We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent a9e5b34 commit e907d68Copy full SHA for e907d68
javascript/ql/test/query-tests/Security/CWE-327/tst.js
@@ -17,3 +17,6 @@ unknownCipher.update(secretText, 'utf8', 'hex'); // OK: unknown algorithm
17
desCipher.write(o.trusted, 'utf8', 'hex'); // BAD
18
19
desCipher.write(password, 'utf8', 'hex'); // OK (flagged by js/insufficient-password-hash)
20
+
21
+const aesEcbCipher = crypto.createCipher('aes-128-ecb', key);
22
+aesEcbCipher.update(secretText, 'utf8', 'hex'); // BAD
0 commit comments