securesauce / precli

Precaution CLI - command line static application security testing tool
https://precli.readthedocs.io/
Other
13 stars 3 forks source link

Weak hash and weak random Java rules need to guard from none #426

Closed ericwb closed 4 months ago

ericwb commented 4 months ago

The algorithm string might have a None value if the parser cannot determine its actual value.

For example, in the added testcase, if a value goes through a Properties class, the parser does track this value.