ishangsf/rspec
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
rspec/docs/header_names/allowed_framework_names.adoc

147 lines
1.8 KiB
Plaintext
Raw Normal View History

RULEAPI-766 Add documentation and integrity checks for new education rule descriptions format (#1098)
2022-07-07 14:06:43 +02:00
// C#
* ASP.NET
Create rule S6934: A Route attribute should be added to the controller when a route template is specified at the action level (#3676)
2024-03-22 16:16:42 +01:00
* ASP.NET Core
* ASP.NET MVC 4.x
RULEAPI-766 Add documentation and integrity checks for new education rule descriptions format (#1098)
2022-07-07 14:06:43 +02:00
* Razor
Modify rule S2083[C#]: Educational content (APPSEC-49) (#1121)
2022-07-27 14:34:13 +02:00
* .NET
Modify Rule S3649: Education Framework (APPSEC-46 & APPSEC-47) (#1109)
2022-07-27 14:46:13 +02:00
* Entity Framework Core
* Dapper
Modify rule S5547: LaYC format (#2023)
2023-06-12 15:58:19 +02:00
* BouncyCastle
Modify rule S5659: LaYC format (#2272)
2023-06-28 16:26:16 +02:00
* Jwt.Net
Modify rule S5547: LaYC format (#2023)
2023-06-12 15:58:19 +02:00
// C-Family
* Botan
* CryptoPP
Modify S5542: Learn-As-You-Code migration (#2011) Co-authored-by: hendrik-buchwald-sonarsource <64110887+hendrik-buchwald-sonarsource@users.noreply.github.com>
2023-06-20 10:27:53 +02:00
* OpenSSL
* cURL
Modify rule S2699: Migrate to new educational format (#1956)
2023-06-06 14:22:53 +02:00
* MSTest
* NUnit
* xUnit
Modify rule S2970: LaYC format (#1985)
2023-06-01 09:35:46 +02:00
* Fluent Assertions
* NFluent
* NSubstitute
Modify rule S2187: LaYC format (#2042)
2023-06-06 16:24:33 +02:00
* MSTest
* NUnit
Modify rule S2755: LaYC format (#2245)
2023-06-22 11:25:00 +02:00
* Xerces
* libxml2
RULEAPI-766 Add documentation and integrity checks for new education rule descriptions format (#1098)
2022-07-07 14:06:43 +02:00
// Java
Modify rule S5496: Add an how to fix session for Java and Groovy (APPSEC-1587) (#3900)
2024-04-23 14:15:29 +02:00
* Android
Modify Rule S5883(Java): Education Framework (APPSEC-62) (#1147)
2022-08-05 17:10:47 +02:00
* Apache Commons
[APPSEC-56] Modify rule S2076: Educational content (Java) (#1150)
2022-08-05 17:48:23 +02:00
* Apache Commons
Modify rule S5496: Add an how to fix session for Java and Groovy (APPSEC-1587) (#3900)
2024-04-23 14:15:29 +02:00
* Apache Commons Email
* Apache HttpClient
* Auth0 JWT
Modify rule S2076: Change text to education framework structure (Py,JS,PHP) [APPSEC-186] (#1359)
2022-10-24 11:52:16 +02:00
* Commons Compiler
Modify rule S5496: Add an how to fix session for Java and Groovy (APPSEC-1587) (#3900)
2024-04-23 14:15:29 +02:00
* Dom4j
Modify rule S6398: Switch text to progressive education format (APPSEC-426) (#1507)
2023-01-26 15:53:26 +01:00
* FasterXML
Modify rule S5496: Add an how to fix session for Java and Groovy (APPSEC-1587) (#3900)
2024-04-23 14:15:29 +02:00
* Groovy
Modify rule S6398: Switch text to progressive education format (APPSEC-426) (#1507)
2023-01-26 15:53:26 +01:00
* Gson
Modify rule S5496: Add an how to fix session for Java and Groovy (APPSEC-1587) (#3900)
2024-04-23 14:15:29 +02:00
* Hibernate
* Java Cryptography Extension
* Java EE
* Java JWT
* Java SE
Modify rule S2755: LaYC format (#2245)
2023-06-22 11:25:00 +02:00
* Jdom2
Modify rule S5496: Add an how to fix session for Java and Groovy (APPSEC-1587) (#3900)
2024-04-23 14:15:29 +02:00
* JSP
* Legacy Mongo Java API
Modify S4423: Learn-As-You-Code Migration (#2097) Co-authored-by: hendrik-buchwald-sonarsource <64110887+hendrik-buchwald-sonarsource@users.noreply.github.com>
