696 Commits

Author SHA1 Message Date
SonarTech
c48ac7abdb update coverage information 2021-10-26 00:31:11 +00:00
SonarTech
1706289ac1 update coverage information 2021-10-23 00:32:15 +00:00
Čaba Šagi
bfd8bce975
S2302: Update tag to bad-practice (#525) 2021-10-22 17:04:49 +03:00
Johann Beleites
3437bcc74d
Create rule S5867[kotlin]: Unicode-aware versions of character classe… (#439)
* Create rule S5867[kotlin]: Unicode-aware versions of character classes should be preferred

* Fix typo

Co-authored-by: margarita-nedzelska-sonarsource <70522623+margarita-nedzelska-sonarsource@users.noreply.github.com>

Co-authored-by: margarita-nedzelska-sonarsource <70522623+margarita-nedzelska-sonarsource@users.noreply.github.com>
2021-10-22 13:41:03 +00:00
Johann Beleites
98f9c35ae2
Create rule S5868[kotlin]: Unicode Grapheme Clusters should be avoided inside regex character classes (#440) 2021-10-22 15:37:50 +02:00
SonarTech
ae95c3adea update coverage information 2021-10-22 00:31:45 +00:00
Costin Zaharia
48e30f9776
S3267 - update severity and remove clumsy tag (#520) 2021-10-21 16:43:36 +02:00
Tibor Blenessy
461f9b2f60
[JS] Update description for S5958 to not raise for negation (#519) 2021-10-21 13:26:59 +02:00
Pierre-Loup
8f1e968ad7
Update CWE-489 title (#511) 2021-10-21 11:23:23 +02:00
SonarTech
b2b42dd6ec update coverage information 2021-10-21 00:31:56 +00:00
Arseniy Zaostrovnykh
5743ea2d32
Modify rule S5950[CFamily]: remove double negative 2021-10-20 14:56:55 +00:00
Arseniy Zaostrovnykh
91fe81fe58
Modify rule S5950[CFamily]: make_shared C++20 arrays 2021-10-20 13:59:16 +00:00
tomasz-kaminski-sonarsource
04d0ce6e1b
Modify rule S5950: More exceptions for make_shared 2021-10-20 13:35:04 +00:00
Johann Beleites
fba9aabf26
Create rule S5869[kotlin]: Character classes in regular expressions should not contain the same character twice (#441) 2021-10-20 12:43:34 +02:00
hendrik-buchwald-sonarsource
b35c9593c5
Modify rule S6258: Add missing hyphen in title (#513) 2021-10-20 09:36:55 +00:00
Loris S
b3530d6421
Modify rule S6258: Conversion from S3-specific to generic rule (#510) 2021-10-20 09:57:41 +02:00
tomasz-kaminski-sonarsource
b402a859ce
Modify rule S5950: Exception for placemnet new 2021-10-20 07:25:23 +00:00
SonarTech
a17fc7e11d update coverage information 2021-10-20 00:30:58 +00:00
Alexandre Gigleux
d38f238e1d
Update rule.adoc (#509) 2021-10-19 11:43:21 +02:00
geoffray-adde-sonarsource
1b787b9912
Modify rule S6225[CFamily]: cover any iterator and describe limitations 2021-10-19 09:01:49 +02:00
SonarTech
7f024e01b9 update coverage information 2021-10-19 00:31:15 +00:00
abbas-sabra-sonarsource
51195dacf3
Modify rule S1016: make the title match the description 2021-10-18 17:45:46 +02:00
quentin-jaquier-sonarsource
7045e7434b
[java] fix formatting in rules descriptions (#504) 2021-10-18 16:27:36 +02:00
SonarTech
88b19437fe update coverage information 2021-10-16 00:32:03 +00:00
Pierre-Loup
cf92b1d361
Modify rule S5332[kotlin]: support Android WebView insecure mixed content policy (#457) 2021-10-15 10:58:45 +02:00
hendrik-buchwald-sonarsource
9e6d773806
Deprecate S5167 (#352) 2021-10-15 10:56:46 +02:00
hendrik-buchwald-sonarsource
f1a29cf58c
Create rule S6363[kotlin]: Enabling file access for WebViews is security-sensitive (#462) 2021-10-15 10:09:39 +02:00
Pierre-Loup
2026ac6b8c
RULEAPI-698: Support OWASP Top 10 2021 security standard (#466) 2021-10-15 09:37:46 +02:00
SonarTech
8c4de44723 update coverage information 2021-10-15 00:31:26 +00:00
github-actions[bot]
496551bb84
Create rule S6358: Allowing application backup is security-sensitive 2021-10-14 16:51:37 +02:00
Pierre-Loup
18261edb3e
Modify rule S5332: Improve description (#474) 2021-10-14 16:12:59 +02:00
Alexandre Gigleux
f007eeb18c
Remove CWE-311 from "securityStandards" to match the "See" section (#488) 2021-10-14 15:14:07 +02:00
hendrik-buchwald-sonarsource
e8933b12e6
Modify rule S5167: Remove XSS (#483) 2021-10-14 14:03:39 +02:00
Elena Vilchik
dea6d9aecc
Do not repeat inherited data for S5867 (#492) 2021-10-14 14:03:26 +02:00
Elena Vilchik
7a5f08bd8d
Set scope 'Main' for javascript rules (#491) 2021-10-14 12:25:50 +02:00
Loris S
21195f1a78
Modify rule S6308: Improve description (#485)
* description readability re-arrangement

