403 Commits

Author SHA1 Message Date
Clément Fournier
f4f7f4b65d Move nspmd.util.document -> lang.document 2022-03-05 18:05:04 +01:00
Clément Fournier
d41e0d0f32 Merge branch '7.0.x' into pmd7-merge-master 2022-03-05 11:53:55 +01:00
Clément Fournier
9808c743d2 Fix merge 2022-03-03 20:46:01 +01:00
Clément Fournier
1921cd7043 Merge remote-tracking branch 'upstream/pmd/7.0.x' into remove-processing-stages 2022-03-01 21:28:08 +01:00
Clément Fournier
bf91e70c9f Update tests 2022-02-25 19:50:50 +01:00
Andreas Dangel
958be69b19 [visualforce] Use slf4j 2022-02-18 18:00:55 +01:00
Clément Fournier
8cc7c7bbea Merge branch '7.0.x' into analysis-listener 2022-02-07 00:54:47 +01:00
Andreas Dangel
668ed37ffb [visualforce] Fix PMD dogfood issues 2022-02-03 12:59:32 +01:00
Clément Fournier
9ce2213b0e Merge remote-tracking branch 'pmd6/master' into 7.0.x 2022-01-25 22:31:53 +01:00
Vyom Yadav
0f01d4686e [core] Updated DataType.java 2022-01-21 11:23:32 +05:30
Clément Fournier
9d1ec11bbd BAD Merge branch 'text-utils-simple' into text-utils-javacc 2021-12-22 19:24:49 +01:00
Clément Fournier
853278345f merge 2021-12-16 17:53:25 +01:00
Clément Fournier
913d0ab272 Merge branch '7.0.x' into analysis-listener 2021-12-16 16:31:50 +01:00
Andreas Dangel
d192abff5a Merge remote-tracking branch 'adangel/fix-cpd' into pmd7-fix-cpd 2021-09-09 09:56:01 +02:00
Andreas Dangel
bd6c72e0f5 Fix code duplications 2021-09-08 20:11:49 +02:00
Clément Fournier
85fd4fa9f4 Merge branch 'text-utils-simple' into text-utils-javacc 2021-07-08 18:45:55 +02:00
Clément Fournier
4d320fdbb9 Merge branch 'analysis-listener' into text-utils-simple 2021-07-08 16:54:40 +02:00
Clément Fournier
62ca0edb2a Merge branch '7.0.x' into analysis-listener 2021-07-08 15:23:00 +02:00
Andreas Dangel
5fbf9b2921 Merge branch 'master' into pmd/7.0.x 2021-06-10 17:52:32 +02:00
Andreas Dangel
4fb19e2a5e Bump pmd from 6.34.0 to 6.35.0 2021-05-29 09:06:39 +02:00
Clément Fournier
d9a3ef9691 Merge branch 'text-utils-simple' into text-utils-javacc 2021-03-30 03:04:07 +02:00
Clément Fournier
50c00f4f9a Merge branch 'analysis-listener' into text-utils-simple 2021-03-30 02:38:13 +02:00
Clément Fournier
0011b64c35 Merge branch '7.0.x' into analysis-listener 2021-03-29 23:14:29 +02:00
Clément Fournier
268f66f4cd Simplify tests 2021-02-13 21:28:24 +01:00
Clément Fournier
8fb4a082d8 Remove sentinel value 2021-02-13 21:18:47 +01:00
Clément Fournier
5ca13f1bdd Merge branch 'core-parser-tasks' into 7.0.x 2021-02-13 20:51:11 +01:00
Andreas Dangel
cf2b8aca3a Merge branch 'master' into pmd/7.0.x 2021-01-30 12:04:28 +01:00
Joshua Feingold
d88d8ff913 @W-8680425@: Added LINKTO back into the list of inherently safe functions. 2021-01-29 10:02:09 -06:00
Joshua Feingold
a4916f94fc @W-8680425@: Pulled out some repeated code into convenience method. 2021-01-25 16:33:47 -06:00
Joshua Feingold
c14398d19f @W-8680425@: Refactored escape detection in script context. Multiple false positives resolved. 2021-01-25 14:39:25 -06:00
Clément Fournier
e9b1499508 Merge branch 'remove-xml-dom-rule' into core-parser-tasks 2021-01-24 16:42:24 +01:00
Clément Fournier
8af799529d Merge branch '7.0.x' into pmd7-ruleset-loader 2021-01-22 17:11:26 +01:00
Andreas Dangel
b58c52db22 Fix compile errors and tests 2021-01-21 21:30:03 +01:00
Andreas Dangel
5dac4a7795 Merge branch 'master' into pmd/7.0.x 2021-01-21 21:00:42 +01:00
Andreas Dangel
221c9e785e Merge pull request #3005 from rmohan20:removeOnEventEncoding
[vf] [New Rule] Handle XSS violations that can occur within Html Style
tags #3005
2021-01-21 15:07:05 +01:00
Andreas Dangel
dc4cdf696e Fixups for #3005
- ElEscapeDetector is utility class now
- Improved description and example of new rule
2021-01-21 15:01:58 +01:00
Andreas Dangel
f7909ae78a Merge branch 'master' into pr-2963-update 2021-01-21 11:43:01 +01:00
Jeff Bartolotta
15dd8783c7 Convert Pattern to a static final member 2021-01-19 10:28:08 -08:00
Jeff Bartolotta
98acf1de63 Update pmd-visualforce/src/test/java/net/sourceforge/pmd/lang/vf/rule/security/VfHtmlXssStyleTagUrlPatternMatchingTest.java
Co-authored-by: Clément Fournier <clement.fournier76@gmail.com>
2021-01-19 10:11:52 -08:00
rmohan
6a179980be Applying changes from review feedback 2021-01-15 13:40:07 -08:00
rmohan
407aa690d1 parent 7fc3dee95acbb40692f2c115ebe7b0264f377385
author rmohan <rmohan@salesforce.com> 1608240897 -0800
committer rmohan <rmohan@salesforce.com> 1610153787 -0800
gpgsig -----BEGIN PGP SIGNATURE-----

