Potential leak of data: Simple Password

Detected 1 occurrence(s) of ‘\s*pass[word]+\s*[:=]\s*["'][a-z0-9\-_\!\$]+["']‘: lass PasswordServlet extends HttpServlet { public void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { String name = request.getParameter("username"); String pass = request.getParameter("pass"); String password = "password"; response.setContentType("text/html"); PrintWriter pw = response.getWriter(); if (pass == password) { pw.println("Welcome"+name); pw.close(); } else { pw.println("Password entered was wrong"); } } } Source: […]