diff --git a/pmd-apex/src/main/resources/rulesets/apex/security.xml b/pmd-apex/src/main/resources/rulesets/apex/security.xml index 8e9d3180a3..bd1fb3f5e0 100644 --- a/pmd-apex/src/main/resources/rulesets/apex/security.xml +++ b/pmd-apex/src/main/resources/rulesets/apex/security.xml @@ -7,10 +7,10 @@ These rules deal with different security problems that can occur within Apex. - + externalInfoUrl="${pmd.website.baseurl}/rules/apex/security.html#ApexSharingViolations"> Avoid Apex classes declared with no explicit sharing mode if DML methods are used. @@ -24,10 +24,10 @@ public class without sharing Foo { - + externalInfoUrl="${pmd.website.baseurl}/rules/apex/security.html#ApexOpenRedirect"> Avoid Apex controllers using PageReference to redirect to an unknown location @@ -45,10 +45,10 @@ public class without sharing Foo { - + externalInfoUrl="${pmd.website.baseurl}/rules/apex/security.html#ApexInsecureEndpoint"> Apex callouts should use encrypted communication channels @@ -65,10 +65,10 @@ public class without sharing Foo { - + externalInfoUrl="${pmd.website.baseurl}/rules/apex/security.html#ApexXSSFromURLParam"> Apex classes should escape/sanitize Strings obtained from URL parameters @@ -84,10 +84,10 @@ public class without sharing Foo { - + externalInfoUrl="${pmd.website.baseurl}/rules/apex/security.html#ApexXSSFromEscapeFalse"> Apex classes should escape Strings in error messages @@ -101,10 +101,10 @@ public class without sharing Foo { - + externalInfoUrl="${pmd.website.baseurl}/rules/apex/security.html#ApexBadCrypto"> Apex classes should use random IV/key @@ -122,10 +122,10 @@ public class without sharing Foo { - + externalInfoUrl="${pmd.website.baseurl}/rules/apex/security.html#ApexCSRF"> Avoid DML actions in Apex class constructor/init method without CSRF protection @@ -145,10 +145,10 @@ public class Foo { - + externalInfoUrl="${pmd.website.baseurl}/rules/apex/security.html#ApexSOQLInjection"> Avoid merging untrusted/unescaped variables in DML operations