Mirrors/wordcraft
1
0 Fork 0
mirror of https://github.com/storytold/wordcraft.git synced 2026-11-11 00:31:10 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #6187 from storytold/sonar/format-mandated-sha1

Browse Source 
sonar: SHA-1 in ODT decryption is the format's, not a choice
This commit is contained in:
FredApps authored and GitHub committed 2026-11-10 18:43:18 +01:00
2 parents 8548b33be1 12869b8e02
commit a42c9eaab3
1 file changed
+7
Download Patch File Download Diff File Expand all files Collapse all files
sonar-project.properties
+7
View File
@@ -1,2 +1,9 @@
sonar.projectKey=storytold_wordcraft
sonar.organization=storytold
# S4790 (weak hash): SHA-1 is a start-key and "SHA1/1K" checksum algorithm that ODF package
# encryption (ODF 1.3 Part 2 §4.16) names, and older office suites wrote it. It is needed to open
# those files, not chosen for new security: WordCraft writes a SHA-256 start key and checksum.
sonar.issue.ignore.multicriteria=odt_sha1
sonar.issue.ignore.multicriteria.odt_sha1.ruleKey=rust:S4790
sonar.issue.ignore.multicriteria.odt_sha1.resourceKey=crates/formats/src/odt/crypt.rs