owncloud / ios-library

MIT License
77 stars 90 forks source link

Possible security issue- clarifications #152

Open jowasp opened 7 years ago

jowasp commented 7 years ago

When doing a static analysis using HP fortify , the following issue is raised: AFNetworkReachabilityManager.m at line 255.

 if ([key isEqualToString:@"reachable"] || [key isEqualToString:@"reachableViaWWAN"] || [key isEqualToString:@"reachableViaWiFi"]) {
        return [NSSet setWithObject:@"networkReachabilityStatus"];
    }

These do not seem as encryption keys, but would it be possible to clarify what kind of keys are being passed in the code?