phoedos/pmd
1
1
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update changelog

Browse Source
This commit is contained in:
Juan Martín Sotuyo Dodero
2016-12-14 17:38:11 -03:00
parent 3705ac3368
commit 578df1b37a
1 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
src/site/markdown/overview/changelog.md
View File

@ -136,9 +136,14 @@ public class Foo {
##### ApexDangerousMethods
Checks against calling dangerous methods. For the time being, it only reports against
`FinancialForce`'s `Configuration.disableTriggerCRUDSecurity()`. Disabling CRUD security
Checks against calling dangerous methods.
For the time being, it reports:
* Against `FinancialForce`'s `Configuration.disableTriggerCRUDSecurity()`. Disabling CRUD security
opens the door to several attacks and requires manual validation, which is unreliable.
* Calling `System.debug` passing sensible data as parameter, which could lead to exposure
of private data.
##### ApexInsecureEndpoint
@ -232,4 +237,5 @@ to avoid XSS attacks.
* [#154](https://github.com/pmd/pmd/pull/154): \[java] Fix #1547: UnusedImports: Adjust regex to support underscores
* [#158](https://github.com/pmd/pmd/pull/158): \[apex] Reducing FPs in SOQL with VF getter methods
* [#160](https://github.com/pmd/pmd/pull/160): \[apex] Flagging of dangerous method call
* [#163](https://github.com/pmd/pmd/pull/163): \[apex] Flagging of System.debug