475 Commits

Author SHA1 Message Date
Nils Werner
b200ab7bf0
Modify rule S5842: Add PHP as covered language (#292) 2021-08-31 17:17:59 +02:00
Yassin Kammoun
38a8225038
Create rule S5842[javascript]: Repeated patterns in regular expressions should not match the empty string (#277) 2021-08-31 16:57:18 +02:00
github-actions[bot]
bd1f1a33ad
Create rule S6353: Regular expression quantifiers and character classes should be used concisely (#279) 2021-08-31 14:56:55 +02:00
quentin-jaquier-sonarsource
98730f5823
.gitignore IntelliJ IDEA files (#289) 2021-08-31 13:31:58 +02:00
Dorian Burihabwa
82de518f82
Modify rule S1068: Document tolerated exceptions for Java (#284) 2021-08-31 12:10:35 +02:00
quentin-jaquier-sonarsource
7a6b82140a
Modify rule S6216[java]: change "in run-time" by "at runtime" (#286) 2021-08-31 11:52:40 +02:00
Nils Werner
f9bb064e8f
Modify rule S5361: Add PHP as covered language (#287)
* Modify rule S5361: Add PHP as covered language

* Update rules/S5361/php/metadata.json

Co-authored-by: pynicolas <pierre-yves.nicolas@sonarsource.com>

Co-authored-by: pynicolas <pierre-yves.nicolas@sonarsource.com>
2021-08-31 10:45:38 +02:00
Yassin Kammoun
672560f059
Create rule S5843[javascript]: Regular expressions should not be too complicated (#273) 2021-08-31 09:36:47 +02:00
github-actions[bot]
60c5453a9b
Create rule S6352: The return value of "std::move" should be used in a function 2021-08-30 21:43:46 +00:00
tomasz-kaminski-sonarsource
5ce2a53271
Modify rule S6321: Clarified string-view introduction and restored example (#282)
CPP-3011
2021-08-30 11:36:06 +02:00
github-actions[bot]
4b90d13af4
Create rule S6351: Regular expressions with the global flag should be used with caution (#274) 2021-08-25 14:11:47 +02:00
DGolovinov
cd2eb4c9dc
Rule S4261: undeprecate (#281) 2021-08-25 13:18:46 +02:00
Yassin Kammoun
2d4f279763
Create rule S5867[javascript]: Regular expressions using Unicode character classes or property escapes should enable the unicode flag (#280) 2021-08-25 10:44:38 +02:00
Loïc Joly
fb0dabd157
CPP-2968: Rule S6221: Concept names should comply with a naming convention
Correct typo in code examples
2021-08-19 13:58:43 +02:00
eric-therond-sonarsource
284ecc2fd8
update s2076 PHP description + common metadata (#264) 2021-08-17 19:33:04 +02:00
Johann Beleites
3e885384c4
Create rule S1128[kotlin]: Unnecessary imports should be removed (#268) 2021-08-17 16:06:47 +02:00
Nils Werner
bb8fe0b62b
Modify rule S6294: Log Groups should be declared explicitly (#165)
The relation between relevant resource and log group resource is done via Ref not Join
2021-08-16 13:01:02 +00:00
Karim El Ouerghemmi
88e29d159c
Fix alignment in S6294 CloudFormation examples (#190)
Co-authored-by: Nils Werner <64034005+nils-werner-sonarsource@users.noreply.github.com>
2021-08-16 12:51:45 +00:00
pynicolas
0da133709f
Modify rule S5332: WordPress misconfigurations (#228)
Co-authored-by: Karim El Ouerghemmi <64004037+karim-ouerghemmi-sonarsource@users.noreply.github.com>
2021-08-16 11:40:21 +00:00
Karim El Ouerghemmi
0a4058b474
Delete rule S6342 (#266)
See jira comment in https://jira.sonarsource.com/browse/SONARPHP-1207 for the why.
2021-08-16 10:45:58 +02:00
Čaba Šagi
9fef1a0432
Create rule S3431[VBNET]: ExpectedException should not be used (#259) 2021-08-13 16:51:27 +02:00
github-actions[bot]
1cdcb5dc2e
Create rule S6348: Allowing unfiltered HTML content in WordPress is security-sensitive (#247)
* Create rule S6348

