Details

    • Type: Language-Specification
    • Status: Active
    • Resolution: Unresolved
    • Labels:
      None
    • Impact:
      Unknown 'null' severity
    • Likelihood:
      Unknown 'null' severity

      Description

      Sensitive Code Example

      Dim username As String = "admin"
      Dim password As String = "Password123" ' Sensitive
      Dim usernamePassword As String = "user=admin&password=Password123" ' Sensitive
      Dim url As String = "scheme://user:Admin123@domain.com" ' Sensitive
      

      Compliant Solution

      Dim username As String = "admin"
      Dim password As String = GetEncryptedPassword()
      Dim usernamePassword As String = String.Format("user={0}&password={1}", GetEncryptedUsername(), GetEncryptedPassword())
      Dim url As String = $"scheme://{username}:{password}@domain.com"
      
      Dim url2 As String= "http://guest:guest@domain.com" ' Compliant
      Const Password_Property As String = "custom.password" ' Compliant
      

      Exceptions

      • Issue is not raised when URI username and password are the same.
      • Issue is not raised when searched pattern is found in variable name and value.

        Attachments

          Activity

            People

            Assignee:
            Unassigned Unassigned
            Reporter:
            valeri.hristov Valeri Hristov (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated: