Vulns in veracode

[jesusgudino]

veracode is complaining about a vuln related to having console.log Veracode-21 CWE-117(Improper Output Neutralization for Logs).

Example:
JS files within rqueue-core-3.1.0-RELEASE.jar
/public/rqueue/js/rqueue.js : 506

will there be an update without this type of vulns soon?

[sonus21]

Hi Jesus
Sorry for late reply, I could not find any potential way to fix this issue. If you've come across any solution apart from removing the log statement itself please share here, I'll make the change or you can also share the fix.

The simplest way could be ignore this file from vuln scanner.

[jesusgudino]

Thanks for your reply, yes the simplest solution was to mark them as false positive, but it would be good to take into consideration not to put more console.log in future updates.