PixeeSandbox / sensitive-data-logging-example

Demonstrates Pixee's sensitive data logging codemod
MIT License
0 stars 1 forks source link

✨ Removed sensitive data from logs #7

Closed ntt-codeguardian[bot] closed 2 months ago

ntt-codeguardian[bot] commented 2 months ago

This change removes all logging statements that appear to log sensitive data.

- logger.info("User token: " + securityToken);
More reading * [https://cheatsheetseries.owasp.org/cheatsheets/Logging_Cheat_Sheet.html](https://cheatsheetseries.owasp.org/cheatsheets/Logging_Cheat_Sheet.html) * [https://owasp.org/Top10/A09_2021-Security_Logging_and_Monitoring_Failures/](https://owasp.org/Top10/A09_2021-Security_Logging_and_Monitoring_Failures/) * [https://cwe.mitre.org/data/definitions/532.html](https://cwe.mitre.org/data/definitions/532.html)

🧚🤖 Powered by Pixeebot Enhanced with AI Learn more

Feedback | Community | Docs | Codemod ID: pixee:java/sensitive-data-logging

ntt-codeguardian[bot] commented 2 months ago

I'm confident in this change, and the CI checks pass, too!

If you see any reason not to merge this, or you have suggestions for improvements, please let me know!

ntt-codeguardian[bot] commented 2 months ago

Just a friendly ping to remind you about this change. If there are concerns about it, we'd love to hear about them!

ntt-codeguardian[bot] commented 2 months ago

This change may not be a priority right now, so I'll close it. If there was something I could have done better, please let me know!

You can also customize me to make sure I'm working with you in the way you want.