update java/password-in-configuration to match csharp

erik-krogh · erik-krogh · commit 5a0183f1e26b · 2022-08-22T21:41:46.000+02:00
diff --git a/java/ql/src/experimental/Security/CWE/CWE-555/PasswordInConfigurationFile.ql b/java/ql/src/experimental/Security/CWE/CWE-555/PasswordInConfigurationFile.ql
@@ -48,4 +48,4 @@ where
   )
   or
   hasEmbeddedPassword(nameAttr.getValue().trim()) // Attribute value matches password pattern
-select nameAttr, "Plaintext password in configuration file."
+select nameAttr, "Avoid plaintext passwords in configuration files."

Original file line number	Diff line number	Diff line change
`@@ -48,4 +48,4 @@ where`
`48`	`48`	`)`
`49`	`49`	`or`
`50`	`50`	`hasEmbeddedPassword(nameAttr.getValue().trim()) // Attribute value matches password pattern`
`51`		`-select nameAttr, "Plaintext password in configuration file."`
	`51`	`+select nameAttr, "Avoid plaintext passwords in configuration files."`