密钥管理：chart.js的硬编码加密密钥 [英] Key Management: Hardcoded Encryption Key for chart.js

问题描述

我面临与chart.js api的密钥管理：硬编码加密密钥相关的问题。我们出于安全目的使用Fortify扫描。如何避免使用硬编码加密密钥。

I facing issue related to "Key Management: Hardcoded Encryption Key" for chart.js api. We are using Fortify Scanning for security purpose. How to avoid the 'Hardcoded Encryption Key'.

扫描后，我们发现在chart.js中硬编码的代码行。有什么办法可以解决此问题。

After scanning we found the line of code that is hardcoded in chart.js. Is there any way to resolve this issue.

var axisType = helpers.getValueOrDefault(valueObj.type, key === 'xAxes' ? 'category' : 'linear');

推荐答案

分析了chart.js代码文件后，发现没有硬编码加密密钥。
键是变量名。

After analysed the chart.js code file, we have found there is no hardcode encryption key . Key is variable name.

Hp强化将单词 key识别为加密密钥。这些不是加密密钥，它是一个变量名。因此，这是一个误报。

Hp fortify identified the word, 'key' as encryption key. These are not encryption key it is a variable name. Hence it is a false positive.

这篇关于密钥管理：chart.js的硬编码加密密钥的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！