rspec/rules/S4790/ask-yourself.adoc

10 lines
315 B
Plaintext

== Ask Yourself Whether
The hashed value is used in a security context like:
* User-password storage.
* Security token generation (used to confirm e-mail when registering on a website, reset password, etc ...).
* To compute some message integrity.
There is a risk if you answered yes to any of those questions.