Files
codeql/csharp/ql/src/Configuration/EmptyPasswordInConfigurationFile.qhelp
2018-08-02 17:53:23 +01:00

17 lines
353 B
XML

<!DOCTYPE qhelp PUBLIC
"-//Semmle//qhelp//EN"
"qhelp.dtd">
<qhelp>
<overview>
<p>The use of an empty string as a password in a configuration file is not secure.</p>
</overview>
<recommendation>
<p>Choose a proper password and encrypt it if you need to store it in the configuration file.</p>
</recommendation>
<references>
</references>
</qhelp>