Privacy leakage in chaincode.go
opened this issue · comments
The "readWriteKVs" function in integration/chaincode/kvexecutor/chaincode.go gets the private data directly via function parameters, which will be included in the transaction and all peers can access. The private data should be passed in the function via "GetTranscient" API. Besides, in line 99 and line 101, the private data is used as return value and will be included in the transaction and all peers can access.