Titanium JIRA Archive
Titanium SDK/CLI (TIMOB)

[TIMOB-23688] iOS: Remove Comments Referencing Password

GitHub Issuen/a
TypeStory
PriorityHigh
StatusClosed
ResolutionFixed
Resolution Date2016-07-27T16:17:31.000+0000
Affected Version/sn/a
Fix Version/sRelease 6.0.0
ComponentsiOS
Labelsn/a
ReporterBen Bahrenburg
AssigneeHans Knöchel
Created2016-07-26T22:04:44.000+0000
Updated2016-09-30T21:11:58.000+0000

Description

When running Fortify code analysis against the SDK the usage of "password" in comments where detected in the following files. Reachability.m TiUIAlertDialogProxy.m It is recommended these comments be removed as some tools would identity them as providing information disclosure.

Comments

  1. Chee Kiat Ng 2016-07-27

    Thanks for the info [~ben.bahrenburg@gmail.com]!
  2. Hans Knöchel 2016-07-27

    PR: https://github.com/appcelerator/titanium_mobile/pull/8163
  3. Abir Mukherjee 2016-09-30

    I validated the commits. "password" does not appear in any comment in either file.

JSON Source