rspec/rules/S2583/java/rule.adoc
Egon Okerman d1417e82f8
Modify CWE and OWASP Top 10 links to follow standard link format (APPSEC-1134) (#3529)
* Fix all CWE references

* Fix all OWASP references

* Fix missing CWE prefixes
2024-01-15 17:15:56 +01:00

54 lines
1.1 KiB
Plaintext

== Why is this an issue?
include::../description.adoc[]
include::../noncompliant.adoc[]
=== Exceptions
This rule will not raise an issue in either of these cases:
* When the condition is a single ``++final boolean++``
----
final boolean debug = false;
//...
if (debug) {
// Print something
}
----
* When the condition is literally ``++true++`` or ``++false++``.
----
if (true) {
// do something
}
----
In these cases it is obvious the code is as intended.
== Resources
* CWE - https://cwe.mitre.org/data/definitions/570[CWE-570 - Expression is Always False]
* CWE - https://cwe.mitre.org/data/definitions/571[CWE-571 - Expression is Always True]
* https://wiki.sei.cmu.edu/confluence/x/5dUxBQ[CERT, MSC12-C.] - Detect and remove code that has no effect or is never executed
ifdef::env-github,rspecator-view[]
'''
== Implementation Specification
(visible only on this page)
include::../message.adoc[]
include::../highlighting.adoc[]
'''
== Comments And Links
(visible only on this page)
include::../comments-and-links.adoc[]
endif::env-github,rspecator-view[]