Tika: We break all the rules for good reasons!

> On Sep 29, 2020, at 4:21 PM, Nick Burch <[email protected]> wrote:
> 
> Hey All
> 
> Just a quick heads-up that for TIKA-3205 I generated a few new small private 
> keys (RSA, DSA, EC) and added them to the parser test documents folder, for 
> unit testing the new mime magics for keys and certificates. They're not 
> protecting or using anything.
> 
> One automated security scanning tool has already emailed me to warn that I 
> committed secrets (GitGuardian), and I think there's a chance others might do 
> too...
> 
> So before anyone else gets a notification and worries, I felt it best to give 
> everyone a heads-up that yes, there are private key files in the Tika source 
> tree, and yes, they are supposed to be there!
> 
> Cheers
> Nick

_______________________
Eric Pugh | Founder & CEO | OpenSource Connections, LLC | 434.466.1467 | 
http://www.opensourceconnections.com <http://www.opensourceconnections.com/> | 
My Free/Busy <http://tinyurl.com/eric-cal>  
Co-Author: Apache Solr Enterprise Search Server, 3rd Ed 
<https://www.packtpub.com/big-data-and-business-intelligence/apache-solr-enterprise-search-server-third-edition-raw>
    
This e-mail and all contents, including attachments, is considered to be 
Company Confidential unless explicitly stated otherwise, regardless of whether 
attachments are marked as such.

Reply via email to