-
Notifications
You must be signed in to change notification settings - Fork 371
Open
Description
Describe the bug
The file documentation/esapi4java-core-2.0-symmetric-crypto-user-guide.html has references to the the non-longer valid ESAPI property Encryptor.fixedIV . One used to be able to pick:
Encryptor.chooseIVMethod=fixedIVand then set Encryptor.fixedIV, but that was a bad kludge from the start to allow those who had previously hard-coded an IV (way more common than you'd think as per my code review observations). That property was deprecated in 2.2.0.0 and removed in 2.3.0.0.
Therefore, this User Guide needs to be revised to reflect that.
Specify what ESAPI version(s) you are experiencing this bug in
Versions 2.3.0.0 and later.
To Reproduce
Look at the file documentation/esapi4java-core-2.0-symmetric-crypto-user-guide.html and search for the above mentioned properties and update the documentation accordingly.
Expected behavior
Fix the docs.
Platform environment (please complete the following information)
- OS: all
- Browser [e.g. chrome, safari]: N/A
- JDK version used with ESAPI: N/A
Reactions are currently unavailable