优化:java添加规则描述信息

wuhaoyang
RenFengJiang 10 months ago
parent 24ccac44f7
commit ac4eee2647
  1. 2
      sonar-keyware-plugins-java/src/main/java/com/keyware/sonar/java/rules/checkers/ABCVarNameChecker.java
  2. 3
      sonar-keyware-plugins-java/src/main/java/com/keyware/sonar/java/rules/checkers/AuthenticationChecker.java
  3. 7
      sonar-keyware-plugins-java/src/main/java/com/keyware/sonar/java/rules/checkers/AvoidSensitiveInfoInLogsCheck.java
  4. 2
      sonar-keyware-plugins-java/src/main/java/com/keyware/sonar/java/rules/checkers/ConfigCheck.java
  5. 2
      sonar-keyware-plugins-java/src/main/java/com/keyware/sonar/java/rules/checkers/ConfigurationFileChecker.java
  6. 6
      sonar-keyware-plugins-java/src/main/java/com/keyware/sonar/java/rules/checkers/CookieSensitiveParameterCheck.java
  7. 7
      sonar-keyware-plugins-java/src/main/java/com/keyware/sonar/java/rules/checkers/DynamicCodeChecker.java
  8. 2
      sonar-keyware-plugins-java/src/main/java/com/keyware/sonar/java/rules/checkers/HashSaltPassWordChecker.java
  9. 2
      sonar-keyware-plugins-java/src/main/java/com/keyware/sonar/java/rules/checkers/HttpInputDataChecker.java
  10. 2
      sonar-keyware-plugins-java/src/main/java/com/keyware/sonar/java/rules/checkers/InputSQLVerifyChecker.java
  11. 2
      sonar-keyware-plugins-java/src/main/java/com/keyware/sonar/java/rules/checkers/Md5PassWordVerifyChecker.java
  12. 2
      sonar-keyware-plugins-java/src/main/java/com/keyware/sonar/java/rules/checkers/RSAEncryptionChecker.java
  13. 2
      sonar-keyware-plugins-java/src/main/java/com/keyware/sonar/java/rules/checkers/SecurityCookieChecker.java
  14. 2
      sonar-keyware-plugins-java/src/main/java/com/keyware/sonar/java/rules/checkers/SendMessageVerifyChecker.java
  15. 2
      sonar-keyware-plugins-java/src/main/java/com/keyware/sonar/java/rules/checkers/SessionDateChecker.java
  16. 2
      sonar-keyware-plugins-java/src/main/java/com/keyware/sonar/java/rules/checkers/UploadFileVerifyChecker.java
  17. 7
      sonar-keyware-plugins-java/src/main/java/com/keyware/sonar/java/rules/checkers/UpperCycleLimitRuleChecker.java

@ -15,7 +15,7 @@ import java.util.Collections;
import java.util.List; import java.util.List;
/** /**
* TODO ABCVarNameChecker * Test
* *
* @author GuoXin * @author GuoXin
* @date 2024/1/6 * @date 2024/1/6

@ -18,8 +18,7 @@ import java.util.*;
/** /**
* TODO 通过用户名口令数据证书等其他手段对用户身份进行验证 * 通过用户名口令数据证书等其他手段对用户身份进行验证
* AuthenticationChecker
* *
* @author WuHaoYang * @author WuHaoYang
* @date 2024/1/23 * @date 2024/1/23

@ -12,7 +12,12 @@ import org.sonar.plugins.java.api.semantic.Symbol;
import org.sonar.plugins.java.api.tree.*; import org.sonar.plugins.java.api.tree.*;
import java.util.*; import java.util.*;
/**
* 日志中包含敏感信息
*
* @author WuHaoYang
* @date 2024/1/23
*/
@Rule(key = "AvoidSensitiveInfoInLogsCheck") @Rule(key = "AvoidSensitiveInfoInLogsCheck")
public class AvoidSensitiveInfoInLogsCheck extends IssuableSubscriptionVisitor { public class AvoidSensitiveInfoInLogsCheck extends IssuableSubscriptionVisitor {

@ -12,7 +12,7 @@ import org.sonar.api.batch.sensor.SensorContext;
import org.sonar.api.rule.RuleKey; import org.sonar.api.rule.RuleKey;
/** /**
* TODO ConfigCheck * ConfigCheck
* *
* @author RenFengJiang * @author RenFengJiang
* @date 2024/1/23 * @date 2024/1/23

@ -29,7 +29,7 @@ import java.util.Scanner;
/** /**
* TODO ConfigurationFileChecker * 禁止在容易受攻击的地方明文存储口令密码
* *
* @author WuHaoYang * @author WuHaoYang
* @date 2024/1/22 * @date 2024/1/22

