Skip to content

Commit

Permalink
SONARJAVA-4088 Update rules metadata (#3870)
Browse files Browse the repository at this point in the history
  • Loading branch information
quentin-jaquier-sonarsource authored Nov 29, 2021
1 parent ab57ed8 commit d356226
Show file tree
Hide file tree
Showing 5 changed files with 8 additions and 8 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -97,8 +97,8 @@ <h2>Compliant Solution</h2>
// to be compliant, completely disable DOCTYPE declaration:
factory.setFeature("http://apache.org/xml/features/disallow-doctype-decl", true);
// or prohibit the use of all protocols by external entities:
factory.setAttribute(XMLConstants.ACCESS_EXTERNAL_DTD, "");
factory.setAttribute(XMLConstants.ACCESS_EXTERNAL_SCHEMA, "");
factory.setProperty(XMLConstants.ACCESS_EXTERNAL_DTD, "");
factory.setProperty(XMLConstants.ACCESS_EXTERNAL_SCHEMA, "");
</pre>
<p>For <a href="https://dom4j.github.io/">Dom4j</a> library:</p>
<pre>
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -11,5 +11,5 @@
"ruleSpecification": "RSPEC-4454",
"sqKey": "S4454",
"scope": "Main",
"quickfix": "unknown"
"quickfix": "covered"
}
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ <h2>Recommended Secure Coding Practices</h2>
used only for information retrieval. </li>
</ul>
<h2>Sensitive Code Example</h2>
<p><a href="https://docs.spring.io/spring-security/site/docs/current/reference/html5/#servlet-csrf">Spring Security</a> provides by default a
<p><a href="https://docs.spring.io/spring-security/site/docs/5.0.x/reference/html/csrf.html#csrf-using">Spring Security</a> provides by default a
protection against CSRF attacks which can be disabled:</p>
<pre>
@EnableWebSecurity
Expand All @@ -38,8 +38,8 @@ <h2>Sensitive Code Example</h2>
}
</pre>
<h2>Compliant Solution</h2>
<p><a href="https://docs.spring.io/spring-security/site/docs/current/reference/html5/#servlet-csrf">Spring Security</a> CSRF protection is enabled by
default, do not disable it:</p>
<p><a href="https://docs.spring.io/spring-security/site/docs/5.0.x/reference/html/csrf.html#csrf-using">Spring Security</a> CSRF protection is enabled
by default, do not disable it:</p>
<pre>
@EnableWebSecurity
public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -11,5 +11,5 @@
"ruleSpecification": "RSPEC-4682",
"sqKey": "S4682",
"scope": "Main",
"quickfix": "unknown"
"quickfix": "covered"
}
2 changes: 1 addition & 1 deletion sonarpedia.json
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
"languages": [
"JAVA"
],
"latest-update": "2021-11-12T14:11:50.317565Z",
"latest-update": "2021-11-29T09:45:01.091445200Z",
"options": {
"no-language-in-filenames": false,
"preserve-filenames": false
Expand Down

0 comments on commit d356226

Please sign in to comment.