tree 42845d17819ebd8094ea4191225168b2efff573d
parent 4d2ca4d53069761d61c91da3af2ea8ee45940a73
author Mike Miller <mmiller@apache.org> 1536245382 -0400
committer GitHub <noreply@github.com> 1536245382 -0400

Add sec-bugs plugin. Closes #618 (#628)

* Created build profile for sec-bugs
* Replaced Math.Random with SecureRandom
* Sanitize user input in log messages to prevent potential CRLF injection
* Use SHA-256 instead of MD5 or SHA-1
* Remove unused method in CryptoUtils
* Replace vulnerable regex in Monitor param validation