Egon Okerman
d1417e82f8
Modify CWE and OWASP Top 10 links to follow standard link format (APPSEC-1134) ( #3529 )
...
* Fix all CWE references
* Fix all OWASP references
* Fix missing CWE prefixes
2024-01-15 17:15:56 +01:00
Antonio Aversa
a02bf814d4
Clean Code Taxonomy: add "code" to all non-obsolete metadata.json ( #2793 )
2023-08-04 17:19:38 +02:00
Fred Tingaud
51369b610e
Make sure that includes are always surrounded by empty lines ( #2270 )
...
When an include is not surrounded by empty lines, its content is inlined
on the same line as the adjacent content. That can lead to broken tags
and other display issues.
This PR fixes all such includes and introduces a validation step that
forbids introducing the same problem again.
2023-06-22 10:38:01 +02:00
Jamie Anderson
2d8892defb
Modify rules: Remove "owasp-aX" tag ( #1655 )
2023-03-16 15:25:13 +01:00
Ilia Kebets
c80d7f3b4c
Add checks for education format ( #1607 )
2023-03-07 17:16:47 +01:00
pedro-oliveira-sonarsource
e2224a008d
[APPSEC-290] Modify rule S2631 (JavaScript): Change text to the education framework format ( #1419 )
2023-03-02 19:03:03 +01:00
pedro-oliveira-sonarsource
473987e2d6
Modify rule S2631: Change text to the education framework format [Python][APPSEC-288] ( #1406 )
2023-03-02 19:03:03 +01:00
pedro-oliveira-sonarsource
c59fe93882
[APPSEC-289] Modify rule S2631 (PHP): Change text to the education framework format ( #1408 )
2023-03-02 19:03:03 +01:00
Loris S
e52b9671b2
Education text Fix ( #1338 )
2023-03-02 18:22:24 +01:00
Loris S
8815e23ae8
Modify All Current Education Rules: Support intuitive view ( #1256 )
2023-03-02 18:22:24 +01:00
Loris S
1253c0a013
Modify Multiple Rules(Education): Standardization of impact files ( #1240 )
2023-03-02 18:22:24 +01:00
Loris S
4b485669fd
Modify S2631(multiple languages): Update to the education framework (APPSEC-124) ( #1215 )
2023-03-02 18:22:24 +01:00
Loris S
746e99677d
Modify All Current Education Rules: Add Security Principles ( #1248 )
2022-09-13 16:26:52 +02:00
Alexandre Gigleux
01bad1b800
Map rules to OWASP ASVS 4 ( #1110 )
...
https://sonarsource.atlassian.net/browse/MMF-2794
2022-07-29 13:35:38 +02:00
pedro-oliveira-sonarsource
082b3ef269
Modify: Fix old/broken embedded links ( #1100 )
2022-07-08 13:58:56 +02:00
pedro-oliveira-sonarsource
b04b29019c
[APPSEC-3] Security rules are mapped to PCI DSS 4.0 ( #1007 )
2022-05-24 16:19:27 +02:00
pedro-oliveira-sonarsource
4cd575af12
[APPSEC-2] New security standard - PCI DSS 3.2 ( #1005 )
2022-05-23 09:00:28 +02:00
jtingsanchali
96d9ddb930
RULEAPI-755 Update CWE URLs by removing .html suffix and update with https protocol ( #926 )
...
* Change affects only see.adoc and rule.adoc files, not comments-and-links.adoc files
2022-04-07 08:53:59 -05:00
Fred Tingaud
b4161466e6
RULEAPI-661: Add syntax coloring
2022-02-04 16:28:24 +00:00
Pierre-Loup
e7ad1012e3
RULEAPI-709: Security rules are mapped to the OWASP Top 10 2021 security-standard ( #545 )
2021-11-01 15:00:32 +01:00
Pierre-Loup
547094ab3c
Update CWE mapping ( #534 )
2021-10-28 10:07:16 +02:00
Arseniy Zaostrovnykh
6a0ec99e78
RULEAPI-706: Add quick fixes metadata
2021-10-07 09:23:15 +00:00
Arseniy Zaostrovnykh
f786bd2603
Fix the mistakingly deleted 'See' sections in #362 ( #449 )
...
committed as f6331f7fdca7fe36e52439b927312fd5d5a455c0
The mistake was caused by the uninitialized variable "hasSeeSection" in the
automatic removal script. Fixed here:
f6331f7fdc
2021-10-05 09:49:00 +02:00
Arseniy Zaostrovnykh
2301f5808e
RULEAPI-695: remove extra/coveredLanguages field
2021-09-28 13:36:45 +02:00
Arseniy Zaostrovnykh
ec55b6ead1
RULEAPI-687: Migrate legacy keys from Jira RSPEC ( #392 )
2021-09-24 09:08:46 +02:00
Arseniy Zaostrovnykh
5ba82ae371
RULEAPI-665: Remove security standards from the irrelevant language-specific rules ( #362 )
2021-09-21 15:40:35 +02:00
Arseniy Zaostrovnykh
f7904cebe7
RULEAPI-666: Migrate the "List of parameters", "Highlighting" and "Message" fields from jira RSPEC ( #346 )
2021-09-20 13:38:42 +00:00
eric-therond-sonarsource
08c011b06a
add mobile security standards, links and tags to mobile rules and add new CWEv4.4 entries ( #112 )
2021-06-10 10:04:10 +02:00
Arseniy Zaostrovnykh
b76bc57083
RULEAPI-576: add a horizontal rule between rule description and comments
2021-06-08 15:52:13 +02:00
Arseniy Zaostrovnykh
6c1ad2c13c
Fix the comment display: rule-id, timestamp, GH visibility, link direction
2021-06-03 09:05:38 +02:00
Arseniy Zaostrovnykh
cdd7690a79
Export comments and rspec-to-rspec links from jira
2021-06-02 20:44:38 +02:00
Arseniy Zaostrovnykh
5e3800bfc9
remove remaining spaces in the beginning and end of code blocks
2021-02-17 13:58:55 +01:00
Arseniy Zaostrovnykh
acadea59e9
move coveredLangauges and replacementRules into extra field
2021-02-16 17:52:17 +01:00
Arseniy Zaostrovnykh
1d713451d6
Undo the abuse of compatibleLanguages metadata field
2021-02-16 15:00:44 +01:00
Arseniy Zaostrovnykh
f1aa7fbd60
update; grammar fixes
2021-02-11 16:56:46 +01:00
Arseniy Zaostrovnykh
a09a26d560
fix hading of {{\+}} and sort the compatible languages
2021-02-08 12:42:26 +01:00
Arseniy Zaostrovnykh
b62862646c
move typescript rules to javascript directory
2021-02-08 10:49:37 +01:00
sonartech
0ffbfb133d
Nightly update
2021-02-06 04:10:49 +00:00
Arseniy Zaostrovnykh
af8cda992b
unescape more things
2021-02-05 10:34:25 +01:00
Arseniy Zaostrovnykh
402a7d7be3
sort metadata fields
2021-02-04 12:27:03 +01:00
Arseniy Zaostrovnykh
f6093ee186
Overapproximate compatibleLanguages and tags/standards
2021-02-02 19:11:00 +01:00
Arseniy Zaostrovnykh
716b335a56
Enable forced linebreaks in quotes; escape -- in url
2021-02-02 16:54:43 +01:00
Arseniy Zaostrovnykh
7ca29f686f
Force linebreaks
2021-02-02 15:02:10 +01:00
Arseniy Zaostrovnykh
1a22006270
Add coveredLanguages field
2021-01-29 15:53:23 +01:00
Arseniy Zaostrovnykh
d4598ce0f9
make in-line code blocks verbatim
2021-01-27 13:42:22 +01:00
Arseniy Zaostrovnykh
0a8c5eafce
add replacementRules metadata field
2021-01-26 16:58:13 +01:00
Arseniy Zaostrovnykh
fb261af631
Quality profiles for customized rules
2021-01-07 12:13:35 +01:00
Arseniy Zaostrovnykh
232269f3ce
Add default quality profiles
2021-01-07 11:08:42 +01:00
Arseniy Zaostrovnykh
d96d948333
change the inline-code delimitters
2020-12-23 14:59:06 +01:00
Arseniy Zaostrovnykh
ed53c1610b
Add all rules, update all rules fixing the inline code syntax
2020-12-21 15:38:52 +01:00