* Title and type

* Description

* Address review suggestions

Co-authored-by: karim-ouerghemmi-sonarsource <karim-ouerghemmi-sonarsource@users.noreply.github.com>
Co-authored-by: Karim El Ouerghemmi <64004037+karim-ouerghemmi-sonarsource@users.noreply.github.com>
Co-authored-by: Karim El Ouerghemmi <karim.ouerghemmi@sonarsource.com>
Co-authored-by: Nils Werner <64034005+nils-werner-sonarsource@users.noreply.github.com>
2021-08-13 14:31:32 +00:00
github-actions[bot]
1601b6a6c7
Create rule S6339: Secret keys and salt values should be robust (#230)
* Create rule S6339

* Update description and title

* Add tag and security standard

* Add link

* Fix metada JSON

Co-authored-by: pynicolas <pynicolas@users.noreply.github.com>
Co-authored-by: Pierre-Yves Nicolas <pierre-yves.nicolas@sonarsource.com>
Co-authored-by: Karim El Ouerghemmi <64004037+karim-ouerghemmi-sonarsource@users.noreply.github.com>
2021-08-13 15:48:17 +02:00
github-actions[bot]
a9ac3f1d8a
Create rule S6343: Disabling automatic updates is security-sensitive (#240)
* Create rule S6343

* Add examples

* Add description

* Change to security hotspot

* Title

* Address review suggestions

Co-authored-by: karim-ouerghemmi-sonarsource <karim-ouerghemmi-sonarsource@users.noreply.github.com>
Co-authored-by: Karim El Ouerghemmi <64004037+karim-ouerghemmi-sonarsource@users.noreply.github.com>
Co-authored-by: Karim El Ouerghemmi <karim.ouerghemmi@sonarsource.com>
2021-08-13 14:22:23 +02:00
github-actions[bot]
7f49f6e2d6
Create rule S6346: Allowing unauthenticated database repair in WordPress is security-sensitive (#244)
* Create rule S6346

* Add description

* Type and title

* Address review comments

Co-authored-by: karim-ouerghemmi-sonarsource <karim-ouerghemmi-sonarsource@users.noreply.github.com>
Co-authored-by: Karim El Ouerghemmi <64004037+karim-ouerghemmi-sonarsource@users.noreply.github.com>
Co-authored-by: Karim El Ouerghemmi <karim.ouerghemmi@sonarsource.com>
Co-authored-by: Nils Werner <64034005+nils-werner-sonarsource@users.noreply.github.com>
2021-08-13 11:56:50 +00:00
github-actions[bot]
848264934f
Create rule S6349: WordPress option names should not be misspelled (#248)
* Create rule S6349

* Update rule description

* Address review suggestion

Co-authored-by: hendrik-buchwald-sonarsource <64110887+hendrik-buchwald-sonarsource@users.noreply.github.com>

Co-authored-by: pynicolas <pynicolas@users.noreply.github.com>
Co-authored-by: Pierre-Yves Nicolas <pierre-yves.nicolas@sonarsource.com>
Co-authored-by: Karim El Ouerghemmi <64004037+karim-ouerghemmi-sonarsource@users.noreply.github.com>
Co-authored-by: hendrik-buchwald-sonarsource <64110887+hendrik-buchwald-sonarsource@users.noreply.github.com>
2021-08-13 10:43:27 +02:00
margarita-nedzelska-sonarsource
da4590101f
Create rule S5612[kotlin]: Lambdas should not have too many lines (#263) 2021-08-13 07:52:22 +00:00
github-actions[bot]
43ab7609ad
Create rule S6344: Constants should not be redefined (#241)
* Create rule S6344

* Update rule metadata

Co-authored-by: pynicolas <pynicolas@users.noreply.github.com>
Co-authored-by: Pierre-Yves Nicolas <pierre-yves.nicolas@sonarsource.com>
Co-authored-by: Nils Werner <64034005+nils-werner-sonarsource@users.noreply.github.com>
2021-08-12 14:36:09 +00:00
github-actions[bot]
9587ea2542
Create rule S6345: Allowing all external requests from a WordPress server is security-sensitive (#243)
* Create rule S6345

* Update rule description

* Address review comments

Co-authored-by: pynicolas <pynicolas@users.noreply.github.com>
Co-authored-by: Pierre-Yves Nicolas <pierre-yves.nicolas@sonarsource.com>
Co-authored-by: Karim El Ouerghemmi <64004037+karim-ouerghemmi-sonarsource@users.noreply.github.com>
2021-08-12 15:22:40 +02:00
github-actions[bot]
99d574640b
Create rule S6347: WordPress options should not be defined at the end of "wp-config.php" (#245)
* Create rule S6347

