at https://cwe.mitre.org/data/definitions/328.html:

> The product uses a hashing algorithm that produces a hash value that can be used to determine the original input, or to find an input that can produce the same hash, more efficiently than brute force techniques.

For the data that does not require computationally expensive hashing, that will be the exactly problems that this query finds 👍 (that is, MD5, SHA1)
2021-08-25 10:19:22 +02:00
..
2021-06-15 13:25:17 +01:00
2021-06-15 13:25:17 +01:00
2021-07-02 18:00:33 +00:00
2021-06-15 13:25:17 +01:00
2021-06-15 13:25:17 +01:00
2021-06-15 13:25:17 +01:00
2021-06-15 13:25:17 +01:00