com.h3xstream.findsecbugs.password
Class GoogleApiKeyDetector

java.lang.Object
  com.h3xstream.findsecbugs.password.GoogleApiKeyDetector

All Implemented Interfaces:

edu.umd.cs.findbugs.Detector, edu.umd.cs.findbugs.Priorities

public class GoogleApiKeyDetector
extends Object
implements edu.umd.cs.findbugs.Detector

GoogleApi provide code sample to sign URL using provided API key. The management of the key is left to the developer. Developers might simply copy-paste sample of code without loading the key from a configuration file.

If too much false positive are rise, the signature will be more precise. The assumption is that the code was copy and left unchanged except the key.

Ref: http://gmaps-samples.googlecode.com/svn/trunk/urlsigning/UrlSigner.java

Field Summary

Fields inherited from interface edu.umd.cs.findbugs.Priorities

EXP_PRIORITY, HIGH_PRIORITY, IGNORE_PRIORITY, LOW_PRIORITY, NORMAL_PRIORITY

Constructor Summary

GoogleApiKeyDetector(edu.umd.cs.findbugs.BugReporter bugReporter)

Method Summary

void	report()
void	visitClassContext(edu.umd.cs.findbugs.ba.ClassContext classContext)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

GoogleApiKeyDetector

public GoogleApiKeyDetector(edu.umd.cs.findbugs.BugReporter bugReporter)

Method Detail

visitClassContext

public void visitClassContext(edu.umd.cs.findbugs.ba.ClassContext classContext)

Specified by:

visitClassContext in interface edu.umd.cs.findbugs.Detector

report

public void report()

Specified by:

report in interface edu.umd.cs.findbugs.Detector