rspec/rules/S6399/java/rule.adoc

== Why is this an issue?

include::../rationale.adoc[]

include::../impact.adoc[]


// How to fix it section

include::./how-to-fix-it/java-se.adoc[]

== Resources

include::../common/resources/standards.adoc[]

ifdef::env-github,rspecator-view[]

'''
== Implementation Specification
(visible only on this page)

=== Message

Change this code to not construct XML documents directly from user-controlled data.


endif::env-github,rspecator-view[]
Modify rule S6399: Switch text to progressive education format (APPSEC-425) (#1522) 2023-01-31 14:16:30 +01:00			`== Why is this an issue?`

Create rule S6399(C#): XML operations should not be vulnerable to injection attacks (#2860) You can preview this rule [here](https://sonarsource.github.io/rspec/#/rspec/S6399/csharp) (updated a few minutes after each push). ## Review A dedicated reviewer checked the rule description successfully for: - [ ] logical errors and incorrect information - [ ] information gaps and missing content - [ ] text style and tone - [ ] PR summary and labels follow [the guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule) --------- Co-authored-by: daniel-teuchert-sonarsource <daniel-teuchert-sonarsource@users.noreply.github.com> Co-authored-by: Daniel Teuchert <daniel.teuchert@sonarsource.com> Co-authored-by: daniel-teuchert-sonarsource <141642369+daniel-teuchert-sonarsource@users.noreply.github.com> Co-authored-by: Loris S. <91723853+loris-s-sonarsource@users.noreply.github.com> 2023-08-18 11:31:42 +02:00			`include::../rationale.adoc[]`
Inline adoc when include has no additional value (#1940) Inline adoc files when they are included exactly once. Also fix language tags because this inlining gives us better information on what language the code is written in. 2023-05-25 14:18:12 +02:00
Create rule S6399(C#): XML operations should not be vulnerable to injection attacks (#2860) You can preview this rule [here](https://sonarsource.github.io/rspec/#/rspec/S6399/csharp) (updated a few minutes after each push). ## Review A dedicated reviewer checked the rule description successfully for: - [ ] logical errors and incorrect information - [ ] information gaps and missing content - [ ] text style and tone - [ ] PR summary and labels follow [the guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule) --------- Co-authored-by: daniel-teuchert-sonarsource <daniel-teuchert-sonarsource@users.noreply.github.com> Co-authored-by: Daniel Teuchert <daniel.teuchert@sonarsource.com> Co-authored-by: daniel-teuchert-sonarsource <141642369+daniel-teuchert-sonarsource@users.noreply.github.com> Co-authored-by: Loris S. <91723853+loris-s-sonarsource@users.noreply.github.com> 2023-08-18 11:31:42 +02:00			`include::../impact.adoc[]`
Modify rule S6399: Switch text to progressive education format (APPSEC-425) (#1522) 2023-01-31 14:16:30 +01:00

Add checks for education format (#1607) 2023-03-07 17:16:47 +01:00			`// How to fix it section`
Modify rule S6399: Switch text to progressive education format (APPSEC-425) (#1522) 2023-01-31 14:16:30 +01:00
			`include::./how-to-fix-it/java-se.adoc[]`

			`== Resources`

			`include::../common/resources/standards.adoc[]`
Create rule S6399[Java]: XML operations should not be vulnerable to injection attacks (#666) * Create rule S6399 * Apply review suggestions Co-authored-by: hendrik-buchwald-sonarsource <hendrik-buchwald-sonarsource@users.noreply.github.com> Co-authored-by: Pierre-Loup Tristant <pierre-loup.tristant@sonarsource.com> Co-authored-by: Roberto Orlandi <71495874+roberto-orlandi-sonarsource@users.noreply.github.com> 2022-01-31 09:25:13 +01:00
			`ifdef::env-github,rspecator-view[]`
Modify rule S6399: Switch text to progressive education format (APPSEC-425) (#1522) 2023-01-31 14:16:30 +01:00
			`'''`
Create rule S6399[Java]: XML operations should not be vulnerable to injection attacks (#666) * Create rule S6399 * Apply review suggestions Co-authored-by: hendrik-buchwald-sonarsource <hendrik-buchwald-sonarsource@users.noreply.github.com> Co-authored-by: Pierre-Loup Tristant <pierre-loup.tristant@sonarsource.com> Co-authored-by: Roberto Orlandi <71495874+roberto-orlandi-sonarsource@users.noreply.github.com> 2022-01-31 09:25:13 +01:00			`== Implementation Specification`
			`(visible only on this page)`

Inline adoc when include has no additional value (#1940) Inline adoc files when they are included exactly once. Also fix language tags because this inlining gives us better information on what language the code is written in. 2023-05-25 14:18:12 +02:00			`=== Message`

			`Change this code to not construct XML documents directly from user-controlled data.`

Create rule S6399[Java]: XML operations should not be vulnerable to injection attacks (#666) * Create rule S6399 * Apply review suggestions Co-authored-by: hendrik-buchwald-sonarsource <hendrik-buchwald-sonarsource@users.noreply.github.com> Co-authored-by: Pierre-Loup Tristant <pierre-loup.tristant@sonarsource.com> Co-authored-by: Roberto Orlandi <71495874+roberto-orlandi-sonarsource@users.noreply.github.com> 2022-01-31 09:25:13 +01:00
Modify rule S6399: Switch text to progressive education format (APPSEC-425) (#1522) 2023-01-31 14:16:30 +01:00			`endif::env-github,rspecator-view[]`