Description
CWE: 315 Storing plaintext data in a cookie
BadSource: Set data to credentials (without hashing or encryption)
GoodSource: Set data to a hash of credentials
Sinks:
GoodSink: Hash data before storing in cookie
BadSink : Store data directly in cookie
Flow Variant: 52 Data flow: data passed as an argument from one method to another to another in three different classes in the same package
Flaws
Test Suites
Documentation
Have any comments on this test case? Please, send us an email.