2023-06-20 17:36:01 +02:00
* OkHttp
Modify rule S6301: update to LaYC format (APPSEC-973) (#2984) ## Review A dedicated reviewer checked the rule description successfully for: - [x] logical errors and incorrect information - [x] information gaps and missing content - [x] text style and tone - [x] PR summary and labels follow [the guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-08-30 13:55:19 +02:00
* Realm
Modify rule S5496: Add an how to fix session for Java and Groovy (APPSEC-1587) (#3900)
2024-04-23 14:15:29 +02:00
* Servlet
* Spring
Modify S3649: Add context specific code examples for Spring Data Cassandra (APPSEC-1566) (#3885) Co-authored-by: gaetan-ferry-sonarsource <112399173+gaetan-ferry-sonarsource@users.noreply.github.com>
2024-07-11 08:46:09 +02:00
* Spring Data Cassandra
Modify rule S5496: Add an how to fix session for Java and Groovy (APPSEC-1587) (#3900)
2024-04-23 14:15:29 +02:00
* Spring Data Redis
* SQLCipher
* Thymeleaf
RULEAPI-766 Add documentation and integrity checks for new education rule descriptions format (#1098)
2022-07-07 14:06:43 +02:00
// JS
Create rule S6759: React props should be read-only (#3043)
2023-09-13 15:58:40 +02:00
* Flow.js
Modify S2083(multiple languages): Update to the education framework (APPSEC-188) (#1328)
2022-10-24 10:50:44 +02:00
* Node.js
RULEAPI-766 Add documentation and integrity checks for new education rule descriptions format (#1098)
2022-07-07 14:06:43 +02:00
* Express.js
Modify rule S2076: Change text to education framework structure (Py,JS,PHP) [APPSEC-186] (#1359)
2022-10-24 11:52:16 +02:00
* SSH2
Modify rule S5147[JS/TS]: Change text to the education framework format (APPSEC-233) (#1384)
2022-11-10 11:11:55 +01:00
* MongoDB
* Mongoose
Modify S3649(JS): Add Education Framework (#1500)
2023-01-12 13:59:42 +01:00
* Sequelize
* Knex
Modify S6105: Move to progressive education format (APPSEC-422) (#1519) * Move metadata to root * Define S6105 for JS/TS * Move message.adoc * Fix incorrect autolink * Fix standards header * Add "noncompliant" to code sample * Change header styling * Apply suggestions from code review Co-authored-by: gaetan-ferry-sonarsource <112399173+gaetan-ferry-sonarsource@users.noreply.github.com> * Update rules/S6105/common/fix/how-does-this-work.adoc Co-authored-by: gaetan-ferry-sonarsource <112399173+gaetan-ferry-sonarsource@users.noreply.github.com> * Update rules/S6105/common/pitfalls/starts-with.adoc Co-authored-by: gaetan-ferry-sonarsource <112399173+gaetan-ferry-sonarsource@users.noreply.github.com> * Remove reference to javascript pseudo-protocol * Update rules/S6105/common/fix/how-does-this-work.adoc Co-authored-by: gaetan-ferry-sonarsource <112399173+gaetan-ferry-sonarsource@users.noreply.github.com> * Rewrite startsWith text * Change framework name Co-authored-by: gaetan-ferry-sonarsource <112399173+gaetan-ferry-sonarsource@users.noreply.github.com>
2023-01-27 10:31:23 +01:00
* DOM API
Modify rule S5659: LaYC format (#2272)
2023-06-28 16:26:16 +02:00
* jsonwebtoken
Modify rule S2755: LaYC format (#2245)
2023-06-22 11:25:00 +02:00
* libxmljs
Modify S2596(javascript): Convert to LayC (#2901) This PR also removes the java folder because it is not implemented and has no implementation plan. This PR was made spontaneously during Daniel's onboarding. --------- Co-authored-by: daniel-teuchert-sonarsource <141642369+daniel-teuchert-sonarsource@users.noreply.github.com>
2023-08-18 11:31:06 +02:00
* Formidable
* Multer
