rspec/rules/S5334/java/rule.adoc

== Why is this an issue?

include::../rationale.adoc[]

include::../impact.adoc[]

// How to fix it section

include::how-to-fix-it/commons-compiler.adoc[]

include::how-to-fix-it/jsp.adoc[]

include::how-to-fix-it/spring.adoc[]

== Resources

include::../common/resources/articles.adoc[]

include::../common/resources/standards.adoc[]

* CWE - https://cwe.mitre.org/data/definitions/917[CWE-917 - Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')]

ifdef::env-github,rspecator-view[]

'''
== Implementation Specification
(visible only on this page)

include::../message.adoc[]

=== Highlighting

"[varname]" is tainted (assignments and parameters)

this argument is tainted (method invocations)

the returned value is tainted (returns & method invocations results)


'''
== Comments And Links
(visible only on this page)

include::../comments-and-links.adoc[]

endif::env-github,rspecator-view[]
[APPSEC-67] Modify rule S5334: Educational content (#1176) 2022-08-26 13:55:09 +02:00			`== Why is this an issue?`
Add rules 5000-5999 2020-06-30 12:50:28 +02:00
[APPSEC-67] Modify rule S5334: Educational content (#1176) 2022-08-26 13:55:09 +02:00			`include::../rationale.adoc[]`
Add rules 5000-5999 2020-06-30 12:50:28 +02:00
[APPSEC-67] Modify rule S5334: Educational content (#1176) 2022-08-26 13:55:09 +02:00			`include::../impact.adoc[]`
Add rules 5000-5999 2020-06-30 12:50:28 +02:00
Add checks for education format (#1607) 2023-03-07 17:16:47 +01:00			`// How to fix it section`
Add rules 5000-5999 2020-06-30 12:50:28 +02:00
[APPSEC-67] Modify rule S5334: Educational content (#1176) 2022-08-26 13:55:09 +02:00			`include::how-to-fix-it/commons-compiler.adoc[]`
Add rules 5000-5999 2020-06-30 12:50:28 +02:00
Modify rule S5334: Add JSP example (#3773) 2024-06-24 16:51:51 +02:00			`include::how-to-fix-it/jsp.adoc[]`

Modify rule S5334: Add Spring example (#3764) 2024-06-13 08:23:38 +02:00			`include::how-to-fix-it/spring.adoc[]`

[APPSEC-67] Modify rule S5334: Educational content (#1176) 2022-08-26 13:55:09 +02:00			`== Resources`
Add rules 5000-5999 2020-06-30 12:50:28 +02:00
[APPSEC-67] Modify rule S5334: Educational content (#1176) 2022-08-26 13:55:09 +02:00			`include::../common/resources/articles.adoc[]`
Add rules 5000-5999 2020-06-30 12:50:28 +02:00
[APPSEC-67] Modify rule S5334: Educational content (#1176) 2022-08-26 13:55:09 +02:00			`include::../common/resources/standards.adoc[]`
Export comments and rspec-to-rspec links from jira 2021-06-02 20:44:38 +02:00
Modify rule S5334: Add Spring example (#3764) 2024-06-13 08:23:38 +02:00			`* CWE - https://cwe.mitre.org/data/definitions/917[CWE-917 - Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')]`

Fix the comment display: rule-id, timestamp, GH visibility, link direction 2021-06-03 09:05:38 +02:00			`ifdef::env-github,rspecator-view[]`
RULEAPI-666: Migrate the "List of parameters", "Highlighting" and "Message" fields from jira RSPEC (#346) 2021-09-20 15:38:42 +02:00
			`'''`
			`== Implementation Specification`
			`(visible only on this page)`

			`include::../message.adoc[]`

Inline adoc when include has no additional value (#1940) Inline adoc files when they are included exactly once. Also fix language tags because this inlining gives us better information on what language the code is written in. 2023-05-25 14:18:12 +02:00			`=== Highlighting`

			`"[varname]" is tainted (assignments and parameters)`

			`this argument is tainted (method invocations)`

			`the returned value is tainted (returns & method invocations results)`

RULEAPI-666: Migrate the "List of parameters", "Highlighting" and "Message" fields from jira RSPEC (#346) 2021-09-20 15:38:42 +02:00
RULEAPI-576: add a horizontal rule between rule description and comments 2021-06-08 15:52:13 +02:00			`'''`
Export comments and rspec-to-rspec links from jira 2021-06-02 20:44:38 +02:00			`== Comments And Links`
			`(visible only on this page)`

[APPSEC-67] Modify rule S5334: Educational content (#1176) 2022-08-26 13:55:09 +02:00			`include::../comments-and-links.adoc[]`
Make sure that includes are always surrounded by empty lines (#2270) When an include is not surrounded by empty lines, its content is inlined on the same line as the adjacent content. That can lead to broken tags and other display issues. This PR fixes all such includes and introduces a validation step that forbids introducing the same problem again. 2023-06-22 10:38:01 +02:00
Fix the comment display: rule-id, timestamp, GH visibility, link direction 2021-06-03 09:05:38 +02:00			`endif::env-github,rspecator-view[]`
[APPSEC-67] Modify rule S5334: Educational content (#1176) 2022-08-26 13:55:09 +02:00