Skip to content

Commit 7bbf5ae

Browse files
SONARJAVA-5952 Update rule metadata
Add missing security standards for some rules and change phrasing for S7409.
1 parent b825c7d commit 7bbf5ae

File tree

5 files changed

+15
-4
lines changed

5 files changed

+15
-4
lines changed

sonar-java-plugin/src/main/resources/org/sonar/l10n/java/rules/java/S1313.json

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -28,6 +28,9 @@
2828
],
2929
"OWASP Top 10 2021": [
3030
"A1"
31+
],
32+
"CWE": [
33+
547
3134
]
3235
},
3336
"quickfix": "unknown"

sonar-java-plugin/src/main/resources/org/sonar/l10n/java/rules/java/S5679.json

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -33,6 +33,9 @@
3333
"PCI DSS 4.0": [
3434
"6.3.3",
3535
"6.2.4"
36+
],
37+
"CWE": [
38+
287
3639
]
3740
},
3841
"quickfix": "unknown"

sonar-java-plugin/src/main/resources/org/sonar/l10n/java/rules/java/S6263.json

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,5 +19,10 @@
1919
"ruleSpecification": "RSPEC-6263",
2020
"sqKey": "S6263",
2121
"scope": "Main",
22-
"quickfix": "unknown"
22+
"quickfix": "unknown",
23+
"securityStandards": {
24+
"CWE": [
25+
798
26+
]
27+
}
2328
}

sonar-java-plugin/src/main/resources/org/sonar/l10n/java/rules/java/S7409.html

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -13,8 +13,8 @@ <h2>Ask Yourself Whether</h2>
1313
<h2>Recommended Secure Coding Practices</h2>
1414
<h3>Disable JavaScript</h3>
1515
<p>If it is possible to disable JavaScript in the WebView, this is the most secure option. By default, JavaScript is disabled in a WebView, so
16-
<code>webSettings.setJavaScriptEnabled(false)</code> does not need to be explicitly called. Of course, sometimes it is necessary to enable JavaScript,
17-
in which case the following recommendations should be considered.</p>
16+
<code>{setJavaScriptEnabledSnippet}</code> does not need to be explicitly called. Of course, sometimes it is necessary to enable JavaScript, in which
17+
case the following recommendations should be considered.</p>
1818
<h3>Remove JavaScript interface when loading untrusted content</h3>
1919
<p>JavaScript interfaces can be removed at a later point. It is recommended to remove the JavaScript interface when it is no longer needed. If it is
2020
needed for a longer time, consider removing it before loading untrusted content. This can be done by calling

sonarpedia.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
"languages": [
44
"JAVA"
55
],
6-
"latest-update": "2025-11-27T16:01:59.765791069Z",
6+
"latest-update": "2026-01-09T13:50:53.757492153Z",
77
"options": {
88
"no-language-in-filenames": true,
99
"preserve-filenames": false

0 commit comments

Comments
 (0)