9ee16daa47
* Update JSON schema to include STIG ASD 2023-06-08 mapping * Update rules to add STIG metadata mappings --------- Co-authored-by: Loris Sierra <loris.sierra@sonarsource.com>
55 lines
1.2 KiB
Plaintext
55 lines
1.2 KiB
Plaintext
include::../description.adoc[]
|
|
|
|
include::../ask-yourself.adoc[]
|
|
|
|
include::../recommended.adoc[]
|
|
|
|
== Sensitive Code Example
|
|
|
|
[source,vbnet]
|
|
----
|
|
Dim UrlHttp As String = "http://example.com" ' Noncompliant
|
|
Dim UrlFtp As String = "ftp://anonymous@example.com" ' Noncompliant
|
|
Dim UrlTelnet As String = "telnet://anonymous@example.com" ' Noncompliant
|
|
----
|
|
|
|
[source,vbnet]
|
|
----
|
|
Using Smtp As New SmtpClient("host", 25) ' Noncompliant, EnableSsl Is Not Set
|
|
End Using
|
|
Using Telnet As New MyTelnet.Client("host", port) ' Noncompliant, rule raises Security Hotspot On any member containing "Telnet"
|
|
End Using
|
|
----
|
|
|
|
== Compliant Solution
|
|
|
|
[source,vbnet]
|
|
----
|
|
Dim UrlHttps As String = "https://example.com"
|
|
Dim UrlSftp As String = "sftp://anonymous@example.com"
|
|
Dim UrlSsh As String = "ssh://anonymous@example.com"
|
|
----
|
|
|
|
[source,vbnet]
|
|
----
|
|
Using Smtp As New SmtpClient("host", 25) With {.EnableSsl = True}
|
|
End Using
|
|
Using Ssh As New MySsh.Client("host", port)
|
|
End Using
|
|
----
|
|
|
|
include::../exceptions.adoc[]
|
|
|
|
include::../see.adoc[]
|
|
|
|
|
|
ifdef::env-github,rspecator-view[]
|
|
|
|
'''
|
|
== Implementation Specification
|
|
(visible only on this page)
|
|
|
|
include::../message.adoc[]
|
|
|
|
endif::env-github,rspecator-view[]
|