Is Output Neutralization required when logging C# exception messages to log files?
CWE-117 is the common weakness enumeration for improper output neutralization in logs. My company uses VeraCode to scan for security weaknesses. Veracode indicated that this code had a output neutralization weakness:
catch (Exception e)
… Continue reading Is Output Neutralization required when logging C# exception messages to log files?