-
Notifications
You must be signed in to change notification settings - Fork 130
Open
Labels
enhancementNew feature or requestNew feature or request
Description
Would be nice to add an example of safe code to the Remediation section of javascript_lang_logger_leak
- Do not include sensitive data directly in logger messages. This can lead to the exposure of such data in log files, which might be accessible to unauthorized individuals.
- Do use logging levels appropriately to control the verbosity of log output and minimize the risk of leaking sensitive information in production environments.
logger.info(`Results: ${data}`) // unsafelogger.info(`Results received: ${data.unsensitive}`) // safe as no sensitive data is output in info level
logger.debug(`Results: ${data}`) // safe: log the details of the issue with debug level only, disabled in productionLeTuRmt-ronkorving
Metadata
Metadata
Assignees
Labels
enhancementNew feature or requestNew feature or request