mirror of
https://github.com/github/codeql.git
synced 2025-12-21 19:26:31 +01:00
5f6e3dcc2e
This partly reverts the changes from https://github.com/github/codeql/pull/10252 Although consistency is nice, the new messages didn't sound as natural. New alert message would read > Insecure hashing algorithm (md5) depends on sensitive data (password). (...) I'm not sure what it means that a hashing algorithm depends on data. So for me, the original text below is much easier to understand. > Sensitive data (password) is used in a hashing algorithm (md5) that is insecure (...) Same goes for the other sensitive data queries.
Note that the tests in this directory are very shallow, and simply show that the query is able to produce alerts.
More in-depth tests can be found for the individual frameworks that we have modeled Cryptography::CryptographicOperation for.