* Update rule description

Co-authored-by: pynicolas <pynicolas@users.noreply.github.com>
Co-authored-by: Pierre-Yves Nicolas <pierre-yves.nicolas@sonarsource.com>
Co-authored-by: Nils Werner <64034005+nils-werner-sonarsource@users.noreply.github.com>
2021-08-12 12:20:02 +00:00
github-actions[bot]
26b281eb2a
Create rule S6341: WordPress theme and plugin editors are security-sensitive (#236) 2021-08-12 11:19:38 +02:00
github-actions[bot]
fb514b35bd
Create rule S6342: Allowing themes and plugins to be managed in WordPress admin area is security-sensitive (#238)
* Create rule S6342

* First real description

* Update rules/S6342/php/rule.adoc

Co-authored-by: hendrik-buchwald-sonarsource <64110887+hendrik-buchwald-sonarsource@users.noreply.github.com>

* Address review suggestions

Co-authored-by: pynicolas <pynicolas@users.noreply.github.com>
Co-authored-by: Pierre-Yves Nicolas <pierre-yves.nicolas@sonarsource.com>
Co-authored-by: Nils Werner <64034005+nils-werner-sonarsource@users.noreply.github.com>
Co-authored-by: hendrik-buchwald-sonarsource <64110887+hendrik-buchwald-sonarsource@users.noreply.github.com>
Co-authored-by: Nils Werner <nils.werner@sonarsource.com>
2021-08-12 09:06:07 +00:00
Yassin Kammoun
9e3e82beac
Modify rule S3723: Consider all multiline constructs (#262) 2021-08-12 10:58:54 +02:00
Dorian Burihabwa
00b31f1f7f
Modify rule S2479: Remove tabs exception for Java text blocks (#261)
The tabs exception is now configurable is now configurable using a
parameter and disabled by default.
2021-08-12 10:12:10 +02:00
Evgeny Mandrikov
8727e518b0
Create rule S1874[kotlin]: Code annotated as deprecated should not be used 2021-08-10 21:00:54 +00:00
Loïc Joly
b5f76d1705
Add documentation about rule deprecation (#257) 2021-08-10 16:59:12 +00:00
Evgeny Mandrikov
a3166ba6fc
Create rule S1133[kotlin]: Deprecated code should be removed 2021-08-10 17:08:36 +02:00
pynicolas
57c2681f05
Modify rule S4507: WordPress misconfigurations (#227) 2021-08-10 12:03:24 +00:00
Alban Auzeill
dac882e024 Fix S5329 typo and add noncompliant comments 2021-08-09 08:35:15 +02:00
Quentin Jaquier
b9ee74ad78 Update legacy keys for xml 2021-08-06 16:54:56 +02:00
Alban Auzeill
7d81d42672 S5329 should not be a BUG but a CODE_SMELL 2021-08-06 16:26:06 +02:00
tomasz-kaminski-sonarsource
d521e47600
Modify rule S3230: Add missing since-c++11 tag (#252) 2021-08-06 10:17:58 +02:00
Pavel Mikula
bde9d5a440
Modify rule S1764 csharp and vbnet: Change scope to Main-only (#250) 2021-08-05 15:59:48 +02:00
margarita-nedzelska-sonarsource
5663b5a34f
Fix broken links in Apex rules description (S5376 & S 5380) 2021-08-05 14:31:14 +02:00
github-actions[bot]
56ce673d3f
Create rule S6300: Using unencrypted files in mobile applications is security-sensitive (#126) 2021-08-05 12:03:23 +00:00
github-actions[bot]
a0868e9aa6
Create rule S6301: Mobile database encryption keys should not be disclosed (#129) 2021-08-05 08:11:58 +00:00
Dorian Burihabwa
1cc6413fc3 Revert "MMF-2326 Move Java rules targeting XML from Java to XML category"
This reverts commit b20fe5c6c9f3793bdc761bb3d31a839eee31cddd.
2021-08-03 16:56:14 +02:00
Johann Beleites
09ce6edecc
Use correct plural form of IVs (#246) 2021-08-02 17:01:21 +02:00
Michael Gumowski
b20fe5c6c9
MMF-2326 Move Java rules targeting XML from Java to XML category (#242)
Rules moved:
* S3281
* S3282
* S3355
* S3369
* S3373
* S3374
* S3417
* S3419
* S3420
* S3421
* S3422
* S3423
* S3438
* S3439
* S3822
2021-08-02 15:37:52 +02:00
Tibor Blenessy
9f4d298498
Modify rule S6323: Add exception when | is used for optional groups (#239) 2021-07-30 17:30:23 +02:00