Skip to content

Commit e8e09f7

Browse files
antonioaversaantonioaversa
committed
SONARXML-212 Update RSPEC before 2.13 release
1 parent 0253a18 commit e8e09f7

File tree

17 files changed

+56
-14
lines changed

17 files changed

+56
-14
lines changed

‎sonar-xml-plugin/src/main/resources/org/sonar/l10n/xml/rules/xml/S1135.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
"type": "CODE_SMELL",
44
"code": {
55
"impacts": {
6-
"MAINTAINABILITY": "LOW"
6+
"MAINTAINABILITY": "INFO"
77
},
88
"attribute": "COMPLETE"
99
},

‎sonar-xml-plugin/src/main/resources/org/sonar/l10n/xml/rules/xml/S5322.html‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -55,6 +55,10 @@ <h2>See</h2>
5555
</li>
5656
<li> OWASP - <a href="https://owasp.org/www-project-mobile-top-10/2016-risks/m1-improper-platform-usage">Mobile Top 10 2016 Category M1 - Improper
5757
Platform Usage</a> </li>
58+
<li> OWASP - <a href="https://owasp.org/www-project-mobile-top-10/2023-risks/m3-insecure-authentication-authorization">Mobile Top 10 2024 Category
59+
M3 - Insecure Authentication/Authorization</a> </li>
60+
<li> OWASP - <a href="https://owasp.org/www-project-mobile-top-10/2023-risks/m4-insufficient-input-output-validation">Mobile Top 10 2024 Category M4
61+
- Insufficient Input/Output Validation</a> </li>
5862
<li> CWE - <a href="https://cwe.mitre.org/data/definitions/925">CWE-925 - Improper Verification of Intent by Broadcast Receiver</a> </li>
5963
<li> CWE - <a href="https://cwe.mitre.org/data/definitions/926">CWE-926 - Improper Export of Android Application Components</a> </li>
6064
<li> <a href="https://developer.android.com/guide/components/broadcasts.html#restricting_broadcasts_with_permissions">Android documentation</a> -

‎sonar-xml-plugin/src/main/resources/org/sonar/l10n/xml/rules/xml/S5322.json‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,10 @@
2424
"OWASP Mobile": [
2525
"M1"
2626
],
27+
"OWASP Mobile Top 10 2024": [
28+
"M3",
29+
"M4"
30+
],
2731
"MASVS": [
2832
"MSTG-PLATFORM-2"
2933
]

‎sonar-xml-plugin/src/main/resources/org/sonar/l10n/xml/rules/xml/S5332.html‎

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -88,10 +88,6 @@ <h3>Standards</h3>
8888
<li> OWASP - <a href="https://owasp.org/www-project-top-ten/2017/A3_2017-Sensitive_Data_Exposure">Top 10 2017 Category A3 - Sensitive Data
8989
Exposure</a> </li>
9090
<li> OWASP - <a href="https://owasp.org/Top10/A02_2021-Cryptographic_Failures/">Top 10 2021 Category A2 - Cryptographic Failures</a> </li>
91-
<li> OWASP - <a href="https://mas.owasp.org/checklists/MASVS-NETWORK/">Mobile AppSec Verification Standard - Network Communication Requirements</a>
92-
</li>
93-
<li> OWASP - <a href="https://owasp.org/www-project-mobile-top-10/2016-risks/m3-insecure-communication">Mobile Top 10 2016 Category M3 - Insecure
94-
Communication</a> </li>
9591
<li> CWE - <a href="https://cwe.mitre.org/data/definitions/200">CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor</a> </li>
9692
<li> CWE - <a href="https://cwe.mitre.org/data/definitions/319">CWE-319 - Cleartext Transmission of Sensitive Information</a> </li>
9793
<li> STIG Viewer - <a href="https://stigviewer.com/stig/application_security_and_development/2023-06-08/finding/V-222397">Application Security and

‎sonar-xml-plugin/src/main/resources/org/sonar/l10n/xml/rules/xml/S5332.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,8 @@
99
},
1010
"status": "ready",
1111
"tags": [
12-
"cwe"
12+
"cwe",
13+
"android"
1314
],
1415
"defaultSeverity": "Critical",
1516
"ruleSpecification": "RSPEC-5332",
@@ -26,6 +27,9 @@
2627
"OWASP Mobile": [
2728
"M3"
2829
],
30+
"OWASP Mobile Top 10 2024": [
31+
"M5"
32+
],
2933
"MASVS": [
3034
"MSTG-NETWORK-1"
3135
],

‎sonar-xml-plugin/src/main/resources/org/sonar/l10n/xml/rules/xml/S5594.html‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,4 @@
1+
<p>This rule is deprecated, and will eventually be removed.</p>
12
<p>Android components that are exported can be used by other applications. This may give access to functionalities that should remain private.</p>
23
<h2>Why is this an issue?</h2>
34
<p>Once an Android component has been exported, it can be used by attackers to launch malicious actions and might also give access to other components
@@ -94,6 +95,8 @@ <h3>Standards</h3>
9495
platform usage</a> </li>
9596
<li> OWASP - <a href="https://owasp.org/www-project-mobile-top-10/2016-risks/m2-insecure-data-storage">Mobile Top 10 2016 Category M2 - Insecure
9697
Data Storage</a> </li>
98+
<li> OWASP - <a href="https://owasp.org/www-project-mobile-top-10/2023-risks/m8-security-misconfiguration">Mobile Top 10 2024 Category M8 - Security
99+
Misconfiguration</a> </li>
97100
<li> CWE - <a href="https://cwe.mitre.org/data/definitions/926">CWE-926 - Improper Export of Android Application Components</a> </li>
98101
</ul>
99102
<h3>External coding guidelines</h3>

