Pierre-Loup
e769e586c9
Update security rules: add OWASP Mobile Top 10 2024 security standard (APPSEC-2383) ( #4660 )
2025-02-19 17:19:00 +01:00
Egon Okerman
afdfdf77d0
Update URLs to point to mas.owasp.org ( #4126 )
2024-08-08 09:50:21 +02:00
Loris S
96811524d7
Modify JVM Crypto rules: Change framework name ( #3550 )
...
* Modify JVM Crypto rules: Change title
* changed names
* Apply suggestions from code review
* fixed includes
2024-01-25 15:18:07 +01:00
Egon Okerman
d1417e82f8
Modify CWE and OWASP Top 10 links to follow standard link format (APPSEC-1134) ( #3529 )
...
* Fix all CWE references
* Fix all OWASP references
* Fix missing CWE prefixes
2024-01-15 17:15:56 +01:00
Fred Tingaud
51369b610e
Make sure that includes are always surrounded by empty lines ( #2270 )
...
When an include is not surrounded by empty lines, its content is inlined
on the same line as the adjacent content. That can lead to broken tags
and other display issues.
This PR fixes all such includes and introduces a validation step that
forbids introducing the same problem again.
2023-06-22 10:38:01 +02:00
Loris S
9e9c990658
Modify S5542: Learn-As-You-Code migration ( #2011 )
...
Co-authored-by: hendrik-buchwald-sonarsource <64110887+hendrik-buchwald-sonarsource@users.noreply.github.com>
2023-06-20 10:27:53 +02:00
Fred Tingaud
16f6c0aecf
Inline adoc when include has no additional value ( #1940 )
...
Inline adoc files when they are included exactly once.
Also fix language tags because this inlining gives us better information
on what language the code is written in.
2023-05-25 14:18:12 +02:00
Victor
fe961619f9
migrate rule descriptions to new education format
2023-05-05 16:29:04 +02:00
Pierre-Loup
3c31fb8713
Modify rule S5542[kotlin]: Detect CBC mode when used with padding (APPSEC-30) ( #1054 )
2022-11-29 16:29:30 +01:00
pedro-oliveira-sonarsource
082b3ef269
Modify: Fix old/broken embedded links ( #1100 )
2022-07-08 13:58:56 +02:00
jtingsanchali
96d9ddb930
RULEAPI-755 Update CWE URLs by removing .html suffix and update with https protocol ( #926 )
...
* Change affects only see.adoc and rule.adoc files, not comments-and-links.adoc files
2022-04-07 08:53:59 -05:00
Fred Tingaud
b4161466e6
RULEAPI-661: Add syntax coloring
2022-02-04 16:28:24 +00:00
Pierre-Loup
e7ad1012e3
RULEAPI-709: Security rules are mapped to the OWASP Top 10 2021 security-standard ( #545 )
2021-11-01 15:00:32 +01:00
Arseniy Zaostrovnykh
f7904cebe7
RULEAPI-666: Migrate the "List of parameters", "Highlighting" and "Message" fields from jira RSPEC ( #346 )
2021-09-20 13:38:42 +00:00
eric-therond-sonarsource
b011d5c853
Update S5542 description: ECB mode for RSA ( #215 )
...
* Update S5542 description: ECB mode for RSA
* fix after review
2021-07-19 09:33:36 +02:00
eric-therond-sonarsource
08c011b06a
add mobile security standards, links and tags to mobile rules and add new CWEv4.4 entries ( #112 )
2021-06-10 10:04:10 +02:00
Arseniy Zaostrovnykh
b76bc57083
RULEAPI-576: add a horizontal rule between rule description and comments
2021-06-08 15:52:13 +02:00
Arseniy Zaostrovnykh
6c1ad2c13c
Fix the comment display: rule-id, timestamp, GH visibility, link direction
2021-06-03 09:05:38 +02:00
Arseniy Zaostrovnykh
cdd7690a79
Export comments and rspec-to-rspec links from jira
2021-06-02 20:44:38 +02:00
Arseniy Zaostrovnykh
af4fdb3a84
Update rules after the fix in the export module
2021-04-26 17:29:13 +02:00
Alban Auzeill
3be6717469
Add missing rules because of approximative section names
2020-06-30 17:16:12 +02:00
