hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 02:05:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Remove user ids from the check since they get logged a lot and are less sensitive

Browse Source
This commit is contained in:
luchua-bc
2020-03-27 19:40:00 -04:00
parent d9327705d2
commit 048a33e143
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
java/ql/src/experimental/CWE-532/SensitiveInfoLog.ql
View File

@@ -48,7 +48,7 @@ class CredentialSource extends DataFlow::ExprNode {
private string getACredentialRegex() {
result = "(?i).*pass(wd|word|code|phrase)(?!.*question).*" or
result = "(?i).*(uid|uuid|puid|username|userid|url).*"
result = "(?i).*(username|url).*"
}
class SensitiveLoggingSink extends DataFlow::ExprNode {