Skip to content

Commit 4f0a666

Browse files
committed
Python: Tweak name of new query and add change note.
1 parent 3c4c8cf commit 4f0a666

File tree

2 files changed

+2
-1
lines changed

2 files changed

+2
-1
lines changed

change-notes/1.19/analysis-python.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -60,6 +60,7 @@ A new predicate `Stmt.getAnEntryNode()` has been added to make it easier to writ
6060
| Information exposure through an exception (`py/stack-trace-exposure`) | security, external/cwe/cwe-209, external/cwe/cwe-497 | Finds instances where information about an exception may be leaked to an external user. Results are shown on LGTM by default. |
6161
| Jinja2 templating with autoescape=False (`py/jinja2/autoescape-false`) | security, external/cwe/cwe-079 | Finds instantiations of `jinja2.Environment` with `autoescape=False` which may allow XSS attacks. Results are hidden on LGTM by default. |
6262
| Request without certificate validation (`py/request-without-cert-validation`) | security, external/cwe/cwe-295 | Finds requests where certificate verification has been explicitly turned off, possibly allowing man-in-the-middle attacks. Results are hidden on LGTM by default. |
63+
| Use of weak cryptographic key (`py/weak-crypto-key`) | security, external/cwe/cwe-326 | Finds creation of weak cryptographic keys. Results are shown on LGTM by default. |
6364

6465
## Changes to existing queries
6566

python/ql/src/Security/CWE-326/WeakCrypto.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
/**
2-
* @name Weak Cryptographic Key Use
2+
* @name Use of weak cryptographic key
33
* @description Use of a cryptographic key that is too small may allow the encryption to be broken.
44
* @kind problem
55
* @problem.severity error

0 commit comments

Comments
 (0)