Commits

Commits on Feb 19, 2021

SONARJAVA-3684 S2755 should not raise an issue when DocumentBuilder … (#3437)
Sebastian Hungerecker
authored
149242d
Copy full SHA for 149242d
SONARJAVA-3698 Extract Check Verifier from "java-frontend" module int… (#3452)
margarita-nedzelska-sonarsource
authored
0347332
Copy full SHA for 0347332
SONARJAVA-3688 FP on S5860(UnusedGroupNamesCheck) for name referenced by dollar curly braces

alban-auzeill
authored and
quentin-jaquier-sonarsource
committed
ee1bfad
Copy full SHA for ee1bfad
SONARJAVA-3648 S2384: Skip assignment checks in enum constructors (#3450)
dorian-burihabwa-sonarsource
authored
ab3b22e
Copy full SHA for ab3b22e

Commits on Feb 18, 2021

SONARJAVA-3679 Report issue with AnalyzerMessage (#3447)
Show description for 5e70f93
quentin-jaquier-sonarsource
authored
5e70f93
Copy full SHA for 5e70f93
SONARJAVA-2929 Rule S2053: Remove FP when salt added via PBEParameterSpec

leveretka
authored and
quentin-jaquier-sonarsource
committed
06240ff
Copy full SHA for 06240ff
SONARJAVA-3692 Extract Symbolic Execution Engine and Checks from "java-frontend" module (#3446)
margarita-nedzelska-sonarsource
authored
45755e0
Copy full SHA for 45755e0

Commits on Feb 17, 2021

Update tests for S3252 and S1942 (#3445)
quentin-jaquier-sonarsource
authored
90184b2
Copy full SHA for 90184b2
SONARJAVA-3649 FP on S1157 (CaseInsensitiveComparisonCheck) when only one side is upper or lower case (#3444)
Sebastian Hungerecker
authored
9297127
Copy full SHA for 9297127
SONARJAVA-3687: S5979 should not report on classes annotated with JUnit5's @Nested (#3441)
dorian-burihabwa-sonarsource
authored
b36302e
Copy full SHA for b36302e

Commits on Feb 16, 2021

Fix quality flaw: replace instanceof in lambdas with method reference ::isInstance (#3442)
margarita-nedzelska-sonarsource
authored
4fddd1b
Copy full SHA for 4fddd1b
SONARJAVA-3678 FP in S5853 when map/flatMap is used
quentin-jaquier-sonarsource
authored
4c5dae1
Copy full SHA for 4c5dae1
SONARJAVA-2929 Rule S2053: Report issues only on PBEKeySpec (#3438)
margarita-nedzelska-sonarsource
authored
cd5c55c
Copy full SHA for cd5c55c
SONARJAVA-3685 FP in S1125 when using null (#3440)
quentin-jaquier-sonarsource
authored
03777b2
Copy full SHA for 03777b2
SONARJAVA-3694 Improve rule S1612 to replace instanceof lambda with method reference (#3435)
margarita-nedzelska-sonarsource
authored
738ae0d
Copy full SHA for 738ae0d
SONARJAVA-3469 FN in S1219 when using blocks

leveretka
authored and
quentin-jaquier-sonarsource
committed
a651086
Copy full SHA for a651086
SONARJAVA-3679 Rule S5693: Allowing requests with excessive content length is security-sensitive (#3430)
quentin-jaquier-sonarsource
authored
25da033
Copy full SHA for 25da033

Commits on Feb 15, 2021

SONARJAVA-3278 S2115: JDBC connection string should not raise when password property is not used (#3434)
dorian-burihabwa-sonarsource
authored
31ffc07
Copy full SHA for 31ffc07
SONARJAVA-2929 Rule S2053: Fix FP with weak hash algorithms

leveretka
authored and
quentin-jaquier-sonarsource
committed
140a11b
Copy full SHA for 140a11b

Commits on Feb 12, 2021

Fix Quality flaw: Add assertion for not throwing any exception. (#3432)
margarita-nedzelska-sonarsource
authored
68ad8fe
Copy full SHA for 68ad8fe

Commits on Feb 11, 2021

SONARJAVA-3676 Fix tests in S5689 (#3431)
quentin-jaquier-sonarsource
authored
5b9b603
Copy full SHA for 5b9b603
Update Copyright year in the footer to 2021

margarita-nedzelska-sonarsource
authored and
quentin-jaquier-sonarsource
committed
71dcf8d
Copy full SHA for 71dcf8d
SONARJAVA-3663 Deprecate rule S2976 in favor of S5445

leveretka
authored and
quentin-jaquier-sonarsource
committed
09654c2
Copy full SHA for 09654c2

Commits on Feb 10, 2021

SONARJAVA-3676 Rule S5689: Disclosing fingerprints from web application technologies is security-sensitive (#3426)
margarita-nedzelska-sonarsource
authored
f8130e3
Copy full SHA for f8130e3
SONARJAVA-3677 Rule S5443: Using publicly writable directories is security-sensitive (#3422)
margarita-nedzelska-sonarsource
authored
6152f90
Copy full SHA for 6152f90
SONARJAVA-3683 S4502: Update rule files (#3425)
dorian-burihabwa-sonarsource
authored
109afae
Copy full SHA for 109afae
SONARJAVA-3675 Rule S5332: Using clear-text protocols is security-sensitive

sepp2k
authored and
quentin-jaquier-sonarsource
committed
e72ae05
Copy full SHA for e72ae05

Commits on Feb 9, 2021

SONARJAVA-3686 Deprecate rule S4834 (#3423)
quentin-jaquier-sonarsource
authored
8b46ff0
Copy full SHA for 8b46ff0
SONARJAVA-3462 S4036: Searching OS commands in PATH is security-sensitive (#3417)
dorian-burihabwa-sonarsource
authored
24b8971
Copy full SHA for 24b8971
SONARJAVA-3664 S4738 reports usage of Guava "createTempDir"

leveretka
authored and
quentin-jaquier-sonarsource
committed
03625ea
Copy full SHA for 03625ea
SONARJAVA-3532 S5042 should focus on zipbomb attacks

sepp2k
authored and
quentin-jaquier-sonarsource
committed
61612e2
Copy full SHA for 61612e2
SONARJAVA-3660 S2077 update message for primary and secondary locations (#3416)
margarita-nedzelska-sonarsource
authored
4f11a5d
Copy full SHA for 4f11a5d

Commits on Feb 8, 2021

SONARJAVA-2929 Rule S2053: Hashes should include an unpredictable salt (#3415)
margarita-nedzelska-sonarsource
authored
391c507
Copy full SHA for 391c507
SONARJAVA-3683 S4502: raise an issue when CSRF protection is disabled on a path (#3419)
dorian-burihabwa-sonarsource
authored
858b56d
Copy full SHA for 858b56d
SONARJAVA-3681 Rule S5247: Disabling auto-escaping in template engines is security-sensitive (#3418)
quentin-jaquier-sonarsource
authored
8075153
Copy full SHA for 8075153