I am using basic authentication mechanism while sending rest api call to server over https. Fortify scan is treating this as unsafe and raising with "mishandles confidential information". My code looks similar to this:
JSONObject jsonObject = new JSONObject();
jsonObject.put("credential", osaLoginPassword);
jsonObject.put("info", "null");
jsonObject.put("type", "null");
Is there any workaround to avoid fortify issue.