Modify rule S5876: Update to LayC format (APPSEC-969) (#2967) ## Review A dedicated reviewer checked the rule description successfully for: - [x] logical errors and incorrect information - [x] information gaps and missing content - [x] text style and tone - [x] PR summary and labels follow [the guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule) --------- Co-authored-by: Egon Okerman <egon.okerman@sonarsource.com>
2023-08-30 09:09:58 +02:00
* Passport
Clean up allowed Python framework names (#3708) * Clean up Python framework names * Add Request to Javascript frameworks
2024-02-29 12:48:27 +01:00
* Request
Create rule S6759: React props should be read-only (#3043)
2023-09-13 15:58:40 +02:00
* TypeScript
Create rule S6767: Unused React typed props should be removed (#3059)
2023-09-14 09:39:26 +02:00
* PropTypes
Create rule S6807: DOM elements with ARIA roles should have the required properties (#3224) https://github.com/SonarSource/SonarJS/issues/4243
2023-10-11 08:47:14 +02:00
* JSX
RULEAPI-766 Add documentation and integrity checks for new education rule descriptions format (#1098)
2022-07-07 14:06:43 +02:00
// PHP
* Core PHP
Modify rule S5144[PHP]: Change text to the education framework format (APPSEC-286) (#1424)
2022-11-25 17:34:37 +01:00
* Guzzle
* Laminas
RULEAPI-766 Add documentation and integrity checks for new education rule descriptions format (#1098)
2022-07-07 14:06:43 +02:00
* Laravel
* Symfony
Modify rule S6349: Update for educational format (#1845)
2023-05-11 10:26:42 +02:00
* WordPress
Modify rule S5547: LaYC format (#2023)
2023-06-12 15:58:19 +02:00
* Mcrypt
RULEAPI-766 Add documentation and integrity checks for new education rule descriptions format (#1098)
2022-07-07 14:06:43 +02:00
// Python
Modify rule S4426: Add how to fix it for cryptodome and pyOpenSSL and close gap with NIST (#3678)
2024-02-29 09:55:54 +01:00
* aiohttp
* Amazon DynamoDB
Create rule S5344(python): Passwords should not be stored in plain-text or with a fast hashing algorithm (#3715)
2024-03-18 17:37:51 +01:00
* Argon2-cffi
* Bcrypt
Modify rule S4426: Add how to fix it for cryptodome and pyOpenSSL and close gap with NIST (#3678)
2024-02-29 09:55:54 +01:00
* Cryptodome
RULEAPI-766 Add documentation and integrity checks for new education rule descriptions format (#1098)
2022-07-07 14:06:43 +02:00
* Django
* Django Templates
Modify rule S5131: Add FastAPI (APPSEC-1250) (#3412)
2024-01-04 11:23:05 +01:00
* FastAPI
Modify rule S4426: Add how to fix it for cryptodome and pyOpenSSL and close gap with NIST (#3678)
2024-02-29 09:55:54 +01:00
* Flask
* HTTPX
RULEAPI-766 Add documentation and integrity checks for new education rule descriptions format (#1098)
2022-07-07 14:06:43 +02:00
* Jinja
Modify rule S5144[Python]: Change text to the education framework format (APPSEC-285) (#1401)
2022-11-23 17:38:23 +01:00
* lxml
Modify rule S4426: Add how to fix it for cryptodome and pyOpenSSL and close gap with NIST (#3678)
2024-02-29 09:55:54 +01:00
* MySQL Connector/Python
Modify rule S6709: Add how to fix it for Scikit-learn (#3883)
2024-05-07 14:21:34 +02:00
* Numpy
Modify rule S2076: Change text to education framework structure (Py,JS,PHP) [APPSEC-186] (#1359)
2022-10-24 11:52:16 +02:00
* Paramiko
Modify rule S4426: Add how to fix it for cryptodome and pyOpenSSL and close gap with NIST (#3678)
2024-02-29 09:55:54 +01:00
* pyca
* PyCrypto
* pyDes
* PyJWT
* pyOpenSSL
* python-jose
* python-jwt
* python-ldap
Modify S3649(multiple languages): Update to the education framework (APPSEC-184) (#1336)
2022-10-24 11:09:58 +02:00
* Python SQLite
Modify rule S5144[Python]: Change text to the education framework format (APPSEC-285) (#1401)
2022-11-23 17:38:23 +01:00
