Skip to content
This repository has been archived by the owner on Feb 5, 2024. It is now read-only.

MessageReceiver and Sender Security Issue #19

Open
MoeweX opened this issue Sep 11, 2017 · 0 comments
Open

MessageReceiver and Sender Security Issue #19

MoeweX opened this issue Sep 11, 2017 · 0 comments

Comments

@MoeweX
Copy link
Contributor

MoeweX commented Sep 11, 2017

The sign and verify methods of the message class depend on the content field. However, in some cases the receiver does not have a value set for the content field, so he does not sign the message, which is accepted by the sender.

This needs to be changed in that the content field is never null, so sign and verify work again. The tolerating code needs to be removed from the sender and receiver as well (null check for content before sign/verify).

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant