hiifong/pmd
1
0
Fork 0
forked from phoedos/pmd
Code Pull Requests Activity

Update documentation

Browse Source
This commit is contained in:
Travis CI (pmd-bot)
2018-05-21 11:36:09 +00:00
parent c95428d27a
commit edbc1f479a
1 changed files with 4 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
docs/pages/pmd/rules/java/security.md
View File

@ -5,12 +5,12 @@ permalink: pmd_rules_java_security.html
folder: pmd/rules/java folder: pmd/rules/java
sidebaractiveurl: /pmd_rules_java.html sidebaractiveurl: /pmd_rules_java.html
editmepath: ../pmd-java/src/main/resources/category/java/security.xml editmepath: ../pmd-java/src/main/resources/category/java/security.xml
keywords: Security, InsecureCryptoIv, HardCodedCryptoKey keywords: Security, HardCodedCryptoKey, InsecureCryptoIv
language: Java language: Java
--- ---
## HardCodedCryptoKey ## HardCodedCryptoKey
**Since:** PMD 6.3.0 **Since:** PMD 6.4.0
**Priority:** Medium (3) **Priority:** Medium (3)
@ -23,11 +23,11 @@ Do not use hard coded values for cryptographic operations. Please store keys out
``` java ``` java
public class Foo { public class Foo {
void good() { void good() {
SecretKeySpec secretKeySpec = new SecretKeySpec(Properties.getKey(), "AES"); SecretKeySpec secretKeySpec = new SecretKeySpec(Properties.getKey(), "AES");
} }
void bad() { void bad() {
SecretKeySpec secretKeySpec = new SecretKeySpec("my secret here".getBytes(), "AES"); SecretKeySpec secretKeySpec = new SecretKeySpec("my secret here".getBytes(), "AES");
} }
} }
``` ```
@ -64,7 +64,6 @@ public class Foo {
void alsoBad() { void alsoBad() {
byte[] iv = "secret iv in here".getBytes(); byte[] iv = "secret iv in here".getBytes();
} }
} }
``` ```