* Python Standard Library
Modify rule S5135: Change text to the education framework format [Python][APPSEC-228] (#1365)
2022-11-04 09:20:52 +01:00
* PyYAML
Modify rule S5144[Python]: Change text to the education framework format (APPSEC-285) (#1401)
2022-11-23 17:38:23 +01:00
* Requests
Create rule S5344(python): Passwords should not be stored in plain-text or with a fast hashing algorithm (#3715)
2024-03-18 17:37:51 +01:00
* Scrypt
Modify rule S6709: Add how to fix it for Scikit-learn (#3883)
2024-05-07 14:21:34 +02:00
* Scikit-Learn
Create rule S6377: XML signature should be verified securely (Python) (APPSEC-1588) (#3763)
2024-03-18 17:11:22 +01:00
* SignXML
Modify S3649(multiple languages): Update to the education framework (APPSEC-184) (#1336)
2022-10-24 11:09:58 +02:00
* SQLAlchemy
Modify rule S5547: Add ssl module (#3113)
2023-11-13 13:52:29 +01:00
* ssl
Modify S4423: Learn-As-You-Code Migration (#2097) Co-authored-by: hendrik-buchwald-sonarsource <64110887+hendrik-buchwald-sonarsource@users.noreply.github.com>
2023-06-20 17:36:01 +02:00
// Docker
* Wget
// Cloudformation
* API Gateway
* OpenSearch
Modify rule S6317: Update to LayC format (APPSEC-968) (#2949) ## Review A dedicated reviewer checked the rule description successfully for: - [ ] logical errors and incorrect information - [ ] information gaps and missing content - [ ] text style and tone - [ ] PR summary and labels follow [the guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-08-30 11:56:31 +02:00
* Identity and Access Management
Modify S4423: Learn-As-You-Code Migration (#2097) Co-authored-by: hendrik-buchwald-sonarsource <64110887+hendrik-buchwald-sonarsource@users.noreply.github.com>
2023-06-20 17:36:01 +02:00
// Azure Resource Manager
* Storage Accounts
* Databases
Create rule S6656: add language AzureResourceManager (JSON) (#2322) Specification ticket: [APPSEC-805](https://sonarsource.atlassian.net/browse/APPSEC-805) Implementation ticket: [SONARIAC-930](https://sonarsource.atlassian.net/browse/SONARIAC-930) [RSPEC Preview](https://sonarsource.github.io/rspec/#/rspec/S6656/azureresourcemanager) Bicep PR for S6656: #2356 ## Review A dedicated reviewer checked the rule description successfully for: - [ ] logical errors and incorrect information - [ ] information gaps and missing content - [ ] text style and tone - [ ] PR summary and labels follow [the guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule) [APPSEC-805]: https://sonarsource.atlassian.net/browse/APPSEC-805?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ [SONARIAC-930]: https://sonarsource.atlassian.net/browse/SONARIAC-930?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ --------- Co-authored-by: egon-okerman-sonarsource <egon-okerman-sonarsource@users.noreply.github.com> Co-authored-by: Egon Okerman <egon.okerman@sonarsource.com>
2023-07-04 18:10:44 +02:00
* ARM Templates
Modify rule S6656: add language AzureResourceManager (Bicep) (#2356)
2023-09-13 10:27:13 +02:00
* Bicep
Modify S4423: Learn-As-You-Code Migration (#2097) Co-authored-by: hendrik-buchwald-sonarsource <64110887+hendrik-buchwald-sonarsource@users.noreply.github.com>
2023-06-20 17:36:01 +02:00
// Terraform
* AWS API Gateway
* AWS OpenSearch
Modify rule S4423: Add "How to fix" sections for all Azure resources (APPSEC-383) (#2676) Co-authored-by: sebastien-andrivet-sonarsource <138577785+sebastien-andrivet-sonarsource@users.noreply.github.com> Co-authored-by: Peter Trifanov <peter.trifanov@sonarsource.com>
2024-05-22 16:35:51 +02:00
* Azure Databases
* Azure Storage Accounts
