Test Case: java-autocomplete-1117

  1			MessageDigest md = MessageDigest.getInstance("SHA-1");  2			byte[] messageDigest = md.digest(source.getBytes());  3			BigInteger no = new BigInteger(1, messageDigest);  4			String hashtext = no.toString(16);  5			while (hashtext.length() < 40) {  6				hashtext = "0" + hashtext;  7			}  8			return hashtext;  9		} catch (NoSuchAlgorithmException e) { 10			throw new RuntimeException(e); 11		} 12	} 13​ 14	public static String generateRandomString(int length) { 15		Random random = new Random(); 16		StringBuilder buffer = new StringBuilder(length); 17		for (int i = 0; i < length; i++) { 18			int randomLimitedInt = CONSTANTS.RANDOM_STRING_CHARACTERS.length(); 19			buffer.append(CONSTANTS.RANDOM_STRING_CHARACTERS.charAt(random.nextInt(randomLimitedInt))); 20		} 21		return buffer.toString(); 22	} 23​ 24	public static String generateRandomNumericString(int length) { 25		Random random = new Random(); 26		StringBuilder buffer = new StringBuilder(length); 27		for (int i = 0; i < length; i++) { 28			int randomLimitedInt = CONSTANTS.NUMERIC_CHARACTERS.length(); 29			buffer.append(CONSTANTS.NUMERIC_CHARACTERS.charAt(random.nextInt(randomLimitedInt))); 30		} 31		return buffer.toString(); 32	} 33​ 34	public static String generateRandomAlphaNumericString(int length) { 35		Random random = new Random(); 36		StringBuilder buffer = new StringBuilder(length); 37		for (int i = 0; i < length; i++) { 38			int randomLimitedInt = CONSTANTS.ALPHA_NUMERIC_CHARACTERS.length(); 39			buffer.append(CONSTANTS.ALPHA_NUMERIC_CHARACTERS.charAt(random.nextInt(randomLimitedInt))); 40		} 41		return buffer.toString(); 42	} 43​ 44	public static String generateRandomHexString(int length) { 45		Random random = new Random(); 46		StringBuilder buffer = new StringBuilder(length); 47		for (int i = 0; i < length; i++) { 48			int randomLimitedInt = CONSTANTS.HEX_CHARACTERS.length(); 49			buffer.append(CONSTANTS.HEX_CHARACTERS.charAt(random.nextInt(randomLimitedInt))); 50		} 51		return buffer.toString(); 52	} 53​ 54	public static String generateRandomBase64String(int length) { 55		Random random = new Random(); 56		StringBuilder buffer = new StringBuilder(length); 57		for (int i = 0; i < length; i++) { 58			int randomLimitedInt = CONSTANTS.BASE64_CHARACTERS.length(); 59			buffer.append(CONSTANTS.BASE64_CHARACTERS.charAt(random.nextInt(randomLimitedInt))); 60		} 61		return buffer.toString(); 62	} 63​ 64	public static String generateRandomAsciiString(int length) { 65		Random random = new Random(); 66		StringBuilder buffer = new StringBuilder(length); 67		for (int i = 0; i < length; i++) { 68			int randomLimitedInt = CONSTANTS.ASCII_CHARACTERS.length(); 69			buffer.append(CONSTANTS.ASCII_CHARACTERS.charAt(random.nextInt(randomLimitedInt))); 70		} 71		return buffer.toString(); 72	} 73​ 74	public static String generateRandomPrintableAsciiString(int length) { 75		Random random = new Random(); 76		StringBuilder buffer = new StringBuilder(length); 77		for (int i = 0; i < length; i++) { 78			int randomLimitedInt = CONSTANTS.PRINTABLE_ASCII_CHARACTERS.length(); 79			buffer.append(CONSTANTS.PRINTABLE_ASCII_CHARACTERS.charAt(random.nextInt(randomLimitedInt))); 80		} 81		return buffer.toString(); 82	} 83​ 84	public static String generateRandomUUIDString() { 85		return UUID.randomUUID().toString(); 86	} 87​ 88	public static String generateRandomEmailAddress() { 89		return generateRandomString(10) + "@" + generateRandomString(5) + "." + generateRandomString(3); 90	} 91​ 92	public static String generateRandomPhoneNumber() { 93		return "+" + generateRandomNumericString(2) + " " + generateRandomNumericString(3) + "-" + generateRandomNumericString(3) + "-" + generateRandomNumericString(4); 94	} 95​ 96	public static String generateRandomIpAddress() { 97		return generateRandomNumericString(3) + "." + generateRandomNumericString(3) + "." + generateRandomNumericString(3) + "." + generateRandomNumericString(3); 