The App logs information. Sensitive information should never be logged.
ID |
objectivec.storage.ios_app_logging |
Severity |
low |
Resource |
Storage |
Language |
Objective-C |
Rationale
The App logs information. Sensitive information should never be logged.
The following code illustrates a vulnerable pattern detected by this rule:
void badNSLog() {
NSString *password = @"secret123";
// VULNERABLE: The App logs information. Sensitive information should never be logged.
NSLog(@"User password: %@", password);
}