rspec/rules/S4507/rpg/rule.adoc

include::../description.adoc[]

include::../ask-yourself.adoc[]

== Recommended Secure Coding Practices

Do not enable debugging features on production servers.

The ``++DEBUG++`` and ``++DUMP++`` statements can expose sensitive information to attackers and should not be included in production code.

== Sensitive Code Example

[source,rpg]
----
   H*------------------------------------------------------------------------- 
   H   DATEDIT(*YMD) DEBUG(*YES)                                               
   H**************************************************************************

   C     SR990         BegSR                                                                   
   C     'CVTERR'      DUMP                                                   DUMP for error
   C                   Move      *on           *INLR                                          
----

== Compliant Solution

[source,rpg]
----
   H*------------------------------------------------------------------------- 
   H   DATEDIT(*YMD) 
   H**************************************************************************

   C     SR990         BegSR                                                                   
   C                   Move      *on           *INLR                                          
----

include::../see.adoc[]

ifdef::env-github,rspecator-view[]

'''
== Implementation Specification
(visible only on this page)

=== Message

Make sure this debug clause is removed before delivering the code in production.


'''
== Comments And Links
(visible only on this page)

include::../comments-and-links.adoc[]

endif::env-github,rspecator-view[]
Create rule S4507: add Docker support (APPSEC-441) (#1542) 2023-02-07 15:04:20 +01:00			`include::../description.adoc[]`
Add all rules, update all rules fixing the inline code syntax 2020-12-21 15:38:52 +01:00
Create rule S4507: add Docker support (APPSEC-441) (#1542) 2023-02-07 15:04:20 +01:00			`include::../ask-yourself.adoc[]`
Add all rules, update all rules fixing the inline code syntax 2020-12-21 15:38:52 +01:00
Create rule S4507: add Docker support (APPSEC-441) (#1542) 2023-02-07 15:04:20 +01:00			`== Recommended Secure Coding Practices`
Add all rules, update all rules fixing the inline code syntax 2020-12-21 15:38:52 +01:00
Create rule S4507: add Docker support (APPSEC-441) (#1542) 2023-02-07 15:04:20 +01:00			`Do not enable debugging features on production servers.`
Add all rules, update all rules fixing the inline code syntax 2020-12-21 15:38:52 +01:00
Create rule S4507: add Docker support (APPSEC-441) (#1542) 2023-02-07 15:04:20 +01:00			The ``++DEBUG++`` and ``++DUMP++`` statements can expose sensitive information to attackers and should not be included in production code.
Add all rules, update all rules fixing the inline code syntax 2020-12-21 15:38:52 +01:00
			`== Sensitive Code Example`

Modify multiple rules: Clean up texts of MMF-2503 (#1497) 2023-01-09 15:29:41 +01:00			`[source,rpg]`
Add all rules, update all rules fixing the inline code syntax 2020-12-21 15:38:52 +01:00			`----`
			`H*-------------------------------------------------------------------------`
			`H DATEDIT(YMD) DEBUG(YES)`
			`H**************************************************************************`

			`C SR990 BegSR`
			`C 'CVTERR' DUMP DUMP for error`
			`C Move on INLR`
			`----`

			`== Compliant Solution`

RULEAPI-661: Add syntax coloring 2022-02-04 17:28:24 +01:00			`[source,rpg]`
Add all rules, update all rules fixing the inline code syntax 2020-12-21 15:38:52 +01:00			`----`
			`H*-------------------------------------------------------------------------`
			`H DATEDIT(*YMD)`
			`H**************************************************************************`

			`C SR990 BegSR`
			`C Move on INLR`
			`----`

			`include::../see.adoc[]`
Export comments and rspec-to-rspec links from jira 2021-06-02 20:44:38 +02:00
Fix the comment display: rule-id, timestamp, GH visibility, link direction 2021-06-03 09:05:38 +02:00			`ifdef::env-github,rspecator-view[]`
RULEAPI-666: Migrate the "List of parameters", "Highlighting" and "Message" fields from jira RSPEC (#346) 2021-09-20 15:38:42 +02:00
			`'''`
			`== Implementation Specification`
			`(visible only on this page)`

Inline adoc when include has no additional value (#1940) Inline adoc files when they are included exactly once. Also fix language tags because this inlining gives us better information on what language the code is written in. 2023-05-25 14:18:12 +02:00			`=== Message`

			`Make sure this debug clause is removed before delivering the code in production.`

RULEAPI-666: Migrate the "List of parameters", "Highlighting" and "Message" fields from jira RSPEC (#346) 2021-09-20 15:38:42 +02:00
RULEAPI-576: add a horizontal rule between rule description and comments 2021-06-08 15:52:13 +02:00			`'''`
Export comments and rspec-to-rspec links from jira 2021-06-02 20:44:38 +02:00			`== Comments And Links`
			`(visible only on this page)`

			`include::../comments-and-links.adoc[]`
Make sure that includes are always surrounded by empty lines (#2270) When an include is not surrounded by empty lines, its content is inlined on the same line as the adjacent content. That can lead to broken tags and other display issues. This PR fixes all such includes and introduces a validation step that forbids introducing the same problem again. 2023-06-22 10:38:01 +02:00
Fix the comment display: rule-id, timestamp, GH visibility, link direction 2021-06-03 09:05:38 +02:00			`endif::env-github,rspecator-view[]`