rspec/rules/S1279/cobol/rule.adoc

16 lines
467 B
Plaintext
Raw Normal View History

2021-04-28 16:49:39 +02:00
The ``++DISPLAY++`` statement outputs data to standard out or some other destination and could reveal sensitive information. Therefore, it should be avoided.
2021-04-28 16:49:39 +02:00
== Noncompliant Code Example
----
DISPLAY "hello world" *> Noncompliant
----
2021-04-28 16:49:39 +02:00
== See
* https://www.owasp.org/index.php/Top_10-2017_A3-Sensitive_Data_Exposure[OWASP Top 10 2017 Category A3] - Sensitive Data Exposure
* http://cwe.mitre.org/data/definitions/489.html[MITRE, CWE-489] - Leftover Debug Code