Module CleartextLoggingQuery

Provides a taint-tracking configuration for “Clear-text logging of sensitive information”.

Note, for performance reasons: only import this file if CleartextLogging::Configuration is needed, otherwise CleartextLoggingCustomizations should be imported instead.

Import path

import semmle.python.security.dataflow.CleartextLoggingQuery

Imports

CleartextLogging

Provides default sources, sinks and sanitizers for detecting “Clear-text logging of sensitive information” vulnerabilities, as well as extension points for adding your own.

Classes

Configuration

DEPRECATED: Use CleartextLoggingFlow module instead.

Aliases

CleartextLoggingFlow

Global taint-tracking for detecting “Clear-text logging of sensitive information” vulnerabilities.