Skip to content

Commit 0d6dae9

Browse files
authored
Add CodeQL suppression (#2255)
1 parent 09ae6b8 commit 0d6dae9

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

src/main/java/com/microsoft/sqlserver/jdbc/IOBuffer.java

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1812,7 +1812,9 @@ else if (con.getTrustManagerClass() != null) {
18121812
if (logger.isLoggable(Level.FINEST))
18131813
logger.finest(toString() + " Initializing SSL context");
18141814

1815-
sslContext.init(km, tm, null);
1815+
sslContext.init(km, tm, null); // CodeQL [SM03853] Potential all-accepting TrustManager is by design
1816+
// Permissive trust manager allows minimum encryption of credentials even when trusted certificates
1817+
// aren't provisioned on the server.
18161818

18171819
// Got the SSL context. Now create an SSL socket over our own proxy socket
18181820
// which we can toggle between TDS-encapsulated and raw communications.

0 commit comments

Comments
 (0)