NShiftKey

• Information exposure

  • Description : If the encryption key is hardcoded in the source code, it can be leaked
  • Countermeasure : Do not hard-code important information in code, but encrypt and manage it in a safe place. For more information, see the link below: https://naver-security.github.io/nshiftkey-rule-guides/Secret_Hardcoded_eng
    • Target Code : Accenture-sfmc-devtools/test/mockRoot/.mcdevrc.json [view change history] [ignore this]
      

      Accenture-sfmc-devtools/test/mockRoot/.mcdevrc.json

      Lines 39 to 41 in 92b1e64

      	"buName": "testBU",
      	"secret": "secret",
      	"sharedFolder": "/Shared Data Extensions/test",

      
        
    • Target Code : Accenture-sfmc-devtools/test/mockRoot/.mcdevrc.json [view change history] [ignore this]
      

      Accenture-sfmc-devtools/test/mockRoot/.mcdevrc.json

      Lines 50 to 52 in 92b1e64

      	"buName": "testBUTarget",
      	"secret": "target secret",
      	"sharedFolder": "/Shared Data Extensions/test target",