capacitor
capacitor copied to clipboard
bug: CWE ID 201
Bug Report
Capacitor Version
💊 Capacitor Doctor 💊
Latest Dependencies:
@capacitor/cli: 3.5.1
@capacitor/core: 3.5.1
@capacitor/android: 3.5.1
@capacitor/ios: 3.5.1
Installed Dependencies:
@capacitor/cli: 3.3.4
@capacitor/android: 3.5.1
@capacitor/ios: 3.5.1
@capacitor/core: 3.5.1
[success] iOS looking great! 👌
[success] Android looking great! 👌```
### Platform(s)
Android
### Current Behavior
Veracode Report
Insertion of Sensitive Information Into Sent Data CWE ID 201
Description
Sensitive information may be exposed as a result of outbound network connections made by the application.
Recommendations
Ensure that the transfer of sensitive data is intended and that it does not violate application security policy or user expectations.
com/.../FileUtils.java 199
com/.../http/HttpRequest.java 746
com/.../http/HttpRequest.java 2493
com/silkimen/http/HttpRequest.java
com/.../camera/ImageUtils.java 88
com/.../camera/ImageUtils.java 108
com/.../MessageHandler.java 105
.../WebViewLocalServer.java 339
.../WebViewLocalServer.java 339
.../WebViewLocalServer.java 341
### Expected Behavior
Either the issue is resolved or an explanation as to why this may be a false positive please.