Update metadata for next release (#3396)

SonarSource · Sep 20, 2022 · 633fe55 · 633fe55
1 parent 17a9c51
commit 633fe55
Show file tree

Hide file tree

Showing 12 changed files with 28 additions and 110 deletions.
diff --git a/javascript-checks/src/main/resources/org/sonar/l10n/javascript/rules/javascript/S107.html b/javascript-checks/src/main/resources/org/sonar/l10n/javascript/rules/javascript/S107.html
@@ -13,4 +13,17 @@ <h2>Compliant Solution</h2>
 ...
 }
 </pre>
+<h2>Exceptions</h2>
+<p>The rule ignores constructors where parameters are <strong>all</strong> parameter properties:</p>
+<pre>
+class C {
+  constructor(
+    param1: number,
+    param2: boolean,
+    param3: string,
+    param4: string[],
+    param5: number | string
+  ) {}
+}
+</pre>
 
diff --git a/javascript-checks/src/main/resources/org/sonar/l10n/javascript/rules/javascript/S4423.json b/javascript-checks/src/main/resources/org/sonar/l10n/javascript/rules/javascript/S4423.json
@@ -47,19 +47,9 @@
       "6.2.4"
     ],
     "ASVS 4.0": [
-      "1.9.2",
-      "2.8.3",
-      "2.9.3",
-      "6.2.2",
-      "6.2.3",
-      "6.2.4",
-      "6.2.5",
-      "6.2.6",
-      "6.2.7",
       "8.3.7",
       "9.1.2",
-      "9.1.3",
-      "9.2.1"
+      "9.1.3"
     ]
   },
   "quickfix": "unknown",

diff --git a/javascript-checks/src/main/resources/org/sonar/l10n/javascript/rules/javascript/S4426.json b/javascript-checks/src/main/resources/org/sonar/l10n/javascript/rules/javascript/S4426.json
@@ -35,14 +35,7 @@
       "A2"
     ],
     "ASVS 4.0": [
-      "2.8.3",
-      "6.2.3",
-      "6.2.4",
-      "6.2.5",
-      "6.2.6",
-      "6.2.7",
-      "9.1.2",
-      "9.1.3"
+      "6.2.3"
     ]
   },
   "quickfix": "unknown",

diff --git a/javascript-checks/src/main/resources/org/sonar/l10n/javascript/rules/javascript/S5332.html b/javascript-checks/src/main/resources/org/sonar/l10n/javascript/rules/javascript/S5332.html
@@ -48,7 +48,7 @@ <h2>Recommended Secure Coding Practices</h2>
     </ul>  </li>
   <li> Enable encryption of cloud components communications whenever it’s possible. </li>
   <li> Configure your application to block mixed content when rendering web pages. </li>
-  <li> If available, enforce OS level deativation of all clear-text traffic </li>
+  <li> If available, enforce OS level deactivation of all clear-text traffic </li>
 </ul>
 <p>It is recommended to secure all transport channels (even local network) as it can take a single non secure connection to compromise an entire
 application or system.</p>
@@ -124,5 +124,9 @@ <h2>See</h2>
   <li> <a href="https://cwe.mitre.org/data/definitions/319">MITRE, CWE-319</a> - Cleartext Transmission of Sensitive Information </li>
   <li> <a href="https://security.googleblog.com/2016/09/moving-towards-more-secure-web.html">Google, Moving towards more secure web</a> </li>
   <li> <a href="https://blog.mozilla.org/security/2015/04/30/deprecating-non-secure-http/">Mozilla, Deprecating non secure http</a> </li>
+  <li> <a href="https://docs.aws.amazon.com/elasticloadbalancing/latest/application/load-balancer-listeners.html">AWS Documentation</a> - Listeners
+  for your Application Load Balancers </li>
+  <li> <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesis-stream-streamencryption.html">AWS
+  Documentation</a> - Stream Encryption </li>
 </ul>
 
diff --git a/javascript-checks/src/main/resources/org/sonar/l10n/javascript/rules/javascript/S5542.html b/javascript-checks/src/main/resources/org/sonar/l10n/javascript/rules/javascript/S5542.html
@@ -3,7 +3,7 @@
   <li> For block cipher encryption algorithms (like AES):
     <ul>
       <li> The ECB (Electronic Codebook) cipher mode doesn’t provide serious message confidentiality: under a given key any given plaintext block
-      always gets encrypted to the same ciphertext block. This mode never be used. </li>
+      always gets encrypted to the same ciphertext block. This mode should never be used. </li>
       <li> The CBC (Cipher Block Chaining) mode by itself provides only data confidentiality. This cipher mode is also vulnerable to <a
       href="https://en.wikipedia.org/wiki/Padding_oracle_attack">padding oracle attacks</a> when used with padding. Using CBC along with Message
       Authentication Code can provide data integrity and should prevent such attacks. In practice the implementation has many pitfalls and it’s

diff --git a/javascript-checks/src/main/resources/org/sonar/l10n/javascript/rules/javascript/S5547.json b/javascript-checks/src/main/resources/org/sonar/l10n/javascript/rules/javascript/S5547.json
@@ -46,17 +46,10 @@
       "6.2.4"
     ],
     "ASVS 4.0": [
-      "2.8.3",
-      "2.9.3",
       "6.2.2",
       "6.2.3",
-      "6.2.4",
       "6.2.5",
-      "6.2.6",
-      "6.2.7",
-      "8.3.7",
-      "9.1.2",
-      "9.1.3"
+      "8.3.7"
     ]
   },
   "quickfix": "unknown",

