Pierre-Loup
1dc3769b22
Modify rule S3649: Add databases support (APPSEC-1251) ( #3381 )
2025-03-18 09:31:43 +00:00
github-actions[bot]
7be11bd842
Modify S3649: add Kotlin (SONARSEC-6147) ( #4796 )
2025-03-17 14:50:30 +00:00
Fred Tingaud
972b0e39c2
Automatically migrate all rules where defaultSeverity is Blocker and MQR is High
2025-02-20 19:58:25 +01:00
Pierre-Loup
e769e586c9
Update security rules: add OWASP Mobile Top 10 2024 security standard (APPSEC-2383) ( #4660 )
2025-02-19 17:19:00 +01:00
Pierre-Loup
bd7f201e23
Apply missing android tags to rules that support Android APIs ( #4603 )
2025-01-23 10:12:26 +01:00
Loris S.
dff46bdcfd
Modify S3649(Python): Fix logic error ( #4598 )
2025-01-07 14:53:28 +01:00
Jamie Anderson
d255072981
Modify rules: Rename STIG version in metadata ( #4098 )
...
The Security Technical Implementation Guide security standard is being
renamed from its release date (`2023-06-08`) to its official version and
revision number (`V5R3`). This helps to align with the version number
being used internally for reporting purposes.
2024-07-30 16:10:03 +02:00
Hendrik Buchwald
e08427bcf6
Modify rule S3649: Add Couchbase example ( #3897 )
2024-07-11 11:45:54 +00:00
Hendrik Buchwald
4a50193c56
Modify rule S3649: Add Neo4j example ( #3911 )
...
* Add neo4j
* Rename Neo4j to Spring Data Neo4j
---------
Co-authored-by: Thomas Serre <118730793+thomas-serre-sonarsource@users.noreply.github.com>
2024-07-11 08:53:54 +02:00
Pierre-Loup
d9da9fbcd4
Modify S3649: Add context specific code examples for Spring Data Cassandra (APPSEC-1566) ( #3885 )
...
Co-authored-by: gaetan-ferry-sonarsource <112399173+gaetan-ferry-sonarsource@users.noreply.github.com>
2024-07-11 08:46:09 +02:00
Jamie Anderson
9ee16daa47
Modify rules: Add STIG AS&D 2023-06-08 mappings ( #3914 )
...
* Update JSON schema to include STIG ASD 2023-06-08 mapping
* Update rules to add STIG metadata mappings
---------
Co-authored-by: Loris Sierra <loris.sierra@sonarsource.com>
2024-05-06 08:56:31 +02:00
Loris S
c8fc3ffe00
Modify S3649(js): Fix code samples ( #3759 )
2024-03-13 13:06:25 +00:00
Egon Okerman
d1417e82f8
Modify CWE and OWASP Top 10 links to follow standard link format (APPSEC-1134) ( #3529 )
...
* Fix all CWE references
* Fix all OWASP references
* Fix missing CWE prefixes
2024-01-15 17:15:56 +01:00
Marco Borgeaud
34814f787b
Remove links to SANS Top 25 CWEs ( #3322 )
...
These links are no longer relevant since SANS now just link to CWE, and we already have links to CWEs.
2023-10-18 13:16:00 +00:00
Marco Borgeaud
8209548e54
Diff blocks: fix incorrect use for python ( #2795 )
...
Improvement identified in #2790 .
Add a prefix to the diff-id when it is used multiple times in different
"how to fix it in XYZ" sections to avoid ambiguity and pedantically
follow the spec:
> A single and unique diff-id should be used only once for each type of
code example as shown in the description of a rule.
Obvious typos around `diff-type` were fixed.
An obvious extra use of diff blocks was removed.
2023-08-21 15:22:49 +02:00
Marco Borgeaud
57c303541e
Diff blocks: fix some incorrect use for csharp ( #2799 )
2023-08-15 14:19:27 +02:00
Marco Borgeaud
95ce8c6119
Diff blocks: fix some incorrect use for javascript ( #2802 )
...
Improvement identified in #2790 .
Add a prefix to the diff-id when it is used multiple times in different
"how to fix it in XYZ" sections to avoid ambiguity and pedantically
follow the spec:
> A single and unique diff-id should be used only once for each type of
code example as shown in the description of a rule.
Obvious typos around `diff-type` were fixed.
2023-08-15 09:43:48 +02:00
Marco Borgeaud
7da1e57a15
Diff blocks: fix some incorrect use for java ( #2801 )
2023-08-10 17:12:37 +02:00
Marco Borgeaud
6550e65756
Diff blocks: fix some incorrect use for php ( #2804 )
...
Improvement identified in #2790 .
Add a prefix to the diff-id when it is used multiple times in different
"how to fix it in XYZ" sections to avoid ambiguity and pedantically
follow the spec:
> A single and unique diff-id should be used only once for each type of
code example as shown in the description of a rule.
Obvious typos around `diff-type` were fixed.
2023-08-10 15:57:24 +02:00
Antonio Aversa
a02bf814d4
Clean Code Taxonomy: add "code" to all non-obsolete metadata.json ( #2793 )
2023-08-04 17:19:38 +02:00
Loris S
29258e3a79
Modify S3649(C#): Fix samples ( #2622 )
...
