After discussing how to review the security of your code, we will now discuss how to use automated scanning to prevent the disclosure of sensitive information for every software release. There are three typical scenarios related to data privacy handling. The first is where sensitive information is included in the source code, such as an API key, a hardcoded password, a hidden hotkey, an email address, or an IP or URL. Secondly, sensitive information can also be stored in cookies, since cookies can collect the browsing behaviors of users. Finally, large projects handling massive amounts of data require effective ways of identifying and protecting any Personal Identifiable Information (PII) stored in the database.
The following is what we will be covering in this chapter:
- The objective of sensitive information testing
- Automated sensitive...
