hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-05 13:45:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

Ruby: add a test case for cleartext logging that uses NonCleartextPasswordFlow

Browse Source
This commit is contained in:
Alex Ford
2022-02-10 11:25:15 +00:00
parent 83a3808bbe
commit 7c1bd9a533
1 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
ruby/ql/test/query-tests/security/cwe-312/logging.rb
View File

@@ -82,3 +82,12 @@ end
password_arg = "65f2950df2f0e2c38d7ba2ccca767291"
foo(password_arg, stdout_logger)
foo("65f2950df2f0e2c38d7ba2ccca767292", stdout_logger)
def redact(password)
"***"
end
password_r1 = redact("65f2950df2f0e2c38d7ba2ccca767291")
password_r2 = password_r1
# GOOD: password_r2 has been redacted
stdout_logger.info password_r2