@ -15,6 +15,12 @@ import org.sonar.plugins.java.api.IssuableSubscriptionVisitor;
import java.util.*; import java.util.*;
/**
* Cookie参数设置中包含敏感字段
*
* @author WuHaoYang
* @date 2024/1/22
*/
@Rule(key = "CookieSensitiveParameterCheck") @Rule(key = "CookieSensitiveParameterCheck")
public class CookieSensitiveParameterCheck extends IssuableSubscriptionVisitor { public class CookieSensitiveParameterCheck extends IssuableSubscriptionVisitor {

@ -16,7 +16,12 @@ import java.util.List;
@Rule(key = "DynamicCodeChecker") @Rule(key = "DynamicCodeChecker")
/**
* 程序设计时禁止动态构建代码进行功能实现
*
* @author renfengshan
* @date 2024/1/22
*/
//检测代码中包含动态代码执行操作时,工具进行提示 //检测代码中包含动态代码执行操作时,工具进行提示
public class DynamicCodeChecker extends IssuableSubscriptionVisitor { public class DynamicCodeChecker extends IssuableSubscriptionVisitor {

@ -19,7 +19,7 @@ import java.util.Collections;
import java.util.List; import java.util.List;
/** /**
* TODO HashSaltPassWordChecker * 应使用盐值计算口令
* *
* @author RenFengJiang * @author RenFengJiang
* @date 2024/1/11 * @date 2024/1/11

@ -20,7 +20,7 @@ import java.util.Collections;
import java.util.List; import java.util.List;
/** /**
* TODO HttpInputDataChecker * HTTP输入数据验证
* *
* @author RenFengJiang * @author RenFengJiang
* @date 2024/1/12 * @date 2024/1/12

@ -18,7 +18,7 @@ import java.util.Collections;
import java.util.List; import java.util.List;
/** /**
* TODO InputSQLVerifyChecker * 使用sql语句前应对其进行验证
* *
* @author RenFengJiang * @author RenFengJiang
* @date 2024/1/14 * @date 2024/1/14

@ -20,7 +20,7 @@ import java.util.List;
import java.util.Locale; import java.util.Locale;
/** /**
* TODO Md5PassWordVerifyChecker * 应使用单向不可逆的加密算法
* *
* @author RenFengJiang * @author RenFengJiang
* @date 2024/1/13 * @date 2024/1/13

@ -17,7 +17,7 @@ import java.util.Collections;
import java.util.List; import java.util.List;
/** /**
* TODO RSAEncryptionChecker * 使用RSA最优加密填充
* *
* @author RenFengJiang * @author RenFengJiang
* @date 2024/1/11 * @date 2024/1/11

@ -14,7 +14,7 @@ import java.util.Collections;
import java.util.List; import java.util.List;
/** /**
* TODO SecurityCookieChecker * 设置HTTPS会话中cookie的安全属性
* *
* @author RenFengJiang * @author RenFengJiang
* @date 2024/1/10 * @date 2024/1/10

@ -22,7 +22,7 @@ import java.util.List;
* 发送信息规则检查 * 发送信息规则检查
* 检测类似发送信息的函数中的参数是否敏感信息如敏感信息的字段 * 检测类似发送信息的函数中的参数是否敏感信息如敏感信息的字段
* 1.获取到方法调用节点 * 1.获取到方法调用节点
* 2. * 2.对获取到的节点进行判断
* *
* @author RenFengJiang * @author RenFengJiang
* @date 2024/1/20 * @date 2024/1/20

@ -21,7 +21,7 @@ import java.util.Map;
import java.util.Scanner; import java.util.Scanner;
/** /**
* TODO SessionDateChecker * 设置会话过期的日期
* *
* @author RenFengJiang * @author RenFengJiang
* @date 2024/1/22 * @date 2024/1/22

@ -14,7 +14,7 @@ import java.util.Collections;
import java.util.List; import java.util.List;
/** /**
* TODO 上传文件检查规则 * 上传文件检查规则
* *
* @author RenFengJiang * @author RenFengJiang
* @date 2024/1/8 * @date 2024/1/8

@ -13,7 +13,12 @@ import org.sonar.plugins.java.api.tree.*;
import java.util.List; import java.util.List;
/**
* 规定循环次数的上限在将用户输入的数据用于循环条件前进行验证用户输入的数据是否超过上限
*
* @author renfengshan
* @date 2024/1/8
*/
@Rule(key = "UpperCycleLimitRuleChecker") @Rule(key = "UpperCycleLimitRuleChecker")
public class UpperCycleLimitRuleChecker extends IssuableSubscriptionVisitor { public class UpperCycleLimitRuleChecker extends IssuableSubscriptionVisitor {
@Override @Override

Loading…
Cancel
Save