Sensitive Data In Logs (ARCH8160)
Esta página aún no está disponible en tu idioma.
Key kotlin.logging.sensitive-data-in-logs · Severity error · Category logging · CWE CWE-532
Flags log calls whose message or arguments reference passwords, tokens, secrets or keys.
Incorrect
Section titled “Incorrect”logger.debug("auth with token=$token")Correct
Section titled “Correct”logger.debug("auth with token=***")Never log credentials; mask or omit them.