Mirrors/wordcraft
1
0 Fork 0
mirror of https://github.com/storytold/wordcraft.git synced 2026-11-11 00:31:10 +00:00
Code Issues Packages Projects Releases Wiki Activity

sonar: cite the ODF section the SHA-1 algorithms come from

Browse Source
This commit is contained in:
FredApps committed 2026-11-10 11:21:57 +01:00
1 parent 8dac5c7802
commit abd5a6e957
1 file changed
+3 -3
Download Patch File Download Diff File Expand all files Collapse all files
sonar-project.properties
+3 -3
View File
@@ -1,9 +1,9 @@
sonar.projectKey=storytold_wordcraft
sonar.organization=storytold
# S4790 (weak hash): SHA-1 is what ODF 1.2 encryption (§4.16, manifest:start-key-generation and
# manifest:checksum-type "SHA1/1K") names for files written by older office suites. It is needed
# to open those files, not chosen for new security; new files use SHA-256.
# S4790 (weak hash): SHA-1 is a start-key and "SHA1/1K" checksum algorithm that ODF package
# encryption (ODF 1.3 Part 2 §4.16) names, and older office suites wrote it. It is needed to open
# those files, not chosen for new security: WordCraft writes a SHA-256 start key and checksum.
sonar.issue.ignore.multicriteria=odt_sha1
sonar.issue.ignore.multicriteria.odt_sha1.ruleKey=rust:S4790
sonar.issue.ignore.multicriteria.odt_sha1.resourceKey=crates/formats/src/odt/crypt.rs