Create vuln-16.java - #19
Conversation
Sorry, something went wrong.
| private static void bad1() { | ||
| try { | ||
| // ruleid: java-jwt-hardcoded-secret | ||
| Algorithm algorithm = Algorithm.HMAC256("secret"); |
There was a problem hiding this comment.
A hard-coded credential was detected. It is not recommended to store credentials in source-code, as this risks secrets being leaked and used by either an internal or external malicious adversary. It is recommended to use environment variables to securely provide credentials or retrieve credentials from a secure vault or HSM (Hardware Security Module).
Ignore this finding from java-jwt-hardcoded-secret.
Sorry, something went wrong.
| abstract class App2 | ||
| { | ||
| // ruleid: java-jwt-hardcoded-secret | ||
| static String secret = "secret"; |
There was a problem hiding this comment.
A hard-coded credential was detected. It is not recommended to store credentials in source-code, as this risks secrets being leaked and used by either an internal or external malicious adversary. It is recommended to use environment variables to securely provide credentials or retrieve credentials from a secure vault or HSM (Hardware Security Module).
Ignore this finding from java-jwt-hardcoded-secret.
Sorry, something went wrong.
No description provided.