enable lint "GetInstance" security check as error
This commit is contained in:
parent
0e6e839ed7
commit
4a684182ca
@ -23,6 +23,7 @@
|
||||
<issue id="NestedScrolling" severity="error"/>
|
||||
<issue id="StringFormatCount" severity="error"/>
|
||||
<issue id="UnsafeProtectedBroadcastReceiver" severity="error"/>
|
||||
<issue id="GetInstance" severity="error"/>
|
||||
|
||||
<issue id="PluralsCandidate" severity="error"/>
|
||||
<issue id="HardcodedText" severity="error"/>
|
||||
|
@ -65,6 +65,13 @@ public class PasswordObfuscator {
|
||||
return result;
|
||||
}
|
||||
|
||||
/**
|
||||
* <b>This uses the AES-ECB cipher which is known to be insecure</b>
|
||||
*
|
||||
* @see <a href="https://blog.filippo.io/the-ecb-penguin/">The ECB Penguin</a>
|
||||
*/
|
||||
@Deprecated
|
||||
@SuppressWarnings("GetInstance")
|
||||
public String encode(String junk, char[] password) {
|
||||
if (password == null) return null;
|
||||
try {
|
||||
@ -84,6 +91,13 @@ public class PasswordObfuscator {
|
||||
return null;
|
||||
}
|
||||
|
||||
/**
|
||||
* <b>This uses the AES-ECB cipher which is known to be insecure</b>
|
||||
*
|
||||
* @see <a href="https://blog.filippo.io/the-ecb-penguin/">The ECB Penguin</a>
|
||||
*/
|
||||
@Deprecated
|
||||
@SuppressWarnings("GetInstance")
|
||||
public char[] decode(String junk, String password) {
|
||||
if (password == null) return null;
|
||||
try {
|
||||
|
Loading…
x
Reference in New Issue
Block a user