Skip to content

Commit 651a76c

Browse files
committed
Python: Add CWE-532 to CleartextLogging
Relevant for this query: CWE-532: Insertion of Sensitive Information into Log File > While logging all information may be helpful during development > stages, it is important that logging levels be set appropriately > before a product ships so that sensitive user data and system > information are not accidentally exposed to potential attackers. See https://cwe.mitre.org/data/definitions/532.html JS also did this recently: #7103
1 parent c05ffd4 commit 651a76c

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

python/ql/src/Security/CWE-312/CleartextLogging.ql

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,7 @@
1010
* @tags security
1111
* external/cwe/cwe-312
1212
* external/cwe/cwe-359
13+
* external/cwe/cwe-532
1314
*/
1415

1516
import python

0 commit comments

Comments
 (0)