org.sonar.python.checks.hotspots

Class HashingDataCheck

java.lang.Object

org.sonar.python.PythonVisitor

org.sonar.python.PythonCheck

org.sonar.python.checks.AbstractCallExpressionCheck

org.sonar.python.checks.hotspots.HashingDataCheck

public class HashingDataCheck
extends AbstractCallExpressionCheck

Nested Class Summary

Nested classes/interfaces inherited from class org.sonar.python.PythonCheck

PythonCheck.PreciseIssue

Field Summary

Fields

Modifier and Type	Field and Description
static String	CHECK_KEY

Constructor Summary

Constructors

Constructor and Description
HashingDataCheck()

Method Summary

Modifier and Type	Method and Description
protected Set<String>	functionsToCheck()
protected boolean	isException(com.sonar.sslr.api.AstNode callExpression) `make_password(password, salt, hasher)` function is sensitive when it's used with a specific hasher name or salt.
protected String	message()
Set<com.sonar.sslr.api.AstNodeType>	subscribedKinds()
void	visitNode(com.sonar.sslr.api.AstNode node)

Methods inherited from class org.sonar.python.PythonCheck

addFileIssue, addIssue, addIssue, addIssue, addLineIssue, immutableSet, scanFileForIssues

Methods inherited from class org.sonar.python.PythonVisitor

getContext, leaveFile, leaveNode, scanFile, scanNode, visitFile, visitToken

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

CHECK_KEY

public static final String CHECK_KEY

See Also:

Constant Field Values

Constructor Detail

HashingDataCheck

public HashingDataCheck()

Method Detail

subscribedKinds

public Set<com.sonar.sslr.api.AstNodeType> subscribedKinds()

Overrides:

subscribedKinds in class AbstractCallExpressionCheck

visitNode

public void visitNode(com.sonar.sslr.api.AstNode node)

Overrides:

visitNode in class AbstractCallExpressionCheck

isException

protected boolean isException(com.sonar.sslr.api.AstNode callExpression)

`make_password(password, salt, hasher)` function is sensitive when it's used with a specific hasher name or salt. No issue should be raised when only the password is provided.

make_password(password, salt=salt) # Sensitive make_password(password, hasher=hasher) # Sensitive make_password(password, salt=salt, hasher=hasher) # Sensitive make_password(password) # OK

Overrides:

isException in class AbstractCallExpressionCheck

functionsToCheck

protected Set<String> functionsToCheck()

Specified by:

functionsToCheck in class AbstractCallExpressionCheck

message

protected String message()

Specified by:

message in class AbstractCallExpressionCheck