98	} 99​100	public static String generateRandomMacAddress() {101		return generateRandomHexString(2) + ":" + generateRandomHexString(2) + ":" + generateRandomHexString(2) + ":" + generateRandomHexString(2) + ":" + generateRandomHexString(2) + ":" + generateRandomHexString(2);102	}103​104	public static String generateRandomUrl() {105		return "http://" + generateRandomString(10) + "." + generateRandomString(3);106	}107​108	public static String generateRandomDomainName() {109		return generateRandomString(10) + "." + generateRandomString(3);110	}111​112	public static String generateRandomFilePath() {113		return "/" + generateRandomString(5) + "/" + generateRandomString(5) + "/" + generateRandomString(5);114	}115​116	public static String generateRandomFileName() {117		return generateRandomString(10) + "." + generateRandomString(3);118	}119​120	public static String generateRandomCreditCardNumber() {121		return generateRandomNumericString(16);122	}123​124	public static String generateRandomCreditCardCvv() {125		return generateRandomNumericString(3);126	}127​128	public static String generateRandomCreditCardExpirationDate() {129		return generateRandomNumericString(2) + "/" + generateRandomNumericString(2);130	}131​132	public static String generateRandomSocialSecurityNumber() {133		return generateRandomNumericString(3) + "-" + generateRandomNumericString(2) + "-" + generateRandomNumericString(4);134	}135​136	public static String generateRandomZipCode() {137		return generateRandomNumericString(5);138	}139​140	public static String generateRandomState() {141		return CONSTANTS.STATES[new Random().nextInt(CONSTANTS.STATES.length)];142	}143​144	public static String generateRandomCity() {145		return CONSTANTS.CITIES[new Random().nextInt(CONSTANTS.CITIES.length)];146	}147​148	public static String generateRandomCountry() {149		return CONSTANTS.COUNTRIES[new Random().nextInt(CONSTANTS.COUNTRIES.length)];150	}151​152	public static String generateRandomLanguage() {153		return CONSTANTS.LANGUAGES[new Random().nextInt(CONSTANTS.LANGUAGES.length)];154	}155​156	public static String generateRandomCurrency() {157		return CONSTANTS.CURRENCIES[new Random().nextInt(CONSTANTS.CURRENCIES.length)];158	}159​160	public static String generateRandomUserAgent() {161		return CONSTANTS.USER_AGENTS[new Random().nextInt(CONSTANTS.USER_AGENTS.length)];162	}163​164	public static String generateRandomColorHex() {165		return "#" + generateRandomHexString(6);166	}167​168	public static String generateRandomColorName() {169		return CONSTANTS.COLORS[new Random().nextInt(CONSTANTS.COLORS.length)];170	}171​172	public static String generateRandomMimeType() {173		return CONSTANTS.MIME_TYPES[new Random().nextInt(CONSTANTS.MIME_TYPES.length)];174	}175​176	public static String generateRandomHttpMethod() {177		return CONSTANTS.HTTP_METHODS[new Random().nextInt(CONSTANTS.HTTP_METHODS.length)];178	}179​180	public static String generateRandomHttpStatus() {181		return CONSTANTS.HTTP_STATUS_CODES[new Random().nextInt(CONSTANTS.HTTP_STATUS_CODES.length)];182	}183​184	public static String generateRandomOperatingSystem() {185		return CONSTANTS.OPERATING_SYSTEMS[new Random().nextInt(CONSTANTS.OPERATING_SYSTEMS.length)];186	}187​188	public static String generateRandomBrowser() {189		return CONSTANTS.BROWSERS[new Random().nextInt(CONSTANTS.BROWSERS.length)];190	}191​192	public static String generateRandomDevice() {193		return CONSTANTS.DEVICES[new Random().nextInt(CONSTANTS.DEVICES.length)];194	}195​196	public static String generateRandomImageFormat() {197		return CONSTANTS.IMAGE_FORMATS[new Random().nextInt(CONSTANTS.IMAGE_FORMATS.length)];198	}199​200	public static String generateRandomVideoFormat() {201		return CONSTANTS.VIDEO_FORMATS[new Random().nextInt(CONSTANTS.VIDEO_FORMATS.length)];202	}203​204	public static String generateRandomAudioFormat() {205		return CONSTANTS.AUDIO_FORMATS[new Random().nextInt(CONSTANTS.AUDIO_FORMATS

