Q
Detector Library
Kotlin detectors (23/23)
Insecure cookieCookie Without Http Only FlagImproper AuthenticationCryptographic key generatorWeak pseudorandom number generationPath traversalCross-site scriptingReusing Nonce and key in encryptionCode InjectionServer-side request forgeryCross-site request forgeryLog injectionHardcoded credentialsEnabling and overriding debug featureNull Pointer DereferenceInsecure hashingMissing encryption of sensitive dataImproper verification of IntentInsecure connection using unencrypted protocolOS Command InjectionInsecure Bean ValidationSQL injectionIncorrect Type Conversion
Enabling and overriding debug feature Medium
Don't enable or override an application's debug feature. Instead, use OS environment variables to set up the debug feature.
Detector ID
kotlin/detect-activated-debug-feature@v1.0
Category
Noncompliant example
1// Noncompliant: The Debug feature should not be enabled or overridden.
2fun noncompliant() {
3 WebView.setWebContentsDebuggingEnabled(true)
4}
Compliant example
1// Compliant: The Debug feature should not be enabled or overridden.
2fun compliant() {
3 WebView.setWebContentsDebuggingEnabled(false)
4}