Esempi in C# (CSharp) per testcases.CWE315_Cleartext_Storage_in_Cookie CWE315_Cleartext_Storage_in_Cookie__Web_68b.BadSink

Esempio n. 1

File: CWE315_Cleartext_Storage_in_Cookie__Web_68a.cs Progetto: Anzsley/Juliet_Test_Suite_v1.3_for_C_Sharp

 public override void Bad(HttpRequest req, HttpResponse resp)
 {
     using (SecureString securePwd = new SecureString())
     {
         using (SecureString secureUser = new SecureString())
         {
             for (int i = 0; i < "AP@ssw0rd".Length; i++)
             {
                 /* INCIDENTAL: CWE-798 Use of Hard-coded Credentials */
                 securePwd.AppendChar("AP@ssw0rd"[i]);
             }
             for (int i = 0; i < "user".Length; i++)
             {
                 /* INCIDENTAL: CWE-798 Use of Hard-coded Credentials */
                 securePwd.AppendChar("user"[i]);
             }
             /* POTENTIAL FLAW: Set data to credentials (without hashing or encryption) */
             data = secureUser.ToString() + ":" + securePwd.ToString();
         }
     }
     CWE315_Cleartext_Storage_in_Cookie__Web_68b.BadSink(req, resp);
 }