capacitor-community / capacitor-community/sqlite

bug: Limit the information displayed with errors and avoid displaying internal application traces.

Open
#606 0 comments 0 reactions 0 assignees View on GitHub
bug/fix needs: triage
Dominant language
Swift
Stars
661
Forks
158
PR merge metrics
No merged PRs in 30d

Description

The current implementation includes the use of Log.e and other logging mechanisms that expose internal application traces and sensitive information. This can lead to security vulnerabilities, especially if these logs are unintentionally left enabled in production builds.

**Code Reference:**
Example from the file:

```
**java**
Log.v(TAG, "Error: exportToJson " + e.getMessage());
```
The above logs directly expose internal exception details (e.getMessage()), which could contain sensitive information about the application's internal state.

**Impact:**
Exposing internal traces could aid attackers in understanding the application's architecture and identifying vulnerabilities.
This practice violates secure coding principles by disclosing unnecessary information.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.