Commits

History for

Commits on Feb 17, 2021

Update tests for S3252 and S1942 (#3445)
quentin-jaquier-sonarsource
authored
90184b2
Copy full SHA for 90184b2
SONARJAVA-3649 FP on S1157 (CaseInsensitiveComparisonCheck) when only one side is upper or lower case (#3444)
Sebastian Hungerecker
authored
9297127
Copy full SHA for 9297127
SONARJAVA-3687: S5979 should not report on classes annotated with JUnit5's @Nested (#3441)
dorian-burihabwa-sonarsource
authored
b36302e
Copy full SHA for b36302e

Commits on Feb 16, 2021

Fix quality flaw: replace instanceof in lambdas with method reference ::isInstance (#3442)
margarita-nedzelska-sonarsource
authored
4fddd1b
Copy full SHA for 4fddd1b
SONARJAVA-3678 FP in S5853 when map/flatMap is used
quentin-jaquier-sonarsource
authored
4c5dae1
Copy full SHA for 4c5dae1
SONARJAVA-2929 Rule S2053: Report issues only on PBEKeySpec (#3438)
margarita-nedzelska-sonarsource
authored
cd5c55c
Copy full SHA for cd5c55c
SONARJAVA-3685 FP in S1125 when using null (#3440)
quentin-jaquier-sonarsource
authored
03777b2
Copy full SHA for 03777b2
SONARJAVA-3694 Improve rule S1612 to replace instanceof lambda with method reference (#3435)
margarita-nedzelska-sonarsource
authored
738ae0d
Copy full SHA for 738ae0d
SONARJAVA-3469 FN in S1219 when using blocks

leveretka
authored and
quentin-jaquier-sonarsource
committed
a651086
Copy full SHA for a651086
SONARJAVA-3679 Rule S5693: Allowing requests with excessive content length is security-sensitive (#3430)
quentin-jaquier-sonarsource
authored
25da033
Copy full SHA for 25da033

Commits on Feb 15, 2021

SONARJAVA-3278 S2115: JDBC connection string should not raise when password property is not used (#3434)
dorian-burihabwa-sonarsource
authored
31ffc07
Copy full SHA for 31ffc07
SONARJAVA-2929 Rule S2053: Fix FP with weak hash algorithms

leveretka
authored and
quentin-jaquier-sonarsource
committed
140a11b
Copy full SHA for 140a11b

Commits on Feb 11, 2021

SONARJAVA-3663 Deprecate rule S2976 in favor of S5445

leveretka
authored and
quentin-jaquier-sonarsource
committed
09654c2
Copy full SHA for 09654c2

Commits on Feb 10, 2021

SONARJAVA-3676 Rule S5689: Disclosing fingerprints from web application technologies is security-sensitive (#3426)
margarita-nedzelska-sonarsource
authored
f8130e3
Copy full SHA for f8130e3
SONARJAVA-3677 Rule S5443: Using publicly writable directories is security-sensitive (#3422)
margarita-nedzelska-sonarsource
authored
6152f90
Copy full SHA for 6152f90
SONARJAVA-3683 S4502: Update rule files (#3425)
dorian-burihabwa-sonarsource
authored
109afae
Copy full SHA for 109afae
SONARJAVA-3675 Rule S5332: Using clear-text protocols is security-sensitive

sepp2k
authored and
quentin-jaquier-sonarsource
committed
e72ae05
Copy full SHA for e72ae05

Commits on Feb 9, 2021

SONARJAVA-3686 Deprecate rule S4834 (#3423)
quentin-jaquier-sonarsource
authored
8b46ff0
Copy full SHA for 8b46ff0
SONARJAVA-3462 S4036: Searching OS commands in PATH is security-sensitive (#3417)
dorian-burihabwa-sonarsource
authored
24b8971
Copy full SHA for 24b8971
SONARJAVA-3664 S4738 reports usage of Guava "createTempDir"

leveretka
authored and
quentin-jaquier-sonarsource
committed
03625ea
Copy full SHA for 03625ea
SONARJAVA-3532 S5042 should focus on zipbomb attacks

sepp2k
authored and
quentin-jaquier-sonarsource
committed
61612e2
Copy full SHA for 61612e2
SONARJAVA-3660 S2077 update message for primary and secondary locations (#3416)
margarita-nedzelska-sonarsource
authored
4f11a5d
Copy full SHA for 4f11a5d

Commits on Feb 8, 2021

SONARJAVA-2929 Rule S2053: Hashes should include an unpredictable salt (#3415)
margarita-nedzelska-sonarsource
authored
391c507
Copy full SHA for 391c507
SONARJAVA-3683 S4502: raise an issue when CSRF protection is disabled on a path (#3419)
dorian-burihabwa-sonarsource
authored
858b56d
Copy full SHA for 858b56d
SONARJAVA-3681 Rule S5247: Disabling auto-escaping in template engines is security-sensitive (#3418)
quentin-jaquier-sonarsource
authored
8075153
Copy full SHA for 8075153

Commits on Feb 3, 2021

SONARJAVA-3674 Rule S5659: JWT should be signed and verified with strong cipher algorithms (#3414)
quentin-jaquier-sonarsource
authored
c3ba3c3
Copy full SHA for c3ba3c3

Commits on Jan 29, 2021

SONARJAVA-3672 S1213: Check ordering of class and instance variables (#3409)
dorian-burihabwa-sonarsource
authored
4ee0b44
Copy full SHA for 4ee0b44
SONARJAVA-3680 Update rules metadata
Wohops
committed
05e9d90
Copy full SHA for 05e9d90

Commits on Jan 28, 2021

Remove usage of internal api in main sources (#3411)
Wohops
authored
2bee573
Copy full SHA for 2bee573

Commits on Jan 27, 2021

SONARJAVA-3480 S5917: DateTimeFormatters should not use mismatched year and week numbers (#3400)
dorian-burihabwa-sonarsource
authored
272260e
Copy full SHA for 272260e

Commits on Jan 26, 2021

SONARJAVA-3670 Rule S6126: String multiline concatenation can be replaced with a Text block (#3401)
margarita-nedzelska-sonarsource
authored
dabec55
Copy full SHA for dabec55

Commits on Jan 25, 2021

SONARJAVA-3667 Improve S2479 to support non-indent tabs in Text blocks (#3406)
margarita-nedzelska-sonarsource
authored
d78e694
Copy full SHA for d78e694
SONARJAVA-3662 Improve rule S2142 to check methods called inside catch block (#3405)
Show description for fd9c15c
margarita-nedzelska-sonarsource
authored
fd9c15c
Copy full SHA for fd9c15c
SONARJAVA-3671 Improve rule S1192 to Support Text blocks (#3404)
margarita-nedzelska-sonarsource
authored
f4cf137
Copy full SHA for f4cf137
SONARJAVA-3256 S5664: Whitespace for text block indent should be consistent (#3398)
Sebastian Hungerecker
authored
16e70b7
Copy full SHA for 16e70b7