Files
codeql/javascript/ql/src/Security/CWE-862/EmptyPasswordInConfigurationFile.qhelp
2022-01-24 13:39:54 +01:00

17 lines
350 B
XML

<!DOCTYPE qhelp PUBLIC
"-//Semmle//qhelp//EN"
"qhelp.dtd">
<qhelp>
<overview>
<p>The use of an empty string as a password in a configuration file is not secure.</p>
</overview>
<recommendation>
<p>Choose a strong password and encrypt it if it has to be stored in a configuration file.</p>
</recommendation>
<references>
</references>
</qhelp>