rspec/rules/S7409/metadata.json
2025-03-28 20:51:38 +01:00

42 lines
753 B
JSON

{
"title": "Exposing Java objects through JavaScript interfaces is security-sensitive",
"type": "SECURITY_HOTSPOT",
"status": "ready",
"remediation": {
"func": "Constant\/Issue",
"constantCost": "30min"
},
"tags": [
"cwe",
"android"
],
"defaultSeverity": "Major",
"ruleSpecification": "RSPEC-7409",
"sqKey": "S7409",
"scope": "All",
"defaultQualityProfiles": [
"Sonar way"
],
"securityStandards": {
"OWASP Mobile": [
"M1"
],
"OWASP Mobile Top 10 2024": [
"M4",
"M8"
],
"OWASP Top 10 2021": [
"A5"
],
"CWE": [
79
]
},
"quickfix": "partial",
"code": {
"impacts": {
"SECURITY": "MEDIUM"
},
"attribute": "TRUSTWORTHY"
}
}