(PHP-A1011) Audit required: Insecure use of logger #2
Description
Description
Logging user-provided values directly can put application vulnerable to multiple attack vectors. Superglobal variables contains values specified by the user, which are considered as tainted and untrusted. Therefore, it is discouraged to pass these variables directly to the logger.
Occurrences
There is 1 occurrence of this issue in the repository.
See all occurrences on DeepSource → deepsource.io/gh/Gipfel/PHP-Webinterface-MySQL/issue/PHP-A1011/occurrences/