rspec/rules/S4830/kotlin/rule.adoc

include::../summary.adoc[]

== Why is this an issue?

include::../rationale.adoc[]

include::../impact.adoc[]

// How to fix it section

include::how-to-fix-it/java-cryptography-extension.adoc[]

include::how-to-fix-it/android-webview.adoc[]

== Resources

include::../common/resources/standards-mobile.adoc[]

* CERT - https://wiki.sei.cmu.edu/confluence/display/java/MSC61-J.+Do+not+use+insecure+or+weak+cryptographic+algorithms
* Google Support - https://support.google.com/faqs/answer/7071387?hl=en[How to address WebView SSL Error Handler alerts in your apps]
* Android Documentation - https://developer.android.com/reference/android/webkit/WebViewClient?hl=en#onReceivedSslError(android.webkit.WebView,%20android.webkit.SslErrorHandler,%20android.net.http.SslError)[WebViewClient.onReceivedSslError] method

ifdef::env-github,rspecator-view[]

'''
== Implementation Specification
(visible only on this page)

include::../message.adoc[]

'''
== Comments And Links
(visible only on this page)

include::../comments-and-links.adoc[]

endif::env-github,rspecator-view[]
Modify rule S4830: LaYC format (#2176) 2023-06-20 13:26:14 +02:00			`include::../summary.adoc[]`
Add missing rules because of approximative section names 2020-06-30 14:41:58 +02:00
Modify rule S4830: LaYC format (#2176) 2023-06-20 13:26:14 +02:00			`== Why is this an issue?`
Add missing rules because of approximative section names 2020-06-30 14:41:58 +02:00
Modify rule S4830: LaYC format (#2176) 2023-06-20 13:26:14 +02:00			`include::../rationale.adoc[]`
Add missing rules because of approximative section names 2020-06-30 14:41:58 +02:00
Modify rule S4830: LaYC format (#2176) 2023-06-20 13:26:14 +02:00			`include::../impact.adoc[]`
Add missing rules because of approximative section names 2020-06-30 14:41:58 +02:00
Modify rule S4830: LaYC format (#2176) 2023-06-20 13:26:14 +02:00			`// How to fix it section`
Add missing rules because of approximative section names 2020-06-30 14:41:58 +02:00
Modify JVM Crypto rules: Change framework name (#3550) * Modify JVM Crypto rules: Change title * changed names * Apply suggestions from code review * fixed includes 2024-01-25 15:18:07 +01:00			`include::how-to-fix-it/java-cryptography-extension.adoc[]`
Add missing rules because of approximative section names 2020-06-30 14:41:58 +02:00
SONARKT-569 Modify rule S4830: add support for WebViews (#4673) * SONARKT-569 Modify rule S4830: add support for WebViews * Fix list of allowed frameworks * Add Google Support link * Have non-compliant and compliant code examples next to each other and in diff * Update rules/S4830/kotlin/how-to-fix-it/android-webview.adoc Co-authored-by: Egon Okerman <egon.okerman@sonarsource.com> * Update rules/S4830/kotlin/how-to-fix-it/android-webview.adoc Co-authored-by: Egon Okerman <egon.okerman@sonarsource.com> --------- Co-authored-by: Egon Okerman <egon.okerman@sonarsource.com> 2025-03-19 16:31:02 +01:00			`include::how-to-fix-it/android-webview.adoc[]`

Modify rule S4830: LaYC format (#2176) 2023-06-20 13:26:14 +02:00			`== Resources`
Update rules after the fix in the export module 2021-04-26 17:29:13 +02:00
Update security rules: add OWASP Mobile Top 10 2024 security standard (APPSEC-2383) (#4660) 2025-02-19 17:19:00 +01:00			`include::../common/resources/standards-mobile.adoc[]`
Add missing rules because of approximative section names 2020-06-30 14:41:58 +02:00
SONARKT-569 Modify rule S4830: add support for WebViews (#4673) * SONARKT-569 Modify rule S4830: add support for WebViews * Fix list of allowed frameworks * Add Google Support link * Have non-compliant and compliant code examples next to each other and in diff * Update rules/S4830/kotlin/how-to-fix-it/android-webview.adoc Co-authored-by: Egon Okerman <egon.okerman@sonarsource.com> * Update rules/S4830/kotlin/how-to-fix-it/android-webview.adoc Co-authored-by: Egon Okerman <egon.okerman@sonarsource.com> --------- Co-authored-by: Egon Okerman <egon.okerman@sonarsource.com> 2025-03-19 16:31:02 +01:00			`* CERT - https://wiki.sei.cmu.edu/confluence/display/java/MSC61-J.+Do+not+use+insecure+or+weak+cryptographic+algorithms`
			`* Google Support - https://support.google.com/faqs/answer/7071387?hl=en[How to address WebView SSL Error Handler alerts in your apps]`
			`* Android Documentation - https://developer.android.com/reference/android/webkit/WebViewClient?hl=en#onReceivedSslError(android.webkit.WebView,%20android.webkit.SslErrorHandler,%20android.net.http.SslError)[WebViewClient.onReceivedSslError] method`
Export comments and rspec-to-rspec links from jira 2021-06-02 20:44:38 +02:00
Fix the comment display: rule-id, timestamp, GH visibility, link direction 2021-06-03 09:05:38 +02:00			`ifdef::env-github,rspecator-view[]`
RULEAPI-666: Migrate the "List of parameters", "Highlighting" and "Message" fields from jira RSPEC (#346) 2021-09-20 15:38:42 +02:00
			`'''`
			`== Implementation Specification`
			`(visible only on this page)`

			`include::../message.adoc[]`

RULEAPI-576: add a horizontal rule between rule description and comments 2021-06-08 15:52:13 +02:00			`'''`
Export comments and rspec-to-rspec links from jira 2021-06-02 20:44:38 +02:00			`== Comments And Links`
			`(visible only on this page)`

			`include::../comments-and-links.adoc[]`
Make sure that includes are always surrounded by empty lines (#2270) When an include is not surrounded by empty lines, its content is inlined on the same line as the adjacent content. That can lead to broken tags and other display issues. This PR fixes all such includes and introduces a validation step that forbids introducing the same problem again. 2023-06-22 10:38:01 +02:00
Fix the comment display: rule-id, timestamp, GH visibility, link direction 2021-06-03 09:05:38 +02:00			`endif::env-github,rspecator-view[]`
Modify rule S4830: LaYC format (#2176) 2023-06-20 13:26:14 +02:00