File tree Expand file tree Collapse file tree 1 file changed +4
-2
lines changed
java/ql/lib/semmle/code/java/security Expand file tree Collapse file tree 1 file changed +4
-2
lines changed Original file line number Diff line number Diff line change @@ -44,10 +44,12 @@ module InsecureCryptoConfig implements DataFlow::ConfigSig {
4444 predicate isSource ( DataFlow:: Node n ) {
4545 n .asExpr ( ) instanceof InsecureAlgoLiteral
4646 or
47- exists ( PropertiesGetPropertyMethodCall mc | n .asExpr ( ) = mc |
47+ exists ( PropertiesGetPropertyMethodCall mc , string value |
48+ n .asExpr ( ) = mc and value = mc .getPropertyValue ( )
49+ |
4850 // Since properties pairs are not included in the java/weak-crypto-algorithm,
4951 // The check for values from properties files can be less strict than `InsecureAlgoLiteral`.
50- not mc . getPropertyValue ( ) .regexpMatch ( getSecureAlgorithmRegex ( ) )
52+ not value .regexpMatch ( getSecureAlgorithmRegex ( ) )
5153 )
5254 }
5355
You can’t perform that action at this time.
0 commit comments