* Update rules/S6308/description.adoc

Co-authored-by: hendrik-buchwald-sonarsource <64110887+hendrik-buchwald-sonarsource@users.noreply.github.com>

Co-authored-by: hendrik-buchwald-sonarsource <64110887+hendrik-buchwald-sonarsource@users.noreply.github.com>
2021-10-14 11:04:00 +02:00
SonarTech
282b4e3412 update coverage information 2021-10-14 00:31:45 +00:00
margarita-nedzelska-sonarsource
df4c1d46e0
Modify rule S2151: Fix description for Kotlin and Java (#487) 2021-10-13 15:02:16 +00:00
margarita-nedzelska-sonarsource
2ae51e8504
Create rule S1143[kotlin]: Jump statements should not occur in "final… (#319)
Co-authored-by: Dorian Burihabwa <dorian.burihabwa@sonarsource.com>
2021-10-13 16:46:48 +02:00
hendrik-buchwald-sonarsource
e68073caf3
Modify rule S5322: Add XML and update description (#404) 2021-10-13 16:07:37 +02:00
github-actions[bot]
414eaff9e5
Create rule S6361: Defining a single permission for read and write access of Content Providers is security-sensitive (#427) 2021-10-13 13:40:11 +00:00
Loïc Joly
0553b63456
Make it more explicit what a covered or a partial quickfix means 2021-10-13 15:23:02 +02:00
github-actions[bot]
2136dca525
Create rule S5332[xml] (#455) 2021-10-13 12:21:04 +02:00
Massimo Paladin
53a757223f
Modify rule S6359: Move message to implementation specification 2021-10-13 09:57:03 +00:00
SonarTech
dd5988f685 update coverage information 2021-10-13 00:32:00 +00:00
Alban Auzeill
5d16ca1d83
Modify Rule S4507[java]: update sensitive code example with Statics.setWebContentsDebuggingEnabled (#480) 2021-10-12 17:12:55 +02:00
github-actions[bot]
15f09fa985
Create rule S6359: Custom permissions should not be defined in the 'android.permission' namespace 2021-10-12 16:11:29 +02:00
hendrik-buchwald-sonarsource
66b690e5b6
Create rule S6363[java]: Enabling file access for WebViews is security-sensitive (#461) 2021-10-12 15:38:05 +02:00
hendrik-buchwald-sonarsource
faba98c05a
Use example without tainted key (#478) 2021-10-12 14:53:05 +02:00
github-actions[bot]
642f750899
Create rule S6362: Enabling JavaScript support for WebViews is security-sensitive (#433) 2021-10-12 09:46:11 +02:00