Skip to content

Commit a4adf06

Browse files
Addressing feedback for the qhelp file.
1 parent d929b13 commit a4adf06

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

java/ql/src/experimental/Security/CWE/CWE-327/Azure/UnsafeUsageOfClientSideEncryptionVersion.qhelp

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,12 +4,12 @@
44

55
<overview>
66
<p>Azure Storage .NET, Java, and Python SDKs support encryption on the client with a customer-managed key that is maintained in Azure Key Vault or another key store.</p>
7-
<p>Current release versions of the Azure Storage SDKs use cipher block chaining (CBC mode) for client-side encryption (referred to as <code>v1</code>).</p>
7+
<p>The Azure Storage SDK version 12.18.0 or later supports version <code>V2</code> for client-side encryption. All previous versions of Azure Storage SDK only support client-side encryption <code>V1</code> which is unsafe.</p>
88

99
</overview>
1010
<recommendation>
1111

12-
<p>Consider switching to <code>v2</code> client-side encryption.</p>
12+
<p>Consider switching to <code>V2</code> client-side encryption.</p>
1313

1414
</recommendation>
1515
<example>

0 commit comments

Comments
 (0)