rspec/rules/S5496/standards.adoc
github-actions[bot] 846d6c7568
Create rule S5496: Server-side templates should not be vulnerable to injection attacks (#3861)
* Add java to rule S5496

* Add S5496 for Java

* Adjustments based on review

* Fix to make asciidoc tests pass

---------

Co-authored-by: daniel-teuchert-sonarsource <daniel-teuchert-sonarsource@users.noreply.github.com>
Co-authored-by: Daniel Teuchert <daniel.teuchert@sonarsource.com>
Co-authored-by: daniel-teuchert-sonarsource <141642369+daniel-teuchert-sonarsource@users.noreply.github.com>
2024-04-18 15:26:08 +02:00

3 lines
297 B
Plaintext

* OWASP - https://owasp.org/Top10/A03_2021-Injection/[Top 10 2021 Category A3 - Injection]
* OWASP - https://owasp.org/www-project-top-ten/2017/A1_2017-Injection[Top 10 2017 Category A1 - Injection]
* CWE - https://cwe.mitre.org/data/definitions/94[CWE-94 - Improper Control of Generation of Code]