Skip to content

7.9

Choose a tag to compare

@valhristov valhristov released this 26 Nov 16:16
· 5349 commits to master since this release

New C# Rules

  • 1993 - Rule S4792: Configuring loggers is security-sensitive
  • 1992 - Rule S4834: Controlling permissions is security-sensitive
  • 1991 - Rule S4529: Exposing HTTP endpoints is security-sensitive
  • 1990 - Rule S4507: Delivering code in production with debug features activated is security-sensitive
  • 1989 - Rule S4829: Reading the Standard Input is security-sensitive
  • 1988 - Rule S2077: Executing SQL queries is security-sensitive
  • 1987 - Rule S1523: Dynamically executing code is security-sensitive
  • 1986 - Rule S4823: Using command line arguments is security-sensitive
  • 1985 - Rule S4818: Using Sockets is security-sensitive
  • 1984 - Rule S4790: Hashing data is security-sensitive
  • 1983 - Rule S3011: Changing or bypassing accessibility is security-sensitive
  • 1982 - Rule S4825: Sending HTTP requests is security-sensitive
  • 1981 - Rule S4817: Executing XPath expressions is security-sensitive
  • 1980 - Rule S4787: Encrypting data is security-sensitive
  • 1979 - Rule S4797: Handling files is security-sensitive
  • 1978 - Rule S4721: Executing OS commands is security-sensitive
  • 1905 - Rule S4784: Using regular expressions is security-sensitive

New VB.NET Rules

  • 1993 - Rule S4792: Configuring loggers is security-sensitive
  • 1992 - Rule S4834: Controlling permissions is security-sensitive
  • 1991 - Rule S4529: Exposing HTTP endpoints is security-sensitive
  • 1990 - Rule S4507: Delivering code in production with debug features activated is security-sensitive
  • 1989 - Rule S4829: Reading the Standard Input is security-sensitive
  • 1988 - Rule S2077: Executing SQL queries is security-sensitive
  • 1987 - Rule S1523: Dynamically executing code is security-sensitive
  • 1986 - Rule S4823: Using command line arguments is security-sensitive
  • 1985 - Rule S4818: Using Sockets is security-sensitive
  • 1984 - Rule S4790: Hashing data is security-sensitive
  • 1983 - Rule S3011: Changing or bypassing accessibility is security-sensitive
  • 1982 - Rule S4825: Sending HTTP requests is security-sensitive
  • 1981 - Rule S4817: Executing XPath expressions is security-sensitive
  • 1980 - Rule S4787: Encrypting data is security-sensitive
  • 1979 - Rule S4797: Handling files is security-sensitive
  • 1978 - Rule S4721: Executing OS commands is security-sensitive
  • 1905 - Rule S4784: Using regular expressions is security-sensitive
  • 1842 - Rule S2255: Using cookies is security-sensitive

Improvements

  • 2070 - Update S4070: Rule should be in SonarWay
  • 1842 - Update S2255: Update SonarC# implementation to include Cookie reading, implement the rule in SonarVB