capacitor icon indicating copy to clipboard operation
capacitor copied to clipboard

bug: CWE ID 201

Open nolram88 opened this issue 2 years ago • 0 comments

Bug Report

Capacitor Version

💊   Capacitor Doctor  💊 

Latest Dependencies:

  @capacitor/cli: 3.5.1
  @capacitor/core: 3.5.1
  @capacitor/android: 3.5.1
  @capacitor/ios: 3.5.1

Installed Dependencies:

  @capacitor/cli: 3.3.4
  @capacitor/android: 3.5.1
  @capacitor/ios: 3.5.1
  @capacitor/core: 3.5.1

[success] iOS looking great! 👌
[success] Android looking great! 👌```

### Platform(s)

Android


### Current Behavior

Veracode Report

Insertion of Sensitive Information Into Sent Data CWE ID 201

Description

Sensitive information may be exposed as a result of outbound network connections made by the application.

Recommendations

Ensure that the transfer of sensitive data is intended and that it does not violate application security policy or user expectations.

	

com/.../FileUtils.java 199

com/.../http/HttpRequest.java 746

com/.../http/HttpRequest.java 2493

com/silkimen/http/HttpRequest.java

com/.../camera/ImageUtils.java 88

com/.../camera/ImageUtils.java 108

com/.../MessageHandler.java 105

.../WebViewLocalServer.java 339

.../WebViewLocalServer.java 339

.../WebViewLocalServer.java 341


### Expected Behavior

 Either the issue is resolved or an explanation as to why this may be a false positive please.


nolram88 avatar Jun 01 '22 18:06 nolram88