diff --git a/pmd-apex/src/main/resources/rulesets/apex/security.xml b/pmd-apex/src/main/resources/rulesets/apex/security.xml
index 8e9d3180a3..bd1fb3f5e0 100644
--- a/pmd-apex/src/main/resources/rulesets/apex/security.xml
+++ b/pmd-apex/src/main/resources/rulesets/apex/security.xml
@@ -7,10 +7,10 @@
These rules deal with different security problems that can occur within Apex.
-
+ externalInfoUrl="${pmd.website.baseurl}/rules/apex/security.html#ApexSharingViolations">
Avoid Apex classes declared with no explicit sharing mode if DML methods are used.
@@ -24,10 +24,10 @@ public class without sharing Foo {
-
+ externalInfoUrl="${pmd.website.baseurl}/rules/apex/security.html#ApexOpenRedirect">
Avoid Apex controllers using PageReference to redirect to an unknown location
@@ -45,10 +45,10 @@ public class without sharing Foo {
-
+ externalInfoUrl="${pmd.website.baseurl}/rules/apex/security.html#ApexInsecureEndpoint">
Apex callouts should use encrypted communication channels
@@ -65,10 +65,10 @@ public class without sharing Foo {
-
+ externalInfoUrl="${pmd.website.baseurl}/rules/apex/security.html#ApexXSSFromURLParam">
Apex classes should escape/sanitize Strings obtained from URL parameters
@@ -84,10 +84,10 @@ public class without sharing Foo {
-
+ externalInfoUrl="${pmd.website.baseurl}/rules/apex/security.html#ApexXSSFromEscapeFalse">
Apex classes should escape Strings in error messages
@@ -101,10 +101,10 @@ public class without sharing Foo {
-
+ externalInfoUrl="${pmd.website.baseurl}/rules/apex/security.html#ApexBadCrypto">
Apex classes should use random IV/key
@@ -122,10 +122,10 @@ public class without sharing Foo {
-
+ externalInfoUrl="${pmd.website.baseurl}/rules/apex/security.html#ApexCSRF">
Avoid DML actions in Apex class constructor/init method without CSRF protection
@@ -145,10 +145,10 @@ public class Foo {
-
+ externalInfoUrl="${pmd.website.baseurl}/rules/apex/security.html#ApexSOQLInjection">
Avoid merging untrusted/unescaped variables in DML operations