Update cpp/ql/src/Security/CWE/CWE-311/CleartextStorage.inc.qhelp

Co-authored-by: Jonas Jensen <jbj@github.com>
This commit is contained in:
Geoffrey White
2021-09-28 15:13:29 +01:00
committed by GitHub
parent 6901d9d9c2
commit 10323ac819

View File

@@ -9,7 +9,7 @@ storage.</p>
</overview>
<recommendation>
<p>Ensure that sensitive information is always encrypted before being stored or transmitted, especially before writing to a file.
<p>Ensure that sensitive information is always encrypted before being stored to a file or transmitted over the network.
It may be wise to encrypt information before it is put into a buffer that may be readable in memory.</p>
<p>In general, decrypt sensitive information only at the point where it is necessary for it to be used in