mirror of
https://github.com/github/codeql.git
synced 2026-02-13 05:31:22 +01:00
25 lines
649 B
Plaintext
25 lines
649 B
Plaintext
/**
|
|
* @name Password in configuration file
|
|
* @description Finds passwords in configuration files.
|
|
* @kind problem
|
|
* @problem.severity warning
|
|
* @security-severity 7.5
|
|
* @precision low
|
|
* @id cs/password-in-configuration
|
|
* @tags security
|
|
* external/cwe/cwe-013
|
|
* external/cwe/cwe-256
|
|
* external/cwe/cwe-313
|
|
*/
|
|
|
|
import csharp
|
|
|
|
from XmlAttribute a
|
|
where
|
|
a.getName().toLowerCase() = "password" and not a.getValue() = ""
|
|
or
|
|
a.getName().toLowerCase() = "pwd" and not a.getValue() = ""
|
|
or
|
|
a.getValue().regexpMatch("(?is).*(pwd|password)\\s*=(?!\\s*;).*")
|
|
select a, "Avoid plaintext passwords in configuration files."
|