3770 Commits

Author SHA1 Message Date
github-actions[bot]
05040d20fe
Create rule S6849: HTML elements should have a valid language attribute (#3439) 2023-11-15 09:47:49 +01:00
github-actions[bot]
c8c52e8716
Create rule S6843: Interactive DOM elements should not have non-interactive ARIA roles (#3427) 2023-11-15 07:48:03 +01:00
SonarTech
73679021ed update coverage information 2023-11-15 00:32:37 +00:00
github-actions[bot]
be9567fa71
Create rule S6845: Non-interactive DOM elements should not have the tabIndex property (#3434) 2023-11-14 12:22:18 +01:00
github-actions[bot]
e6ac36b0c6
Create rule S6846: DOM elements should not use the "accesskey" property (#3435) 2023-11-14 09:54:40 +01:00
SonarTech
e03055cbb8 update coverage information 2023-11-14 00:32:39 +00:00
hendrik-buchwald-sonarsource
146e2fa2ee
Modify rule S5547: Add ssl module (#3113) 2023-11-13 13:52:29 +01:00
Jamie Anderson
5e8734386e
Modify rule S4507: Add examples for Python Flask (#3042) 2023-11-13 12:01:48 +01:00
github-actions[bot]
ad5fe749c8
Create rule S6527: Function chain using "filter" should be simplified (#1645)
Co-authored-by: Marco Kaufmann <marco.kaufmann@sonarsource.com>
Co-authored-by: Angelo Buono <angelo.buono@sonarsource.com>
2023-11-13 11:10:49 +01:00
SonarTech
743cf27c9c update coverage information 2023-11-11 00:32:58 +00:00
John-Clifton-SonarSource
db01067c27
Modify rule S5524: Small language tweaks following docs team review (#3432) 2023-11-10 14:43:17 +00:00
github-actions[bot]
024f761667
Create rule S6776: Stack-traces should not be disclosed (APPSEC-1130) (#3087) 2023-11-10 13:12:28 +01:00
Alban Auzeill
c0ea5828a0
Modify rule S6745(Java): Update rule description (#3431) 2023-11-10 10:47:02 +01:00
SonarTech
c82a1c5de4 update coverage information 2023-11-10 00:33:25 +00:00
Alban Auzeill
7e7b83f50a
Modify rule S6745(Java): Update rule description about FP and reduce severity (#3430) 2023-11-09 17:26:47 +01:00
github-actions[bot]
eff4696008
Create rule S6840: DOM elements should use the "autocomplete" attribute correctly (#3423) 2023-11-09 17:24:44 +01:00
github-actions[bot]
08a27b4d07
Create rule S6842: Non-interactive DOM elements should not have interactive ARIA roles (#3425) 2023-11-09 17:10:35 +01:00
Loris S
9f8e3502df
Modify S3394(COBOL): Remove compliant samples (#3415)
## Why

b4812424ee (r131831666)
This code sample will raise, as the COBOL logic is pretty simple. The
idea is to make this rule a "review" rule instead of a vulnerability. We
do not have the bandwidth to convert it to a hotspot but that's ok.

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-11-09 15:34:37 +01:00
github-actions[bot]
1abd400898
Create rule S6841: "tabIndex" values should be non-positive (#3424) 2023-11-09 11:08:04 +01:00
SonarTech
81f8bbc081 update coverage information 2023-11-09 00:33:26 +00:00
SonarTech
0812a18060 update coverage information 2023-11-08 00:33:19 +00:00
Victor
45cb94c97a
Fix S6790: Use method definition in code snippets (#3420) 2023-11-07 10:34:46 +00:00
daniel-teuchert-sonarsource
c79e30a528
Modify Rule S4830: Revert aiohttp support (APPSEC-1361) (#3418)
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-11-07 11:23:37 +01:00
Marco Borgeaud
245f048f31
Modify rule S6012: fix some typos (#3416) 2023-11-07 09:28:04 +01:00
SonarTech
27656c27c0 update coverage information 2023-11-07 00:33:23 +00:00
Fred Tingaud
aa079ad714
Don't crash when the asciidoc logger receives a string
The asciidoc documentation states that the logger will receive objects
with a given interface, but sometimes we receive simple strings that
crash the documented code.
2023-11-06 18:12:17 +01:00
Egon Okerman
6417c38013
Modify rule S2092, S3330, S4830, S5131, S5144: Revert FastAPI changes (#3408)
The PRs #3365, #3374, #3386, #3391 and #3392 were merged before
implementation. This reverts them, to be merged only once implemented.

