SDey681610 (Community Member) asked a question.
Information Exposure Through Sent Data (CWE ID 201)
private void startVideo(){
Intent intent=new Intent(this,VideoViewerActivity.class);
intent.putExtra("VideoURL",_videoUrl);
startActivity(intent); //problem show in this line
}
Can any explain the reason and solution. It's starting another activity with some value passed in intent.
.png){kind=logo}
Great question, this flaw is concerned with sensitive information. The analysis engine sees the information originating from a sensitive source, and in your case it is most likely a config file.
The recommendation is to review if the data is sensitive according to your companies security policies. If it is sensitive, then you should not include the information. If it is not sensitive, mark it as Mitigated by Design, and get the mitigation proposal approved by your security team.