NShiftKey

• Information exposure

  • Description : If password is hardcoded in the source code, it can be leaked
  • Countermeasure : Do not hard-code important information in code, but encrypt and manage it in a safe place. For more information, see the link below: https://naver-security.github.io/nshiftkey-rule-guides/Password_Hardcoded_eng
    • Target Code : arduino-arduino-ide/i18n/af.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/af.json

      Lines 400 to 402 in 468165b

      	"hostname": "Host name",
      	"password": "Password",
      	"port": "Port number",

      
        
    • Target Code : arduino-arduino-ide/i18n/ar.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/ar.json

      Lines 400 to 402 in 468165b

      	"hostname": "اسم المستضيف",
      	"password": "كلمة السر",
      	"port": "رقم المنفذ",

      
        
    • Target Code : arduino-arduino-ide/i18n/az.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/az.json

      Lines 400 to 402 in 468165b

      	"hostname": "Host name",
      	"password": "Password",
      	"port": "Port number",

      
        
    • Target Code : arduino-arduino-ide/i18n/bg.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/bg.json

      Lines 400 to 402 in 468165b

      	"hostname": "Host name",
      	"password": "Password",
      	"port": "Port number",

      
        
    • Target Code : arduino-arduino-ide/i18n/ca_ES.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/ca_ES.json

      Lines 400 to 402 in 468165b

      	"hostname": "Nom de l'hostatge",
      	"password": "Contrasenya",
      	"port": "Número de port",

      
        
    • Target Code : arduino-arduino-ide/i18n/cs.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/cs.json

      Lines 400 to 402 in 468165b

      	"hostname": "Jméno hosta",
      	"password": "Heslo",
      	"port": "Číslo portu",

      
        
    • Target Code : arduino-arduino-ide/i18n/de.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/de.json

      Lines 400 to 402 in 468165b

      	"hostname": "Hostname",
      	"password": "Passwort",
      	"port": "Portnummer",

      
        
    • Target Code : arduino-arduino-ide/i18n/el.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/el.json

      Lines 400 to 402 in 468165b

      	"hostname": "Όνομα κεντρικού υπολογιστή",
      	"password": "Κωδικός πρόσβασης",
      	"port": "Αριθμός θύρας",

      
        
    • Target Code : arduino-arduino-ide/i18n/en.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/en.json

      Lines 400 to 402 in 468165b

      	"hostname": "Host name",
      	"password": "Password",
      	"port": "Port number",

      
        
    • Target Code : arduino-arduino-ide/i18n/es.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/es.json

      Lines 400 to 402 in 468165b

      	"hostname": "nombre del host",
      	"password": "Contraseña",
      	"port": "Numero del puerto",

      
        
    • Target Code : arduino-arduino-ide/i18n/eu.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/eu.json

      Lines 400 to 402 in 468165b

      	"hostname": "Host name",
      	"password": "Password",
      	"port": "Port number",

      
        
    • Target Code : arduino-arduino-ide/i18n/fa.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/fa.json

      Lines 400 to 402 in 468165b

      	"hostname": "نام میزبان",
      	"password": "رمز عبور",
      	"port": "شماره پورت",

      
        
    • Target Code : arduino-arduino-ide/i18n/fil.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/fil.json

      Lines 400 to 402 in 468165b

      	"hostname": "Host name",
      	"password": "Password",
      	"port": "Port number",

      
        
    • Target Code : arduino-arduino-ide/i18n/fr.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/fr.json

      Lines 400 to 402 in 468165b

      	"hostname": "Host name",
      	"password": "Password",
      	"port": "Port number",

      
        
    • Target Code : arduino-arduino-ide/i18n/he.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/he.json

      Lines 400 to 402 in 468165b

      	"hostname": "Host name",
      	"password": "Password",
      	"port": "Port number",

      
        
    • Target Code : arduino-arduino-ide/i18n/hu.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/hu.json

      Lines 400 to 402 in 468165b

      	"hostname": "Host name",
      	"password": "Password",
      	"port": "Port number",

      
        
    • Target Code : arduino-arduino-ide/i18n/id.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/id.json

      Lines 400 to 402 in 468165b

      	"hostname": "Host name",
      	"password": "Password",
      	"port": "Port number",

      
        
    • Target Code : arduino-arduino-ide/i18n/it.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/it.json

      Lines 400 to 402 in 468165b

      	"hostname": "Nome host",
      	"password": "Password",
      	"port": "Numero di porta",

      
        
    • Target Code : arduino-arduino-ide/i18n/ja.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/ja.json

      Lines 400 to 402 in 468165b

      	"hostname": "ホスト名",
      	"password": "パスワード",
      	"port": "ポート番号",

      
        
    • Target Code : arduino-arduino-ide/i18n/ko.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/ko.json

      Lines 400 to 402 in 468165b

      	"hostname": "Host name",
      	"password": "비밀번호",
      	"port": "포트 번호",

      
        
    • Target Code : arduino-arduino-ide/i18n/my_MM.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/my_MM.json

      Lines 400 to 402 in 468165b

      	"hostname": "အိမ်ရှင်အမည်",
      	"password": "စကားဝှက်",
      	"port": "အပေါက်နံပါတ်",

