mirror of
https://github.com/storytold/vectorcraft.git
synced 2026-11-11 18:54:55 +00:00
Dylan M. Taylor
d65c762ab4
Records why rust:S4790 (`crates/pdf/src/encrypt.rs`) stays, like wordcraft#6187 did for SHA-1 in ODT. MD5 is the key derivation of the PDF standard security handler revisions 2-4 (ISO 32000-1 §7.6.3.3), which PDF 1.3-1.6 encryption uses. It's needed to read those files and to write the compatibility the user picks. The default, 256-bit AES (revision 6), hashes with SHA-2.
11 lines
582 B
Properties
11 lines
582 B
Properties
sonar.projectKey=storytold_vectorcraft
|
|
sonar.organization=storytold
|
|
|
|
# S4790 (weak hash): MD5 is the key derivation of the PDF standard security handler revisions 2-4
|
|
# (ISO 32000-1 §7.6.3.3), which PDF 1.3-1.6 files use. It is needed to read those files and to write
|
|
# the compatibility the user picks, not chosen for new security: the default is 256-bit AES
|
|
# (revision 6), which hashes with SHA-2.
|
|
sonar.issue.ignore.multicriteria=pdf_md5
|
|
sonar.issue.ignore.multicriteria.pdf_md5.ruleKey=rust:S4790
|
|
sonar.issue.ignore.multicriteria.pdf_md5.resourceKey=crates/pdf/src/encrypt.rs
|