 iQIzBAABCAAdFiEEPykD30Ug+JG+ZQ7x5XWwXqT2VuwFAl/4/zsACgkQ5XWwXqT2
 VuwJoBAAsdl/TU3nculnOPwrCHtaxgtM/4zB+wLdw7f+KtIaGMv5A8v8gMbqh0V+
 OTPV0Q/CTEk4PxA2qD5aCPLOaO9+LHOKjPdkWalttVjINtTVPR2pKo0PKR+f2q77
 79eFkhiB1uNx741ThGIZoWPv8eMKHYP+1BEwndFdByxSA70+gdYkbmZqKLLOOrTE
 2uxuGwnNM02ZYskupvgPW2pZvWFviR2sZt/GbFPkqAwgjf40MxM5+3cujOOV850E
 hLHCcch5G5sh8sHTb9nCyNmc6i1kSw9+OOpOHmJGV4u3DRBBtTE9FdwyEUJ2VliZ
 77VrfRPxwzkAE3jTH7EGCY7kpf84jQMqrGn/gav1LfH4DscPZmF617r9iYZ5fOr6
 Z2Fun4vaCXk0h1CojCOpnh4WAthhiVtvBJmdiyO489/hmbtwWuz7KBkCsEVBS+8E
 ViEaQylIOWjcFXkAq5PQ8fCxIqqMgbI7p5kQL6zatpykteMT5zoJj41t8oyjr5Rz
 RUGXNPxpW3zKq3jw4VsjZ8qNYuoSerTzx0qGuUQIALO97HZ8ZBsxmcDTFJrzAkj7
 yfslzLRIoPlL4ZKdpOgCGzVLBX1D/YCBn9KXQiYEYRh57umIt0wpM/Y/Xkl+/Jr4
 97DYj7GQr1gYavSqe7z5n3aUixyibpWy/wx2K3VN6PmtZ3FEB5I=
 =dqIs
 -----END PGP SIGNATURE-----

Creating new VfHtmlStyleTagXss rule to handle XSS in style tags.
Also, refactoring common code out of VfUnescapeElRule to avoid duplication.
2021-01-08 17:08:46 -08:00
Andreas Dangel
c37f208d3e Call jjtree/javacc with UTF-8 as default encoding
Fixes #2970
2020-12-17 18:31:13 +01:00
rmohan
7fc3dee95a Merging Style tag and HTML XSS checks with typecheck changes for real 2020-12-16 16:22:40 -08:00
rmohan
94a3eb636a Changes to fix apex namespace bug 2020-12-16 14:28:35 -08:00
rmohan
35ee2a534e Redoing HTML Style tag changes on updated Typecheck logic 2020-12-16 13:37:14 -08:00
Clément Fournier
dffabf8924 Fix VF 2020-12-13 08:11:04 +01:00
Clément Fournier
00bee39767 Merge branch 'analysis-listener' into text-utils-simple 2020-12-13 05:38:09 +01:00
Clément Fournier
fe5d1e49f1 Fix tests 2020-12-13 04:17:40 +01:00
Clément Fournier
08227f8b18 Fix vf module 2020-12-13 01:13:53 +01:00
Clément Fournier
2623efbc8a Delete ParserOptions 2020-12-13 00:39:05 +01:00