      
        
    • Target Code : arduino-arduino-ide/i18n/ne.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/ne.json

      Lines 400 to 402 in 468165b

      	"hostname": "होस्टको नाम",
      	"password": "पासवर्ड",
      	"port": "पोर्ट नम्बर",

      
        
    • Target Code : arduino-arduino-ide/i18n/nl.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/nl.json

      Lines 400 to 402 in 468165b

      	"hostname": "Naam van de host",
      	"password": "Wachtwoord",
      	"port": "Poortnummer",

      
        
    • Target Code : arduino-arduino-ide/i18n/pl.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/pl.json

      Lines 400 to 402 in 468165b

      	"hostname": "Nazwa Hosta",
      	"password": "Hasło",
      	"port": "Numer Portu",

      
        
    • Target Code : arduino-arduino-ide/i18n/pt.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/pt.json

      Lines 400 to 402 in 468165b

      	"hostname": "Nome do Hospedeiro",
      	"password": "Senha",
      	"port": "número da Porta",

      
        
    • Target Code : arduino-arduino-ide/i18n/ro.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/ro.json

      Lines 400 to 402 in 468165b

      	"hostname": "Host name",
      	"password": "Password",
      	"port": "Port number",

      
        
    • Target Code : arduino-arduino-ide/i18n/ru.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/ru.json

      Lines 400 to 402 in 468165b

      	"hostname": "Host name",
      	"password": "Password",
      	"port": "Port number",

      
        
    • Target Code : arduino-arduino-ide/i18n/sr.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/sr.json

      Lines 400 to 402 in 468165b

      	"hostname": "Host name",
      	"password": "Password",
      	"port": "Port number",

      
        
    • Target Code : arduino-arduino-ide/i18n/th.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/th.json

      Lines 400 to 402 in 468165b

      	"hostname": "Host name",
      	"password": "Password",
      	"port": "Port number",

      
        
    • Target Code : arduino-arduino-ide/i18n/tr.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/tr.json

      Lines 400 to 402 in 468165b

      	"hostname": "Host adı",
      	"password": "Parola",
      	"port": "Port numarası",

      
        
    • Target Code : arduino-arduino-ide/i18n/uk.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/uk.json

      Lines 400 to 402 in 468165b

      	"hostname": "Ім'я хоста",
      	"password": "Пароль",
      	"port": "Номер порту",

      
        
    • Target Code : arduino-arduino-ide/i18n/vi.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/vi.json

      Lines 400 to 402 in 468165b

      	"hostname": "Host name",
      	"password": "Password",
      	"port": "Port number",

      
        
    • Target Code : arduino-arduino-ide/i18n/zh-Hant.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/zh-Hant.json

      Lines 400 to 402 in 468165b

      	"hostname": "主機名稱",
      	"password": "密碼",
      	"port": "埠號",

      
        
    • Target Code : arduino-arduino-ide/i18n/zh.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/zh.json

      Lines 400 to 402 in 468165b

      	"hostname": "主机名",
      	"password": "密码",
      	"port": "端口号",

      
        
    • Target Code : arduino-arduino-ide/i18n/zh_TW.json [view change history] [ignore this]
      

      arduino-arduino-ide/i18n/zh_TW.json

      Lines 400 to 402 in 468165b

      	"hostname": "主機名稱",
      	"password": "密碼",
      	"port": "埠號",

      
        

• Potential JS Security Warning (window.localStorage)

  • Description : Storing sensitive data on local storage could potentially be exploited
  • Countermeasure : -
    • Target Code : arduino-arduino-ide/arduino-ide-extension/src/browser/contributions/debug.ts [view change history] [ignore this]
      

      arduino-arduino-ide/arduino-ide-extension/src/browser/contributions/debug.ts

      Lines 274 to 276 in 468165b

      	get compileForDebug(): boolean {
      	const value = window.localStorage.getItem(COMPILE_FOR_DEBUG_KEY);
      	return value === 'true';

      
        
    • Target Code : arduino-arduino-ide/arduino-ide-extension/src/browser/contributions/debug.ts [view change history] [ignore this]
      

      arduino-arduino-ide/arduino-ide-extension/src/browser/contributions/debug.ts

      Lines 281 to 283 in 468165b

      	const newState = !oldState;
      	window.localStorage.setItem(COMPILE_FOR_DEBUG_KEY, String(newState));
      	this.menuManager.update();

      
        
    • Target Code : arduino-arduino-ide/arduino-ide-extension/src/browser/dialogs/settings/settings.ts [view change history] [ignore this]
      

      arduino-arduino-ide/arduino-ide-extension/src/browser/dialogs/settings/settings.ts

      Lines 341 to 343 in 468165b

      	if (currentLanguage === 'en') {
      	window.localStorage.removeItem(nls.localeId);
      	} else {

      
        
    • Target Code : arduino-arduino-ide/arduino-ide-extension/src/browser/dialogs/settings/settings.ts [view change history] [ignore this]
      

      arduino-arduino-ide/arduino-ide-extension/src/browser/dialogs/settings/settings.ts

      Lines 343 to 345 in 468165b

      	} else {
      	window.localStorage.setItem(nls.localeId, currentLanguage);
      	}