Skip to content

Commit 39b0d14

Browse files
committed
Add CodeQL suppression
1 parent 1f69f48 commit 39b0d14

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

src/main/java/com/microsoft/sqlserver/jdbc/IOBuffer.java

+3-1
Original file line numberDiff line numberDiff line change
@@ -1812,7 +1812,9 @@ else if (con.getTrustManagerClass() != null) {
18121812
if (logger.isLoggable(Level.FINEST))
18131813
logger.finest(toString() + " Initializing SSL context");
18141814

1815-
sslContext.init(km, tm, null);
1815+
sslContext.init(km, tm, null); // CodeQL [SM03853] Potential all-accepting TrustManager is by design
1816+
// Permissive trust manager allows minimum encryption of credentials even when trusted certificates
1817+
// aren't provisioned on the server.
18161818

18171819
// Got the SSL context. Now create an SSL socket over our own proxy socket
18181820
// which we can toggle between TDS-encapsulated and raw communications.

0 commit comments

Comments
 (0)