Mirrors/wordcraft
1
0 Fork 0
mirror of https://github.com/storytold/wordcraft.git synced 2026-11-11 00:31:10 +00:00
Code Issues Packages Projects Releases Wiki Activity

sonar: SHA-1 in ODT decryption is the format's, not a choice

Browse Source
This commit is contained in:
FredApps committed 2026-11-10 11:21:35 +01:00
1 parent 2922fe566b
commit 8dac5c7802
1 file changed
+7
Download Patch File Download Diff File Expand all files Collapse all files
sonar-project.properties
+7
View File
@@ -1,2 +1,9 @@
sonar.projectKey=storytold_wordcraft
sonar.organization=storytold
# S4790 (weak hash): SHA-1 is what ODF 1.2 encryption (§4.16, manifest:start-key-generation and
# manifest:checksum-type "SHA1/1K") names for files written by older office suites. It is needed
# to open those files, not chosen for new security; new files use SHA-256.
sonar.issue.ignore.multicriteria=odt_sha1
sonar.issue.ignore.multicriteria.odt_sha1.ruleKey=rust:S4790
sonar.issue.ignore.multicriteria.odt_sha1.resourceKey=crates/formats/src/odt/crypt.rs