Do not log sensitive data such as user id, email or other personal data (first name, last name, etc).
Non-Compliant Code Examples
console.log("email from user"+user.email);console.log(`email from user ${user.email}`);logger.info(`email from user ${user.email}`);logger.info(`email from user ${username}: ${user.email}`);logger.warn(email);logger.error(`email from user ${email}`);foobar.error(`email from user ${email}`);logger.foobar(`email from user ${email}`);
Compliant Code Examples
console.log("email from user"+user.id);console.log(`email from user ${user.uuid}`);
シームレスな統合。 Datadog Code Security をお試しください
Datadog Code Security
このルールを試し、Datadog Code Security でコードを解析する
このルールの使用方法
1
2
rulesets:- javascript-node-security # Rules to enforce JavaScript node security.