Debug statements are always useful during development. But include them in production code - particularly in code that runs client-side - and you run the risk of inadvertently exposing sensitive information, slowing down the browser, or even erroring-out the site for some users. (Not all browsers support `console.log()`).

## Noncompliant Code Example

    console.log(password_entered); // Noncompliant

## See

- OWASP Top Ten 2013 Category A6 - Sensitive Data Exposure