rspec/rules/S2087/description.adoc
Arseniy Zaostrovnykh 7ca29f686f Force linebreaks
2021-02-02 15:02:10 +01:00

5 lines
369 B
Plaintext

Security through obscurity is no security at all, and the use of Base64 encoding to obscure a password will only slow an attacker down for seconds, at the most. Instead, passwords should be encrypted with private keys that are at least 128 bits in length.
This rule checks for the use of Base64 decoding on values that are then used in database and LDAP connections.