[GitHub] chehxing opened a new issue #9964: 安全漏洞:加密密钥进行硬编码

[GitBox <gi...@apache.org>]

chehxing opened a new issue #9964: 安全漏洞:加密密钥进行硬编码
URL: https://github.com/apache/incubator-echarts/issues/9964
 
 
   ### Version
   3.3.0
   
   ### Steps to reproduce
   用Fortify Audit Workbench扫描系统， 发现系统报了一个关于echarts的漏洞。
   
   ### What is expected?
   通过验证
   
   ### What is actually happening?
   Porous Defenses - CWE ID 798
   使用硬编码凭证。 CWE-798 声明:“软件包含硬编码凭证，例如密码或加密密钥，用于自身的入站验证、 外部组件的出站通信或者内部数据的加密”。
   
   public/js/echarts.min.js:1
   Sink: Operation
   Enclosing Method: lambda() Source:
   SCA
   public/js/echarts.min.js:1
   Sink: Operation Enclosing Method: hv() Source:
   SCA
   
   <!-- This issue is generated by echarts-issue-helper. DO NOT REMOVE -->
   

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@echarts.apache.org
For additional commands, e-mail: dev-help@echarts.apache.org