Modify S4423(Azure): Add MSSQL sample (#2532) ## Review A dedicated reviewer checked the rule description successfully for: - [x] logical errors and incorrect information - [x] information gaps and missing content - [x] text style and tone - [x] PR summary and labels follow [the guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-07-20 16:09:48 +02:00
* GCP Load Balancers
Modify rule S6317: Update to LayC format (APPSEC-968) (#2949) ## Review A dedicated reviewer checked the rule description successfully for: - [ ] logical errors and incorrect information - [ ] information gaps and missing content - [ ] text style and tone - [ ] PR summary and labels follow [the guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-08-30 11:56:31 +02:00
* AWS Identity and Access Management
Modify S4423: Learn-As-You-Code Migration (#2097) Co-authored-by: hendrik-buchwald-sonarsource <64110887+hendrik-buchwald-sonarsource@users.noreply.github.com>
2023-06-20 17:36:01 +02:00
// CDK
* AWS CDK
Modify rule S5547: LaYC format (#2023)
2023-06-12 15:58:19 +02:00
// Swift
* CommonCrypto
* CryptoSwift
* IDZSwiftCommonCrypto
Modify rule S6648: Add language AzureResourceManager (Bicep) (#2277) [Specification ticket](https://sonarsource.atlassian.net/browse/APPSEC-803) [Implementation ticket](https://sonarsource.atlassian.net/browse/SONARIAC-896) Main PR for ARM templates: https://github.com/SonarSource/rspec/pull/2250 ## Review A dedicated reviewer checked the rule description successfully for: - [ ] logical errors and incorrect information - [ ] information gaps and missing content - [ ] text style and tone - [ ] PR summary and labels follow [the guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule) --------- Co-authored-by: pierre-loup-tristant-sonarsource <pierre-loup-tristant-sonarsource@users.noreply.github.com> Co-authored-by: Rudy Regazzoni <110470341+rudy-regazzoni-sonarsource@users.noreply.github.com>
2023-08-02 15:17:24 +02:00
// Azure resource manager
* ARM templates
* Bicep
Modify S5547(PL/SQL): Migrate to LayC - code re-creation (#3358) ## Review A dedicated reviewer checked the rule description successfully for: - [ ] logical errors and incorrect information - [ ] information gaps and missing content - [ ] text style and tone - [ ] PR summary and labels follow [the guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-10-26 10:35:54 +02:00
// PL/SQL
* DBMS_CRYPTO
Create rule S4423: add Go (APPSEC-905) (#2830) Research ticket: [APPSEC-905](https://sonarsource.atlassian.net/browse/APPSEC-905) You can preview this rule [here](https://sonarsource.github.io/rspec/#/rspec/S4423/go) (updated a few minutes after each push). ## Review A dedicated reviewer checked the rule description successfully for: - [ ] logical errors and incorrect information - [ ] information gaps and missing content - [ ] text style and tone - [ ] PR summary and labels follow [the guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule) [APPSEC-905]: https://sonarsource.atlassian.net/browse/APPSEC-905?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ --------- Co-authored-by: egon-okerman-sonarsource <egon-okerman-sonarsource@users.noreply.github.com> Co-authored-by: Egon Okerman <egon.okerman@sonarsource.com>
2023-08-16 13:53:27 +02:00
// Go
* Go Standard Library
Create rule S6874: Variable names should comply with a naming convention (#3557)
2024-01-31 12:48:22 +01:00
// Kubernetes
Create rule S5344(python): Passwords should not be stored in plain-text or with a fast hashing algorithm (#3715)
2024-03-18 17:37:51 +01:00
* Helm
Reference in New Issue Copy Permalink