1. warningLine 1

   Use of weak hashing algorithm

  1			MessageDigest md = MessageDigest.getInstance("SHA-1");  2			byte[] messageDigest = md.digest(source.getBytes());  3			BigInteger no = new BigInteger(1, messageDigest);  4			String hashtext = no.toString(16);  5			while (hashtext.length() < 40) {  6				hashtext = "0" + hashtext;  7			}  8			return hashtext;  9		} catch (NoSuchAlgorithmException e) { 10			throw new RuntimeException(e); 11		} 12	} 13​ 14	public static String generateRandomSHA1String() { 15		String uuid = UUID.randomUUID().toString(); 16		return toSHA1String(uuid); 17	} 18​ 19	public static String generateRandomSHA1String(int stringLength) { 20		StringBuilder sb = new StringBuilder(stringLength); 21		for (int i = 0; i < stringLength; i++) { 22			sb.append((char) ('a' + new Random().nextInt(26))); 23		} 24		String randomString = sb.toString(); 25		return toSHA1String(randomString); 26	} 27​ 28	public static String generateSecureRandomSHA1String() { 29		SecureRandom random = new SecureRandom(); 30		byte[] salt = new byte[16]; 31		random.nextBytes(salt); 32		String uuid = UUID.randomUUID().toString(); 33		return toSHA1String(uuid + Base64.getEncoder().encodeToString(salt)); 34	} 35​ 36	public static String generateSecureRandomSHA1String(int stringLength) { 37		if (stringLength <= 0) { 38			throw new IllegalArgumentException("String length must be positive."); 39		} 40​ 41		SecureRandom random = new SecureRandom(); 42		byte[] randomBytes = new byte[stringLength]; 43		random.nextBytes(randomBytes); 44​ 45		// Encode the random bytes to a string.  Using Base64 for simplicity. 46		String randomString = Base64.getEncoder().encodeToString(randomBytes); 47​ 48		return toSHA1String(randomString); 49	} 50​ 51	public static String generateSecureRandomString(int stringLength) { 52		if (stringLength <= 0) { 53			throw new IllegalArgumentException("String length must be positive."); 54		} 55​ 56		SecureRandom random = new SecureRandom(); 57		byte[] randomBytes = new byte[stringLength]; 58		random.nextBytes(randomBytes); 59​ 60		// Encode the random bytes to a string.  Using Base64 for simplicity. 61		return Base64.getEncoder().encodeToString(randomBytes); 62	} 63​ 64	public static String generateRandomString(int stringLength) { 65		if (stringLength <= 0) { 66			throw new IllegalArgumentException("String length must be positive."); 67		} 68​ 69		Random random = new Random(); 70		StringBuilder sb = new StringBuilder(stringLength); 71		for (int i = 0; i < stringLength; i++) { 72			sb.append((char) ('a' + random.nextInt(26))); 73		} 74		return sb.toString(); 75	} 76​ 77	public static String generateUUID() { 78		return UUID.randomUUID().toString(); 79	} 80​ 81	public static String generateSecureUUID() { 82		return UUID.randomUUID().toString(); 83	} 84​ 85	public static String generateRandomAlphanumericString(int length) { 86		if (length <= 0) { 87			throw new IllegalArgumentException("Length must be positive"); 88		} 89​ 90		SecureRandom random = new SecureRandom(); 91		StringBuilder sb = new StringBuilder(length); 92		for (int i = 0; i < length; i++) { 93			int charType = random.nextInt(3); // 0: digit, 1: lowercase, 2: uppercase 94			switch (charType) { 95				case 0: 96					sb.append((char) (random.nextInt(10) + '0')); 97					break; 98				case 1: 99					sb.append((char) (random.nextInt(26) + 'a'));100					break;101				case 2:102					sb.append((char) (random.nextInt(26) + 'A'));103					break;104			}105		}106		return sb.toString();107	}108​109	public static String generateRandomHexString(int length) {110		if (length <= 0) {111			throw new IllegalArgumentException("Length must be positive");112		}113​114		SecureRandom random = new SecureRandom();115		StringBuilder sb = new StringBuilder(length);116		for (int i = 0; i < length; i++) {117			sb.append(Integer.toHexString(random.nextInt(16)));118		}119		return sb.toString();120	}121​122	public