rspec/rules/S5131/java/rule.adoc

include::../summary.adoc[]

== Why is this an issue?

include::../rationale.adoc[]

include::../impact.adoc[]

// How to fix it section

include::how-to-fix-it/jsp.adoc[]

include::how-to-fix-it/servlet.adoc[]

include::how-to-fix-it/spring.adoc[]

include::how-to-fix-it/thymeleaf.adoc[]

== Resources

include::../common/resources/docs.adoc[]

* https://javadoc.io/doc/org.owasp.encoder/encoder/latest/index.html[OWASP Encoder]
* https://spring.io/guides/gs/securing-web/[Spring.io, Securing a Web Application]
* https://www.thymeleaf.org/doc/tutorials/2.1/usingthymeleaf.html[Thymeleaf.org, Tutorial: Using Thymeleaf]

include::../common/resources/articles.adoc[]

include::../common/resources/presentations.adoc[]

include::../common/resources/standards.adoc[]


ifdef::env-github,rspecator-view[]

'''
== Implementation Specification
(visible only on this page)

include::../message.adoc[]

include::../highlighting.adoc[]

'''
== Comments And Links
(visible only on this page)

include::../comments-and-links.adoc[]

endif::env-github,rspecator-view[]
Education s5131 one file per language (#1002) 2022-05-20 15:31:42 +02:00			`include::../summary.adoc[]`
Add rules 5000-5999 2020-06-30 12:50:28 +02:00
Education s5131 one file per language (#1002) 2022-05-20 15:31:42 +02:00			`== Why is this an issue?`
Add rules 5000-5999 2020-06-30 12:50:28 +02:00
Education s5131 one file per language (#1002) 2022-05-20 15:31:42 +02:00			`include::../rationale.adoc[]`

			`include::../impact.adoc[]`

Add checks for education format (#1607) 2023-03-07 17:16:47 +01:00			`// How to fix it section`
Education s5131 one file per language (#1002) 2022-05-20 15:31:42 +02:00
SONARSEC-3109 S5131 XSS rule should contain context-specific patches 2022-07-04 10:29:30 +02:00			`include::how-to-fix-it/jsp.adoc[]`

			`include::how-to-fix-it/servlet.adoc[]`

			`include::how-to-fix-it/spring.adoc[]`

			`include::how-to-fix-it/thymeleaf.adoc[]`
Education s5131 one file per language (#1002) 2022-05-20 15:31:42 +02:00
			`== Resources`

SONARSEC-3109 Merge all resources together 2022-07-04 14:51:49 +02:00			`include::../common/resources/docs.adoc[]`
Make sure that includes are always surrounded by empty lines (#2270) When an include is not surrounded by empty lines, its content is inlined on the same line as the adjacent content. That can lead to broken tags and other display issues. This PR fixes all such includes and introduces a validation step that forbids introducing the same problem again. 2023-06-22 10:38:01 +02:00
SONARSEC-3109 Merge all resources together 2022-07-04 14:51:49 +02:00			`* https://javadoc.io/doc/org.owasp.encoder/encoder/latest/index.html[OWASP Encoder]`
Education s5131 one file per language (#1002) 2022-05-20 15:31:42 +02:00			`* https://spring.io/guides/gs/securing-web/[Spring.io, Securing a Web Application]`
SONARSEC-3109 Merge all resources together 2022-07-04 14:51:49 +02:00			`* https://www.thymeleaf.org/doc/tutorials/2.1/usingthymeleaf.html[Thymeleaf.org, Tutorial: Using Thymeleaf]`
Education s5131 one file per language (#1002) 2022-05-20 15:31:42 +02:00
			`include::../common/resources/articles.adoc[]`

			`include::../common/resources/presentations.adoc[]`

			`include::../common/resources/standards.adoc[]`
Add rules 5000-5999 2020-06-30 12:50:28 +02:00
Export comments and rspec-to-rspec links from jira 2021-06-02 20:44:38 +02:00
Fix the comment display: rule-id, timestamp, GH visibility, link direction 2021-06-03 09:05:38 +02:00			`ifdef::env-github,rspecator-view[]`
RULEAPI-666: Migrate the "List of parameters", "Highlighting" and "Message" fields from jira RSPEC (#346) 2021-09-20 15:38:42 +02:00
			`'''`
			`== Implementation Specification`
			`(visible only on this page)`

			`include::../message.adoc[]`

			`include::../highlighting.adoc[]`

RULEAPI-576: add a horizontal rule between rule description and comments 2021-06-08 15:52:13 +02:00			`'''`
Export comments and rspec-to-rspec links from jira 2021-06-02 20:44:38 +02:00			`== Comments And Links`
			`(visible only on this page)`

			`include::../comments-and-links.adoc[]`
Make sure that includes are always surrounded by empty lines (#2270) When an include is not surrounded by empty lines, its content is inlined on the same line as the adjacent content. That can lead to broken tags and other display issues. This PR fixes all such includes and introduces a validation step that forbids introducing the same problem again. 2023-06-22 10:38:01 +02:00
Fix the comment display: rule-id, timestamp, GH visibility, link direction 2021-06-03 09:05:38 +02:00			`endif::env-github,rspecator-view[]`