Debug statements are always useful during development. But include them in production code - particularly in code that runs client-side - and you run the risk of inadvertently exposing sensitive information, slowing down the browser, or even erroring-out the site for some users.

## Noncompliant Code Example

    console.log(password_entered); // Noncompliant

## See

- OWASP Top 10 2017 Category A3 - Sensitive Data Exposure