SEC012
Direct registry access
Object Pascal — Delphi & Free Pascal
Info
Security
Direct registry access ties code to Windows and can expose sensitive configuration data
direct registry access ties code to Windows and can expose sensitive configuration data.
Why this severity
direct registry access ties code to Windows and can expose sensitive configuration data.
Known false positives
installer and system-administration tools where registry access is required.
Remediation example
Value := TConfigFile.ReadString('Settings', 'Theme', 'Default');
// use INI or JSON config instead of registry