Test cases for sensitive logging sanitizer

2026-04-17 21:14:02 +02:00 · 2025-11-14 16:53:46 +00:00
parent d1eceee9d4
commit fa703e3e60
1 changed files with 2 additions and 0 deletions
--- a/java/ql/test/query-tests/security/CWE-532/Test.java
+++ b/java/ql/test/query-tests/security/CWE-532/Test.java
@@ -9,5 +9,7 @@ class Test {
        logger.error("Auth failed for: " + username); // Safe
        logger.error("Auth failed for: " + nullToken); // Safe
        logger.error("Auth failed for: " + stringTokenizer); // Safe
+        logger.error("Auth failed for: " + authToken.substring(4) + "..."); // Safe
+        logger.error("Auth failed for: " + authToken.substring(0,4) + "..."); // Safe
    }
 }