Home

Never use Console logging in production

  • Vulnerability
  • - Minor

Rule description

  • Console logging is a method to discreetly find out what the code is doing and warn if a problem has occurred. It should be disabled in production, as it could expose sensitive data and reveal information about the inner workings of your application. Visual Expert will track such issues in your Powerbuilder code, to help you disabled them before going live.

 

Non-compliant Code Example 

FUNCTION ulong WriteConsole(long Handle, String OutPut, long NumCharsToWrite, &REF long NumCharsWritten, long reserved) LIBRARY "Kernel32.dll" ALIAS FOR "WriteConsoleW"
Visual Expert 2020
 VEPBRULE5