Package org.sonar.python.checks.hotspots
Class HashingDataCheck
- java.lang.Object
-
- org.sonar.python.PythonVisitor
-
- org.sonar.python.PythonCheck
-
- org.sonar.python.checks.AbstractCallExpressionCheck
-
- org.sonar.python.checks.hotspots.HashingDataCheck
-
public class HashingDataCheck extends AbstractCallExpressionCheck
-
-
Nested Class Summary
-
Nested classes/interfaces inherited from class org.sonar.python.PythonCheck
PythonCheck.PreciseIssue
-
-
Constructor Summary
Constructors Constructor Description HashingDataCheck()
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description protected Set<String>functionsToCheck()protected booleanisException(com.sonar.sslr.api.AstNode callExpression)`make_password(password, salt, hasher)` function is sensitive when it's used with a specific hasher name or salt.protected Stringmessage()Set<com.sonar.sslr.api.AstNodeType>subscribedKinds()voidvisitNode(com.sonar.sslr.api.AstNode node)-
Methods inherited from class org.sonar.python.PythonCheck
addFileIssue, addIssue, addIssue, addIssue, addLineIssue, immutableSet, scanFileForIssues
-
Methods inherited from class org.sonar.python.PythonVisitor
getContext, leaveFile, leaveNode, scanFile, scanNode, visitFile, visitToken
-
-
-
-
Field Detail
-
CHECK_KEY
public static final String CHECK_KEY
- See Also:
- Constant Field Values
-
-
Method Detail
-
subscribedKinds
public Set<com.sonar.sslr.api.AstNodeType> subscribedKinds()
- Overrides:
subscribedKindsin classAbstractCallExpressionCheck
-
visitNode
public void visitNode(com.sonar.sslr.api.AstNode node)
- Overrides:
visitNodein classAbstractCallExpressionCheck
-
isException
protected boolean isException(com.sonar.sslr.api.AstNode callExpression)
`make_password(password, salt, hasher)` function is sensitive when it's used with a specific hasher name or salt. No issue should be raised when only the password is provided.make_password(password, salt=salt) # Sensitive make_password(password, hasher=hasher) # Sensitive make_password(password, salt=salt, hasher=hasher) # Sensitive make_password(password) # OK
- Overrides:
isExceptionin classAbstractCallExpressionCheck
-
functionsToCheck
protected Set<String> functionsToCheck()
- Specified by:
functionsToCheckin classAbstractCallExpressionCheck
-
message
protected String message()
- Specified by:
messagein classAbstractCallExpressionCheck
-
-