## Review
A dedicated reviewer checked the rule description successfully for:
- [x] logical errors and incorrect information
- [x] information gaps and missing content
- [x] text style and tone
- [x] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule )
2023-07-25 15:53:23 +02:00
Fred Tingaud
51369b610e
Make sure that includes are always surrounded by empty lines ( #2270 )
...
When an include is not surrounded by empty lines, its content is inlined
on the same line as the adjacent content. That can lead to broken tags
and other display issues.
This PR fixes all such includes and introduces a validation step that
forbids introducing the same problem again.
2023-06-22 10:38:01 +02:00
Fred Tingaud
16f6c0aecf
Inline adoc when include has no additional value ( #1940 )
...
Inline adoc files when they are included exactly once.
Also fix language tags because this inlining gives us better information
on what language the code is written in.
2023-05-25 14:18:12 +02:00
Jamie Anderson
2d52a31a16
Modify rules: Remove deprecated sans-top25-* tags ( #1694 )
2023-03-29 15:31:59 +02:00
Jamie Anderson
2d8892defb
Modify rules: Remove "owasp-aX" tag ( #1655 )
2023-03-16 15:25:13 +01:00
hendrik-buchwald-sonarsource
ed1c833d10
Modify rule S3649: Fix typo in code samples ( #1651 )
2023-03-15 09:55:33 +00:00
Ilia Kebets
c80d7f3b4c
Add checks for education format ( #1607 )
2023-03-07 17:16:47 +01:00
Loris S
8a800594ae
Modify S3649(JS): Add Education Framework ( #1500 )
2023-03-02 19:03:03 +01:00
Loris S
02af23c1b3
Modify S3649(multiple languages): Update to the education framework (APPSEC-184) ( #1336 )
2023-03-02 18:22:24 +01:00
Loris S
e52b9671b2
Education text Fix ( #1338 )
2023-03-02 18:22:24 +01:00
Loris S
8815e23ae8
Modify All Current Education Rules: Support intuitive view ( #1256 )
2023-03-02 18:22:24 +01:00
Loris S
1253c0a013
Modify Multiple Rules(Education): Standardization of impact files ( #1240 )
2023-03-02 18:22:24 +01:00
Loris S
770ad9756d
Modify Rule S3649: Education Framework (APPSEC-46 & APPSEC-47) ( #1109 )
2023-03-02 18:07:54 +01:00
Loris S
746e99677d
Modify All Current Education Rules: Add Security Principles ( #1248 )
2022-09-13 16:26:52 +02:00
Pierre-Loup
8920bd8e10
Fix CWE mapping ( #1128 )
2022-08-18 10:33:50 +02:00
Alexandre Gigleux
01bad1b800
Map rules to OWASP ASVS 4 ( #1110 )
...
https://sonarsource.atlassian.net/browse/MMF-2794
2022-07-29 13:35:38 +02:00
pedro-oliveira-sonarsource
082b3ef269
Modify: Fix old/broken embedded links ( #1100 )
2022-07-08 13:58:56 +02:00
pedro-oliveira-sonarsource
b04b29019c
[APPSEC-3] Security rules are mapped to PCI DSS 4.0 ( #1007 )
2022-05-24 16:19:27 +02:00
pedro-oliveira-sonarsource
4cd575af12
[APPSEC-2] New security standard - PCI DSS 3.2 ( #1005 )
2022-05-23 09:00:28 +02:00
jtingsanchali
96d9ddb930
RULEAPI-755 Update CWE URLs by removing .html suffix and update with https protocol ( #926 )
...
* Change affects only see.adoc and rule.adoc files, not comments-and-links.adoc files
2022-04-07 08:53:59 -05:00
Fred Tingaud
b4161466e6
RULEAPI-661: Add syntax coloring
2022-02-04 16:28:24 +00:00
Loris S
4774e72dc1
Modify Rules: Multiple typo on missing hyphens ( #660 )
2021-12-13 16:18:55 +01:00
Pierre-Loup
e7ad1012e3
RULEAPI-709: Security rules are mapped to the OWASP Top 10 2021 security-standard ( #545 )
2021-11-01 15:00:32 +01:00
Pierre-Loup
547094ab3c
Update CWE mapping ( #534 )
2021-10-28 10:07:16 +02:00
Arseniy Zaostrovnykh
6a0ec99e78
RULEAPI-706: Add quick fixes metadata
2021-10-07 09:23:15 +00:00
Arseniy Zaostrovnykh
2301f5808e
RULEAPI-695: remove extra/coveredLanguages field
2021-09-28 13:36:45 +02:00
Arseniy Zaostrovnykh
ec55b6ead1
RULEAPI-687: Migrate legacy keys from Jira RSPEC ( #392 )
2021-09-24 09:08:46 +02:00
Arseniy Zaostrovnykh
5ba82ae371
RULEAPI-665: Remove security standards from the irrelevant language-specific rules ( #362 )
2021-09-21 15:40:35 +02:00
Arseniy Zaostrovnykh
f7904cebe7
RULEAPI-666: Migrate the "List of parameters", "Highlighting" and "Message" fields from jira RSPEC ( #346 )
2021-09-20 13:38:42 +00:00
Arseniy Zaostrovnykh
11c08de44a
Revert "RULEAPI-665: Remove security standards from the irrelevant language-specific rules" ( #361 )
...
This reverts commit 892bccde8ffcdf2a6d662d97ec469cd63de87878.
2021-09-17 13:50:03 +02:00
