Insecure-TLS: simplify warning message

smowton · smowton · commit db9760082dc9 · 2020-07-28T11:55:58.000+01:00
diff --git a/ql/src/experimental/CWE-327/InsecureTLS.ql b/ql/src/experimental/CWE-327/InsecureTLS.ql
@@ -223,7 +223,7 @@ predicate isInsecureTlsCipherFlow(DataFlow::PathNode source, DataFlow::PathNode
     )
     or
     cfg.isSourceInsecureCipherSuites(source.getNode()) and
-    message = "Use of an insecure cipher suite from InsecureCipherSuites()."
+    message = "Use of an insecure cipher suite."
   )
 }
 

Original file line number	Diff line number	Diff line change
`@@ -223,7 +223,7 @@ predicate isInsecureTlsCipherFlow(DataFlow::PathNode source, DataFlow::PathNode`
`223`	`223`	`)`
`224`	`224`	`or`
`225`	`225`	`cfg.isSourceInsecureCipherSuites(source.getNode()) and`
`226`		`- message = "Use of an insecure cipher suite from InsecureCipherSuites()."`
	`226`	`+ message = "Use of an insecure cipher suite."`
`227`	`227`	`)`
`228`	`228`	`}`
`229`	`229`