checkSecurityConstantNames

Check if specific variable names are assigned as constants, names such as username, loginname, password, credentials, etc. The check is case-insensitive.

Possible use of the check is to avoid hard-coded sensitive data as readable and recognizable as such.

Configurable parameter

  • AvoidNames (list): A list of names that are to be avoided.

Exemption tag: %@ok<SECCN>