pauljd/vectorcraft
1
0
Fork 0
mirror of https://github.com/storytold/vectorcraft.git synced 2026-11-11 06:01:18 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #6483 from storytold/sonar/s4790-pdf-md5

Browse Source 
sonar: MD5 in PDF encryption is the format's, not a choice
This commit is contained in:
BFlat
2026-11-11 07:03:39 +07:00
committed by GitHub
parent a03250b4f5 d65c762ab4
commit 1d0a1e90d1
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
sonar-project.properties
+8
View File
@@ -1,2 +1,10 @@
sonar.projectKey=storytold_vectorcraft
sonar.organization=storytold
# S4790 (weak hash): MD5 is the key derivation of the PDF standard security handler revisions 2-4
# (ISO 32000-1 §7.6.3.3), which PDF 1.3-1.6 files use. It is needed to read those files and to write
# the compatibility the user picks, not chosen for new security: the default is 256-bit AES
# (revision 6), which hashes with SHA-2.
sonar.issue.ignore.multicriteria=pdf_md5
sonar.issue.ignore.multicriteria.pdf_md5.ruleKey=rust:S4790
sonar.issue.ignore.multicriteria.pdf_md5.resourceKey=crates/pdf/src/encrypt.rs