Skip to content

[IMPORTANT] PCI Compliance issue in 1.4.9 #70

@MilesTFox

Description

@MilesTFox

You need to edit node_modules/globalpayments-api/lib/src/Gateways/XmlGateway.js and comment out the contents of XmlGateway.prototype.log. This is a PCI compliance issue as it saves the entire transaction including all credit card details to disk unencrypted.

Before:

 XmlGateway.prototype.log = function (text) {
        fs.appendFile('logger.txt', text + '\n', function (err) {
            if (err)
                throw err;
        });
    };

After:

 XmlGateway.prototype.log = function (text) {
        /*
        fs.appendFile('logger.txt', text + '\n', function (err) {
            if (err)
                throw err;
        });
        */
       });
   };

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions