PCI DSS Log requirements — check Python logs for card data

Flags Python logging, print and raise calls that write card numbers, CVV, track data, PINs, passwords or auth headers into logs, with the PCI DSS v4.0.1 requirement and a fix per line. Runs entirely in your browser — nothing is uploaded.

import logging

import stripe
from flask import Flask, request

app = Flask(__name__)
logger = logging.getLogger("payments")

@app.route("/pay", methods=["POST"])
def pay():
    logger.info("incoming payment payload: %s", request.json)
    data = request.get_json()
    card_number = data["card_number"]
    cvv = data["cvv"]
    logger.debug("charging card %s", card_number)
    try:
        charge = stripe.Charge.create(amount=data["amount"], currency="usd", source=data["token"])
    except stripe.error.CardError as e:
        logger.error(f"card declined, cvv={cvv}: {e}")
        raise
    return {"id": charge.id}

@app.route("/terminal", methods=["POST"])
def terminal():
    track2 = request.form["track2"]
    print("swipe received", track2)
    return "ok"

@app.route("/login", methods=["POST"])
def login():
    user = request.form["user"]
    password = request.form["password"]
    if not check_login(user, password):
        logger.warning("login failed for %s using %s", user, password)
    logger.debug("auth headers: %s", request.headers)
    return "ok"

as of

Free here: Checks the open Python file against 10 rules and lists every log, print or raise line that writes card data or credentials, with line number, PCI DSS v4.0.1 requirement and fix. Complete for free.. In the editor: Scans every .py file in the repository in one run and exports the findings as a Markdown evidence table for your PCI DSS assessment. — that part asks for a licence key.

Same engine as the VS Code extension, byte for byte.