Skip to content

Remove Logs #18

@sarn0ld

Description

@sarn0ld

In my opinion security relevant SDKs like the cidaas-android-sdk should not log any information.

However, there seems to be a few logging mechanisms (Log, Timber, LogFile) spread all over the sdk source.

I'm using "com.github.Cidaas:cidaas-android-sdk:3.2.9".

This class is even logging the AccessToken as (encrypted and base64 encoded) string:
de.cidaas.sdk.android.helper.converter.EntityToModelConverter

-> It contains the line Log.d("Encypted Strng", encryptedString);

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions