The Web SQL Database standard never saw the light of day. It was first formulated, then deprecated by the W3C and was only implemented in some browsers. (It is not supported in Firefox or IE.)

Further, the use of a Web SQL Database poses security concerns, since you only need its name to access such a database.

## Noncompliant Code Example

    var db = window.openDatabase("myDb", "1.0", "Personal secrets stored here", 2*1024*1024);  // Noncompliant

## See

- OWASP Top Ten 2013 Category A6 - Sensitive Data Exposure
- OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities