CWE Database
/

CWE-1085

Back to CWE list

CWE-1085

Invokable Control Element with Excessive Volume of Commented-out Code

Base
Incomplete

Description

A function, method, procedure, etc. contains an excessive amount of code that has been commented out within its body.

{"xhtml:p":["While the interpretation of \"excessive volume\" may vary for each product or developer, CISQ recommends a default threshold of 2% of commented code."]}

Common Consequences

Scope

Other

Impact

Reduce Maintainability

Applicable Platforms

Not Language-Specific

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now