Add a few more insecure versions

taus-semmle · taus-semmle · commit 9ac50186f671 · 2019-01-07T15:24:15.000+01:00
diff --git a/python/ql/src/Security/CWE-327/InsecureProtocol.ql b/python/ql/src/Security/CWE-327/InsecureProtocol.ql
@@ -28,6 +28,8 @@ string insecure_version_name() {
     // For the `ssl` module
     result = "PROTOCOL_SSLv2" or
     result = "PROTOCOL_SSLv3" or
+    result = "PROTOCOL_SSLv23" or
+    result = "PROTOCOL_TLS" or
     result = "PROTOCOL_TLSv1"
 }
 

Original file line number	Diff line number	Diff line change
`@@ -28,6 +28,8 @@ string insecure_version_name() {`
`28`	`28`	// For the `ssl` module
`29`	`29`	`result = "PROTOCOL_SSLv2" or`
`30`	`30`	`result = "PROTOCOL_SSLv3" or`
	`31`	`+ result = "PROTOCOL_SSLv23" or`
	`32`	`+ result = "PROTOCOL_TLS" or`
`31`	`33`	`result = "PROTOCOL_TLSv1"`
`32`	`34`	`}`
`33`	`35`