File tree Expand file tree Collapse file tree 1 file changed +4
-2
lines changed
java/ql/lib/semmle/code/java/security Expand file tree Collapse file tree 1 file changed +4
-2
lines changed Original file line number Diff line number Diff line change @@ -44,10 +44,12 @@ module InsecureCryptoConfig implements DataFlow::ConfigSig {
44
44
predicate isSource ( DataFlow:: Node n ) {
45
45
n .asExpr ( ) instanceof InsecureAlgoLiteral
46
46
or
47
- exists ( PropertiesGetPropertyMethodCall mc | n .asExpr ( ) = mc |
47
+ exists ( PropertiesGetPropertyMethodCall mc , string value |
48
+ n .asExpr ( ) = mc and value = mc .getPropertyValue ( )
49
+ |
48
50
// Since properties pairs are not included in the java/weak-crypto-algorithm,
49
51
// The check for values from properties files can be less strict than `InsecureAlgoLiteral`.
50
- not mc . getPropertyValue ( ) .regexpMatch ( getSecureAlgorithmRegex ( ) )
52
+ not value .regexpMatch ( getSecureAlgorithmRegex ( ) )
51
53
)
52
54
}
53
55
You can’t perform that action at this time.
0 commit comments