{"schemaVersion":"2.0.0","locale":"en","title":"Sensitive data reaches logs / Sensitive data reaches a forbidden destination","description":"Rule ID: security.sensitive-data-flow@1.0.0. Availability below refers to source-scan at product 524fa07e.","htmlUrl":"https://docs.swift-analyzer.com/catalog/security.sensitive-data-flow/","markdownUrl":"https://docs.swift-analyzer.com/catalog/security.sensitive-data-flow/index.md","productRevision":"524fa07e0ae4153c84ac12ae9eb6559df89ec2be","catalogRevision":"4558458d","docsRevision":"1f17ba58ab08627e0de898f1442067b09e960b48cd5605d6529e9275f8930d68","channel":"pre-prod","maturity":"experimental","access":"owner-provided-checkout","markdown":"# Sensitive data reaches logs / Sensitive data reaches a forbidden destination\n\nRule ID: security.sensitive-data-flow@1.0.0. Availability below refers to source-scan at product 524fa07e.\n\n## V-SEC-01 — Sensitive data reaches logs\n\nSensitive data reaches logs. It examines trust boundaries, sensitive flows, validation, and security-sensitive effects.\n\n### Availability\n\nNot available in source-scan. There is no source-scan flag to activate this condition.\n\n### Example and action\n\nIllustrative pattern only. This is not a complete runnable package or a reproduced source-scan result. Helper APIs and omitted context must be supplied by the application.\n\n```swift\nlogger.write(\"Authorization: \\(token)\")\n```\n\nConfirm the trust boundary and required security property. Apply the API-specific protection at the sensitive operation and review all bypass paths.\n\n```swift\nlogger.write(\"Authorization attempt completed\")\n```\n\n### Intended analysis\n\nIntended reasoning: Relate the selected security contract to a source, transformation and sensitive operation. The intended check requires identity, flow and policy evidence; a suspicious API name alone does not establish exploitation. Required evidence: source, sink, trust, policy, validation, and flow facts\n\n### Assumptions and unknown\n\nThe relevant facts must be admitted for the selected immutable build world. Unknown aliases, external effects, unsupported source forms or incomplete consumers can prevent a conclusion. Availability in this workflow is stated above; the illustration does not expand that availability.\n\n### Evidence and interpretation\n\nThe target catalog describes the intended condition. It is not evidence of an active source-scan diagnostic.\n\nHistorical evidence at 4558458d: recovery-required (historical qualification is incomplete and needs further evidence). That evidence has not been requalified for this product revision.\n\n[How we validate checks](https://docs.swift-analyzer.com/concepts/validation/) explains the evidence boundary. [Foundations](https://docs.swift-analyzer.com/concepts/foundations/) separates method assumptions from implementation claims.\n\n## V-SEC-02 — Sensitive data reaches a forbidden destination\n\nSensitive data reaches a forbidden destination. It examines trust boundaries, sensitive flows, validation, and security-sensitive effects.\n\n### Availability\n\nNot available in source-scan. There is no source-scan flag to activate this condition.\n\n### Example and action\n\nIllustrative pattern only. This is not a complete runnable package or a reproduced source-scan result. Helper APIs and omitted context must be supplied by the application.\n\n```swift\nanalytics.send([\"email\": account.email])\n```\n\nConfirm the trust boundary and required security property. Apply the API-specific protection at the sensitive operation and review all bypass paths.\n\n```swift\nanalytics.send([\"event\": \"account_opened\"])\n```\n\n### Intended analysis\n\nIntended reasoning: Relate the selected security contract to a source, transformation and sensitive operation. The intended check requires identity, flow and policy evidence; a suspicious API name alone does not establish exploitation. Required evidence: source, sink, trust, policy, validation, and flow facts\n\n### Assumptions and unknown\n\nThe relevant facts must be admitted for the selected immutable build world. Unknown aliases, external effects, unsupported source forms or incomplete consumers can prevent a conclusion. Availability in this workflow is stated above; the illustration does not expand that availability.\n\n### Evidence and interpretation\n\nThe target catalog describes the intended condition. It is not evidence of an active source-scan diagnostic.\n\nHistorical evidence at 4558458d: recovery-required (historical qualification is incomplete and needs further evidence). That evidence has not been requalified for this product revision.\n\n[How we validate checks](https://docs.swift-analyzer.com/concepts/validation/) explains the evidence boundary. [Foundations](https://docs.swift-analyzer.com/concepts/foundations/) separates method assumptions from implementation claims.\n","anchors":["sensitive-data-reaches-logs-sensitive-data-reaches-a-forbidden-destination","V-SEC-01","availability","example-and-action","intended-analysis","assumptions-and-unknown","evidence-and-interpretation","V-SEC-02","availability-2","example-and-action-2","intended-analysis-2","assumptions-and-unknown-2","evidence-and-interpretation-2"]}