sK243870 (Community Member) asked a question.

Hi ,
Am getting Varacode issue in below line of coding as Information Exposure Through Sent Data. Could please suggest how to write secure code to resolve the vaeracode issue.

var request = (HttpWebRequest)WebRequest.Create(uri);

  • sgibson (Veracode, Inc.)

    Hello,

    This kind of finding is going to be about the uri variable. The scanner will flag any data coming from a potentially sensitive source, like configuration data, when it's being sent out of the application. In this case, the concern is if the uri contains any secrets, or otherwise sensitive data, about the application. If it does not we normally recommend mitigating this low severity finding.

    Expand Post

Topics (1)

No articles found
Loading

Ask the Community

Get answers, share a use case, discuss your favorite features, or get input from the community.