False Positive: Cloudflare Plugin
milux opened this issue · comments
The following is a false-positive, because the flagged code provides a backwards-compatible CSRNG:
FILE: .../wordpress/wp-content/plugins/cloudflare/vendor/cloudflare/cloudflare-plugin-backend/src/SecurityUtil.php
----------------------------------------------
FOUND 2 ERRORS AFFECTING 1 LINE
----------------------------------------------
16 | ERROR | Extension 'mcrypt' is deprecated since PHP 7.1 and removed since PHP 7.2; Use openssl (preferred) or pecl/mcrypt once available instead
16 | ERROR | Function mcrypt_create_iv() is deprecated since PHP 7.1 and removed since PHP 7.2; Use random_bytes() or OpenSSL instead
----------------------------------------------