org.sonar.l10n.javascript.rules.javascript.S2817.html Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of javascript-checks Show documentation

There is a newer version: 10.20.0.29356

This rule is deprecated, and will eventually be removed.
Why is this an issue?
The Web SQL Database standard never saw the light of day. It was first formulated, then deprecated by the W3C and was only implemented in some
browsers. (It is not supported in Firefox or IE.)
Further, the use of a Web SQL Database poses security concerns, since you only need its name to access such a database.
Noncompliant code example
var db = window.openDatabase("myDb", "1.0", "Personal secrets stored here", 2*1024*1024);  // Noncompliant

Resources

   OWASP - Top 10 2017 Category A3 - Sensitive Data
  Exposure 
   OWASP - Top 10 2017 Category A9 -
  Using Components with Known Vulnerabilities