CodeQL library for Python
codeql/python-all 0.11.13 (changelog, source)
Search

Module NormalHashFunction

Provides a taint-tracking configuration for detecting use of a broken or weak cryptographic hash function on sensitive data, that does NOT require a computationally expensive hash function.

Import path

import semmle.python.security.dataflow.WeakSensitiveDataHashingQuery

Imports

NormalHashFunction

Provides default sources, sinks and sanitizers for detecting “use of a broken or weak cryptographic hashing algorithm on sensitive data” vulnerabilities on sensitive data that does NOT require computationally expensive hashing, as well as extension points for adding your own.

Classes

Configuration

DEPRECATED: Use Flow module instead.

Aliases

Flow

Global taint-tracking for detecting “use of a broken or weak cryptographic hashing algorithm on sensitive data” vulnerabilities.