Details

    • Type: Language-Specification
    • Status: Active
    • Resolution: Unresolved
    • Labels:
      None
    • Impact:
      Unknown 'null' severity
    • Likelihood:
      Unknown 'null' severity

      Description

      Sensitive Code Example

      $url = "http://example.com"; // Sensitive
      $url = "ftp://anonymous@example.com"; // Sensitive
      $url = "telnet://anonymous@example.com"; // Sensitive
      
      $con = ftp_connect('example.com'); // Sensitive
      
      $trans = (new Swift_SmtpTransport('XXX', 1234)); // Sensitive
      
      $mailer = new PHPMailer(true); // Sensitive
      

      Compliant Solution

      $url = "https://example.com"; // Compliant
      $url = "sftp://anonymous@example.com"; // Compliant
      $url = "ssh://anonymous@example.com"; // Compliant
      
      $con = ftp_ssl_connect('example.com'); // Compliant
      
      $trans = (new Swift_SmtpTransport('smtp.example.org', 1234))
        ->setEncryption('tls') // Compliant
      ;
      
      $mailer = new PHPMailer(true);
      $mailer->SMTPSecure = 'tls'; // Compliant
      

        Attachments

          Activity

            People

            Assignee:
            Unassigned Unassigned
            Reporter:
            hendrik.buchwald Hendrik Buchwald
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated: