Package org.sonar.python.checks.hotspots

Class HashingDataCheck

java.lang.Object

org.sonar.plugins.python.api.PythonSubscriptionCheck

org.sonar.python.checks.AbstractCallExpressionCheck

org.sonar.python.checks.hotspots.HashingDataCheck

All Implemented Interfaces:

PythonCheck, SubscriptionCheck

public class HashingDataCheck
extends AbstractCallExpressionCheck

Nested Class Summary

Nested classes/interfaces inherited from interface org.sonar.plugins.python.api.PythonCheck

PythonCheck.PreciseIssue

Nested classes/interfaces inherited from interface org.sonar.plugins.python.api.SubscriptionCheck

SubscriptionCheck.Context

Field Summary

Fields

Modifier and Type	Field	Description
static String	CHECK_KEY

Constructor Summary

Constructors

Constructor	Description
HashingDataCheck()

Method Summary

Modifier and Type	Method	Description
protected Set<String>	functionsToCheck()
void	initialize(SubscriptionCheck.Context context)
protected boolean	isException(CallExpression callExpression)	`make_password(password, salt, hasher)` function is sensitive when it's used with a specific hasher name or salt.
protected String	message()

Methods inherited from class org.sonar.python.checks.AbstractCallExpressionCheck

immutableSet, isWithinImport, visitNode

Methods inherited from class org.sonar.plugins.python.api.PythonSubscriptionCheck

leaveFile, scanFile

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

CHECK_KEY

public static final String CHECK_KEY

See Also:

Constant Field Values

Constructor Detail

HashingDataCheck

public HashingDataCheck()

Method Detail

initialize

public void initialize(SubscriptionCheck.Context context)

Specified by:

initialize in interface SubscriptionCheck

Overrides:

initialize in class AbstractCallExpressionCheck

isException

protected boolean isException(CallExpression callExpression)

`make_password(password, salt, hasher)` function is sensitive when it's used with a specific hasher name or salt. No issue should be raised when only the password is provided.

make_password(password, salt=salt) # Sensitive make_password(password, hasher=hasher) # Sensitive make_password(password, salt=salt, hasher=hasher) # Sensitive make_password(password) # OK

Overrides:

isException in class AbstractCallExpressionCheck

functionsToCheck

protected Set<String> functionsToCheck()

Specified by:

functionsToCheck in class AbstractCallExpressionCheck

message

protected String message()

Specified by:

message in class AbstractCallExpressionCheck