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-11-06 15:58:47 +00:00
daniel-teuchert-sonarsource
552a0984cf
Modify Rule S5144: Revert Changes (APPSEC-1248) (#3405)
This PR reverts some changes made in
https://github.com/SonarSource/rspec/pull/3373 to ensure that the
documentation will only be shown do users once the detection logic is
implemented.

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-11-06 16:51:27 +01:00
Loris S
2fcc531384
Modify S3394(COBOL): Fix wording and typos (#3404)
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: daniel-teuchert-sonarsource <141642369+daniel-teuchert-sonarsource@users.noreply.github.com>
2023-11-06 15:33:13 +00:00
Yassin Kammoun
47ddcb2afa
Modify rule S6789: Fix code snippet with parsing error (#3403) 2023-11-06 16:26:00 +01:00
Egon Okerman
67d91725f0
Modify rule S5131: Add FastAPI (APPSEC-1250) (#3386)
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-11-06 11:04:22 +01:00
github-actions[bot]
6bf88596e1
Create rule S6832: Non-singleton Spring beans should not be injected in a Singleton bean (#3355) 2023-11-06 10:51:01 +01:00
github-actions[bot]
ed11f03f52
Create rule S6833: @Controller should be replaced with @RestController (#3356) 2023-11-06 10:50:42 +01:00
github-actions[bot]
28bf7530f8
Create rule S6831: @Qualifier should not be used on @Bean methods (#3352) 2023-11-06 10:50:17 +01:00
Fred Tingaud
0cfa2cb41f
Fix Sonar warning. 2023-11-06 10:19:09 +01:00
Egon Okerman
89b4a93dcb
Modify rule S2092: Add FastAPI (APPSEC-1260) (#3391)
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-11-06 09:57:06 +01:00
Egon Okerman
6429a96b02
Modify rule S3330: Add FastAPI (APPSEC-1260) (#3392)
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-11-06 09:56:54 +01:00
SonarTech
2c7f43c449 update coverage information 2023-11-04 00:33:38 +00:00
daniel-teuchert-sonarsource
18dd843e83
Modify rule S5659: Add python-jose (APPSEC-1262) (#3399)
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-11-03 15:30:06 +01:00
SonarTech
0aa9e9ee37 update coverage information 2023-11-03 00:33:13 +00:00
Karim El Ouerghemmi
af4ed144fa
Modify rule S6680: Adapt rule message (#3397)
## Review

A dedicated reviewer checked the rule description successfully for:

- [x] logical errors and incorrect information
- [x] information gaps and missing content
- [x] text style and tone
- [x] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-11-02 10:06:34 +01:00
SonarTech
3a27c9ab4e update coverage information 2023-11-02 00:32:54 +00:00
Dorian Burihabwa
251ff1ba15
Modify rule S6806: Update rule title to match guidelines (#3395)
Co-authored-by: Johann Beleites <johann.beleites@sonarsource.com>
2023-11-01 16:10:07 +01:00
Dorian Burihabwa
580db51a12 Modify rule S6818: Update rule title to match guidelines
See https://docs.sonarsource.com/sonarqube/latest/extension-guide/adding-coding-rules/#titles
2023-11-01 15:58:18 +01:00
Dorian Burihabwa
2ad95d221a Modify rule S6813: Update title to match guidelines
See https://docs.sonarsource.com/sonarqube/latest/extension-guide/adding-coding-rules/#titles
2023-11-01 15:57:44 +01:00
Dorian Burihabwa
b990b66569 Modify rule S6813: Document potential NPE risk 2023-11-01 15:57:44 +01:00
Antonio Aversa
419d53464b
Modify rule S6798: remove example razor file, breaking master CI (#3394) 2023-11-01 13:54:56 +00:00
github-actions[bot]
ecf80ddbd1
Create rule S6798: [JSInvokable] attribute should only be used on public methods (#3210) 2023-11-01 14:40:32 +01:00
github-actions[bot]
a36f03cb64
Create rule S6795: Generic type statement should not use TypeVars. (#3204)
You can preview this rule
[here](https://sonarsource.github.io/rspec/#/rspec/S6795/python)
(updated a few minutes after each push).

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: joke1196 <joke1196@users.noreply.github.com>
Co-authored-by: David Kunzmann <david.kunzmann@sonarsource.com>
2023-11-01 12:01:48 +01:00
github-actions[bot]
c70acb68e9
Create rule S6792: Generic classes should be defined using the type parameter syntax (#3197)
You can preview this rule
[here](https://sonarsource.github.io/rspec/#/rspec/S6792/python)
(updated a few minutes after each push).

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: guillaume-dequenne-sonarsource <guillaume-dequenne-sonarsource@users.noreply.github.com>
Co-authored-by: Guillaume Dequenne <guillaume.dequenne@sonarsource.com>
2023-11-01 11:42:29 +01:00