‎sonar-xml-plugin/src/main/resources/org/sonar/l10n/xml/rules/xml/S5594.json‎

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@
77
},
88
"attribute": "COMPLETE"
99
},
10-
"status": "ready",
10+
"status": "deprecated",
1111
"remediation": {
1212
"func": "Constant\/Issue",
1313
"constantCost": "10min"
@@ -27,6 +27,9 @@
2727
"OWASP Mobile": [
2828
"M2"
2929
],
30+
"OWASP Mobile Top 10 2024": [
31+
"M8"
32+
],
3033
"MASVS": [
3134
"MSTG-PLATFORM-1"
3235
],

‎sonar-xml-plugin/src/main/resources/org/sonar/l10n/xml/rules/xml/S5604.html‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -30,6 +30,10 @@ <h2>See</h2>
3030
</li>
3131
<li> OWASP - <a href="https://owasp.org/www-project-mobile-top-10/2016-risks/m1-improper-platform-usage">Mobile Top 10 2016 Category M1 - Improper
3232
Platform Usage</a> </li>
33+
<li> OWASP - <a href="https://owasp.org/www-project-mobile-top-10/2023-risks/m6-inadequate-privacy-controls">Mobile Top 10 2024 Category M6 -
34+
Inadequate Privacy Controls</a> </li>
35+
<li> OWASP - <a href="https://owasp.org/www-project-mobile-top-10/2023-risks/m8-security-misconfiguration">Mobile Top 10 2024 Category M8 - Security
36+
Misconfiguration</a> </li>
3337
<li> CWE - <a href="https://cwe.mitre.org/data/definitions/250">CWE-250 - Execution with Unnecessary Privileges</a> </li>
3438
<li> <a href="https://developer.android.com/training/permissions/usage-notes">developer.android.com</a> - App permissions best practices </li>
3539
<li> <a href="https://play.google.com/about/privacy-security-deception/permissions/">Google Play</a> - Privacy, Security, and Deception -

‎sonar-xml-plugin/src/main/resources/org/sonar/l10n/xml/rules/xml/S5604.json‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -28,6 +28,10 @@
2828
"OWASP Mobile": [
2929
"M1"
3030
],
31+
"OWASP Mobile Top 10 2024": [
32+
"M6",
33+
"M8"
34+
],
3135
"MASVS": [
3236
"MSTG-PLATFORM-1"
3337
],

‎sonar-xml-plugin/src/main/resources/org/sonar/l10n/xml/rules/xml/S6358.html‎

Lines changed: 7 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -56,18 +56,20 @@ <h2>Compliant Solution</h2>
5656
</pre>
5757
<h2>See</h2>
5858
<ul>
59+
<li> OWASP - <a href="https://owasp.org/www-project-top-ten/2017/A3_2017-Sensitive_Data_Exposure">Top 10 2017 Category A3 - Sensitive Data
60+
Exposure</a> </li>
61+
<li> OWASP - <a href="https://owasp.org/www-project-top-ten/2017/A6_2017-Security_Misconfiguration">Top 10 2017 Category A6 - Security
62+
Misconfiguration</a> </li>
5963
<li> OWASP - <a href="https://owasp.org/Top10/A01_2021-Broken_Access_Control/">Top 10 2021 Category A1 - Broken Access Control</a> </li>
60-
<li> <a href="https://developer.android.com/guide/topics/data/autobackup">Back up user data with Auto Backup</a> </li>
6164
<li> OWASP - <a href="https://mas.owasp.org/checklists/MASVS-STORAGE/">Mobile AppSec Verification Standard - Data Storage and Privacy
6265
Requirements</a> </li>
6366
<li> OWASP - <a href="https://owasp.org/www-project-mobile-top-10/2016-risks/m1-improper-platform-usage">Mobile Top 10 2016 Category M1 - Improper
6467
platform usage</a> </li>
6568
<li> OWASP - <a href="https://owasp.org/www-project-mobile-top-10/2016-risks/m2-insecure-data-storage">Mobile Top 10 2016 Category M2 - Insecure
6669
Data Storage</a> </li>
67-
<li> OWASP - <a href="https://owasp.org/www-project-top-ten/2017/A3_2017-Sensitive_Data_Exposure">Top 10 2017 Category A3 - Sensitive Data
68-
Exposure</a> </li>
69-
<li> OWASP - <a href="https://owasp.org/www-project-top-ten/2017/A6_2017-Security_Misconfiguration">Top 10 2017 Category A6 - Security
70-
Misconfiguration</a> </li>
70+
<li> OWASP - <a href="https://owasp.org/www-project-mobile-top-10/2023-risks/m9-insecure-data-storage">Mobile Top 10 2024 Category M9 - Insecure
71+
Data Storage</a> </li>
7172
<li> CWE - <a href="https://cwe.mitre.org/data/definitions/312">CWE-922 - Insecure Storage of Sensitive Information</a> </li>
73+
<li> <a href="https://developer.android.com/guide/topics/data/autobackup">Back up user data with Auto Backup</a> </li>
7274
</ul>
7375

0 commit comments

Comments
 (0)