mirror of
https://github.com/github/codeql.git
synced 2026-04-29 18:55:14 +02:00
Rust: Add a test for the log crate + placeholder query.
This commit is contained in:
20
rust/ql/src/queries/security/CWE-312/CleartextLogging.ql
Normal file
20
rust/ql/src/queries/security/CWE-312/CleartextLogging.ql
Normal file
@@ -0,0 +1,20 @@
|
||||
/**
|
||||
* @name Cleartext logging of sensitive information
|
||||
* @description Logging sensitive information in plaintext can
|
||||
* expose it to an attacker.
|
||||
* @kind path-problem
|
||||
* @problem.severity error
|
||||
* @security-severity 7.5
|
||||
* @precision high
|
||||
* @id rust/cleartext-logging
|
||||
* @tags security
|
||||
* external/cwe/cwe-312
|
||||
* external/cwe/cwe-359
|
||||
* external/cwe/cwe-532
|
||||
*/
|
||||
|
||||
import rust
|
||||
|
||||
from Element e
|
||||
where none()
|
||||
select e, ""
|
||||
Reference in New Issue
Block a user