No hardcoded secret with algorithm methods

このページは日本語には対応しておりません。随時翻訳に取り組んでいます。
翻訳に関してご質問やご意見ございましたら、お気軽にご連絡ください

Metadata

ID: java-security/algorithm-no-hardcoded-secret

Language: Java

Severity: Error

Category: Security

CWE: 798

Description

Do not use hardcoded secrets. Instead, use secrets coming from a vault and a secure source.

Learn More

Non-Compliant Code Examples

class App {
    private static void error1() {
        Algorithm algorithm = Algorithm.HMAC256("secret");
        Algorithm algorithm = Algorithm.HMAC512("secret");
        Algorithm algorithm = Algorithm.HMAC384("secret");
    }
}

Compliant Code Examples

class App {
    @Test
    public void myFunctionToTest() {
        Algorithm algorithm = Algorithm.HMAC256("secret");
    }
}
https://static.datadoghq.com/static/images/logos/github_avatar.svg https://static.datadoghq.com/static/images/logos/vscode_avatar.svg jetbrains

Seamless integrations. Try Datadog Code Analysis