Skip to content

Update rule-RsaNoPadding.yml and test-RsaNoPadding.java

Bhavya Kaushal requested to merge Java-RsaNoPadding-Rule-update-draft into main

Fixes gitlab-org/gitlab#427684 (closed)

Modified the rule-RsaNoPadding.yml file to reflect following 2 changes:

  1. Not Highlight - var cipher = Cipher.getInstance("AES/GCM/NoPadding");
  2. Highlight -
String cipher2 = "RSA/NONE/NoPadding";
Cipher.getInstance(cipher2);

Modified the test cases (test-RsaNoPadding.java) to reflect following 2 changes:

  1. Add 2 new True Positive testcases
// first test case
Cipher.getInstance("RSA/ECB/NoPadding");
//second test case
String cipher2 = "RSA/ECB/NoPadding";
Cipher.getInstance(cipher2);
  1. Add semgrep test annotations.
Edited by Dinesh Bolkensteyn

Merge request reports