diff --git a/javascript-checks/src/main/resources/org/sonar/l10n/javascript/rules/javascript/S6245.json b/javascript-checks/src/main/resources/org/sonar/l10n/javascript/rules/javascript/S6245.json
@@ -4,9 +4,7 @@
   "status": "ready",
   "tags": [
     "aws",
-    "cwe",
-    "owasp-a6",
-    "owasp-a3"
+    "cwe"
   ],
   "defaultSeverity": "Minor",
   "ruleSpecification": "RSPEC-6245",
@@ -16,27 +14,11 @@
     "CWE": [
       311
     ],
-    "OWASP": [
-      "A3",
-      "A6"
-    ],
-    "CIS": [
-      "2.1.1"
-    ],
-    "OWASP Top 10 2021": [
-      "A4",
-      "A5"
-    ],
     "PCI DSS 3.2": [
       "6.5.3"
     ],
     "PCI DSS 4.0": [
       "6.2.4"
-    ],
-    "ASVS 4.0": [
-      "6.1.1",
-      "6.1.2",
-      "6.1.3"
     ]
   },
   "compatibleLanguages": [

diff --git a/javascript-checks/src/main/resources/org/sonar/l10n/javascript/rules/javascript/S6249.json b/javascript-checks/src/main/resources/org/sonar/l10n/javascript/rules/javascript/S6249.json
@@ -8,9 +8,7 @@
   },
   "tags": [
     "aws",
-    "cwe",
-    "owasp-a6",
-    "owasp-a3"
+    "cwe"
   ],
   "defaultSeverity": "Critical",
   "ruleSpecification": "RSPEC-6249",
@@ -24,25 +22,9 @@
       "4.1",
       "6.5.4"
     ],
-    "OWASP": [
-      "A3",
-      "A6"
-    ],
-    "CIS": [
-      "2.1.12"
-    ],
-    "OWASP Top 10 2021": [
-      "A2",
-      "A5"
-    ],
     "PCI DSS 4.0": [
       "4.2.1",
       "6.2.4"
-    ],
-    "ASVS 4.0": [
-      "1.9.1",
-      "9.1.1",
-      "9.2.2"
     ]
   },
   "compatibleLanguages": [

diff --git a/javascript-checks/src/main/resources/org/sonar/l10n/javascript/rules/javascript/S6252.json b/javascript-checks/src/main/resources/org/sonar/l10n/javascript/rules/javascript/S6252.json
@@ -7,20 +7,13 @@
     "constantCost": "5min"
   },
   "tags": [
-    "aws",
-    "owasp-a6"
+    "aws"
   ],
   "defaultSeverity": "Minor",
   "ruleSpecification": "RSPEC-6252",
   "sqKey": "S6252",
   "scope": "Main",
   "securityStandards": {
-    "OWASP": [
-      "A6"
-    ],
-    "OWASP Top 10 2021": [
-      "A5"
-    ],
     "PCI DSS 3.2": [
       "10.2.7"
     ],

diff --git a/javascript-checks/src/main/resources/org/sonar/l10n/javascript/rules/javascript/S6265.json b/javascript-checks/src/main/resources/org/sonar/l10n/javascript/rules/javascript/S6265.json
@@ -8,8 +8,7 @@
   },
   "tags": [
     "aws",
-    "cwe",
-    "owasp-a5"
+    "cwe"
   ],
   "defaultSeverity": "Blocker",
   "ruleSpecification": "RSPEC-6265",
@@ -20,25 +19,11 @@
       284,
       732
     ],
-    "OWASP": [
-      "A5"
-    ],
-    "CIS": [
-      "3.3"
-    ],
-    "OWASP Top 10 2021": [
-      "A1"
-    ],
     "PCI DSS 3.2": [
       "6.5.8"
     ],
     "PCI DSS 4.0": [
       "6.2.4"
-    ],
-    "ASVS 4.0": [
-      "4.1.1",
-      "4.1.2",
-      "4.3.3"
     ]
   },
   "compatibleLanguages": [

diff --git a/javascript-checks/src/main/resources/org/sonar/l10n/javascript/rules/javascript/S6281.json b/javascript-checks/src/main/resources/org/sonar/l10n/javascript/rules/javascript/S6281.json
@@ -8,9 +8,7 @@
   },
   "tags": [
     "aws",
-    "cwe",
-    "owasp-a6",
-    "owasp-a5"
+    "cwe"
   ],
   "defaultSeverity": "Critical",
   "ruleSpecification": "RSPEC-6281",
@@ -20,26 +18,11 @@
     "CWE": [
       284
     ],
-    "OWASP": [
-      "A6",
-      "A5"
-    ],
-    "CIS": [
-      "3.3"
-    ],
-    "OWASP Top 10 2021": [
-      "A1",
-      "A5"
-    ],
     "PCI DSS 3.2": [
       "6.5.8"
     ],
     "PCI DSS 4.0": [
       "6.2.4"
-    ],
-    "ASVS 4.0": [
-      "4.1.1",
-      "4.1.2"
     ]
   },
   "compatibleLanguages": [

diff --git a/sonarpedia.json b/sonarpedia.json
@@ -3,7 +3,7 @@
   "languages": [
     "JS"
   ],
-  "latest-update": "2022-08-19T12:52:44.342171Z",
+  "latest-update": "2022-09-20T08:41:49.544978Z",
   "options": {
     "no-language-in-filenames": true,
     "preserve-filenames": true