Merge pull request #1660 from forcedotcom/release-4.7.0

RELEASE @W-16879137@: Conducting v4.7.0 release

Author: stephen-carter-at-sf

messages/common.md

@@ -4,4 +4,4 @@ Emit additional command output to stdout.
 
 # surveyRequestMessage
 
-We're continually improving Salesforce Code Analyzer. Tell us what you think! Give feedback at https://research.net/r/SalesforceCA
+We're continually improving Salesforce Code Analyzer. Tell us what you think! Give feedback at http://sfdc.co/CodeAnalyzerFeedback

package.json

@@ -1,7 +1,7 @@
 {
 	"name": "@salesforce/sfdx-scanner",
 	"description": "Static code scanner that applies quality and security rules to Apex code, and provides feedback.",
-	"version": "4.6.0",
+	"version": "4.7.0",
 	"author": "Salesforce Code Analyzer Team",
 	"bugs": "https://github.com/forcedotcom/sfdx-scanner/issues",
 	"dependencies": {

pmd-appexchange/docs/AvoidDisableProtocolSecurityInXML.md

@@ -0,0 +1,18 @@
+AvoidDisableProtocolSecurityInXML[](#avoiddisableprotocolsecurityinxml)
+------------------------------------------------------------------------------------------------------------------------------------------------------
+
+**Violation:**
+
+   Protocol security setting is disabled
+
+
+**Priority:** Medium (3)
+
+**Description:**
+
+   Detects if "Disable Protocol Security" setting is checked/true
+
+**Example(s):**
+
+   
+

pmd-appexchange/docs/AvoidInsecureHttpRemoteSiteSettingInXML.md

@@ -0,0 +1,18 @@
+AvoidInsecureHttpRemoteSiteSettingInXML[](#avoidinsecurehttpremotesitesettinginxml)
+------------------------------------------------------------------------------------------------------------------------------------------------------
+
+**Violation:**
+
+   Avoid using insecure http urls in Remote Site Settings.
+
+
+**Priority:** Medium (3)
+
+**Description:**
+
+   Detects instances of a Remote Site Settings that use HTTP.Use HTTPS instead.
+
+**Example(s):**
+
+   
+

pmd-appexchange/docs/AvoidLmcIsExposedTrueInXML.md

@@ -0,0 +1,18 @@
+AvoidLmcIsExposedTrueInXML[](#avoidlmcisexposedtrueinxml)
+------------------------------------------------------------------------------------------------------------------------------------------------------
+
+**Violation:**
+
+   Detected Lightning Message Channel with isExposed set to true.
+
+
+**Priority:** High (2)
+
+**Description:**
+
+   Detects a Lightning Message Channel with isExposed=true,which isn’t allowed in managed packages.
+
+**Example(s):**
+
+   
+