Q
Detector Library
Kotlin detectors (23/23)
Insecure cookieCookie Without Http Only FlagImproper AuthenticationCryptographic key generatorWeak pseudorandom number generationPath traversalCross-site scriptingReusing Nonce and key in encryptionCode InjectionServer-side request forgeryCross-site request forgeryLog injectionHardcoded credentialsEnabling and overriding debug featureNull Pointer DereferenceInsecure hashingMissing encryption of sensitive dataImproper verification of IntentInsecure connection using unencrypted protocolOS Command InjectionInsecure Bean ValidationSQL injectionIncorrect Type Conversion
Missing encryption of sensitive data High
The lack of proper data encryption passes up the guarantees of confidentiality, integrity, and accountability that properly implemented encryption conveys.
Detector ID
kotlin/missing-encryption-of-sensitive-data@v1.0
Category
Common Weakness Enumeration (CWE) 
Tags
-
Noncompliant example
1// Noncompliant: The lack of proper data encryption
2fun noncompliant() {
3val config = RealmConfiguration.Builder().build()
4 val realm = Realm.getInstance(config)
5}
Compliant example
1// Compliant: Proper data encryption
2fun compliant() {
3 val config = RealmConfiguration.Builder()
4 .encryptionKey(getKey())
5 .build()
6 val realm = Realm.getInstance(config)
7}