static String generateSalt() {123		SecureRandom random = new SecureRandom();124		byte[] salt = new byte[16];125		random.nextBytes(salt);126		return Base64.getEncoder().encodeToString(salt);127	}128​129	public static String hashPassword(String password, String salt) {130		try {131			String saltedPassword = password + salt;132			MessageDigest md = MessageDigest.getInstance("SHA-256");133			byte[] hashedPassword = md.digest(saltedPassword.getBytes(StandardCharsets.UTF_8));134			return Base64.getEncoder().encodeToString(hashedPassword);135		} catch (NoSuchAlgorithmException e) {136			throw new RuntimeException("Error hashing password", e);137		}138	}139​140	public static boolean verifyPassword(String password, String hashedPassword, String salt) {141		String newHashedPassword = hashPassword(password, salt);142		return newHashedPassword.equals(hashedPassword);143	}144​145	public static String generateSecureToken(int length) {146		SecureRandom secureRandom = new SecureRandom();147		byte[] tokenBytes = new byte[length];148		secureRandom.nextBytes(tokenBytes);149		return Base64.getUrlEncoder().withoutPadding().encodeToString(tokenBytes);150	}151​152	public static String generateSecureToken() {153		return generateSecureToken(32); // Default length of 32 bytes (256 bits)154	}155​156	public static byte[] generateSecureRandomBytes(int length) {157		SecureRandom secureRandom = new SecureRandom();158		byte[] bytes = new byte[length];159		secureRandom.nextBytes(bytes);160		return bytes;161	}162​163	public static String encrypt(String data, String key) throws Exception {164		SecretKeySpec secretKey = new SecretKeySpec(key.getBytes(StandardCharsets.UTF_8), "AES");165		Cipher cipher = Cipher.getInstance("AES/ECB/PKCS5Padding");166		cipher.init(Cipher.ENCRYPT_MODE, secretKey);167		byte[] encryptedBytes = cipher.doFinal(data.getBytes(StandardCharsets.UTF_8));168		return Base64.getEncoder().encodeToString(encryptedBytes);169	}170​171	public static String decrypt(String encryptedData, String key) throws Exception {172		SecretKeySpec secretKey = new SecretKeySpec(key.getBytes(StandardCharsets.UTF_8), "AES");173		Cipher cipher = Cipher.getInstance("AES/ECB/PKCS5Padding");174		cipher.init(Cipher.DECRYPT_MODE, secretKey);175		byte[] decryptedBytes = cipher.doFinal(Base64.getDecoder().decode(encryptedData));176		return new String(decryptedBytes, StandardCharsets.UTF_8);177	}178​179	public static String encryptWithGCM(String data, String key) throws Exception {180		SecretKeySpec secretKey = new SecretKeySpec(key.getBytes(StandardCharsets.UTF_8), "AES");181		Cipher cipher = Cipher.getInstance("AES/GCM/NoPadding");182		byte[] iv = new byte[12];183		SecureRandom secureRandom = new SecureRandom();184		secureRandom.nextBytes(iv);185		GCMParameterSpec parameterSpec = new GCMParameterSpec(128, iv);186		cipher.init(Cipher.ENCRYPT_MODE, secretKey, parameterSpec);187		byte[] encryptedBytes = cipher.doFinal(data.getBytes(StandardCharsets.UTF_8));188​189		// Combine IV and encrypted data for storage190		byte[] combined = new byte[iv.length + encryptedBytes.length];191		System.arraycopy(iv, 0, combined, 0, iv.length);192		System.arraycopy(encryptedBytes, 0, combined, iv.length, encryptedBytes.length);193​194		return Base64.getEncoder().encodeToString(combined);195	}196​197	public static String decryptWithGCM(String encryptedData, String key) throws Exception {198		byte[] combined = Base64.getDecoder().decode(encryptedData);199		byte[] iv = Arrays.copyOfRange(combined, 0, 12);200		byte[] encryptedBytes = Arrays.copyOfRange(combined, 12, combined.length);201​202		SecretKeySpec secretKey = new SecretKeySpec(key.getBytes(StandardCharsets.UTF_8), "AES");203		Cipher cipher = Cipher.getInstance("AES/GCM/No

1. warningLine 165

   Deprecated cryptographic algorithms being used (ECB)

2. warningLine 1

   Use of weak hashing algorithm

3. warningLine 181

   Use of RSA without OAEP padding.