Skip to content

Commit e5a74cb

Browse files
committed
Swift: Add a reference for swift/hardcoded-key.
1 parent b3a3957 commit e5a74cb

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

swift/ql/src/queries/Security/CWE-321/HardcodedEncryptionKey.qhelp

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14,4 +14,8 @@
1414
<p>The following example shows a few cases of instantiating a cipher with various encryption keys. In the 'BAD' cases, the key material is hardcoded, making the encrypted data vulnerable to recovery. In the 'GOOD' cases, the key material is randomly generated and not hardcoded, which protects the encrypted data against recovery.</p>
1515
<sample src="HardcodedEncryptionKey.swift" />
1616
</example>
17+
18+
<references>
19+
<li>OWASP: <a href="https://cheatsheetseries.owasp.org/cheatsheets/Key_Management_Cheat_Sheet.html">Key Management Cheat Sheet</a></li>
20+
</references>
1721
</qhelp>

0 commit comments

Comments
 (0)