Package net.sourceforge.pmd.lang.apex.rule.security
See: Description
-
Class Summary Class Description ApexXSSFromURLParamRule Detects potential XSS when controller extracts a variable from URL query and uses it without escaping first ApexBadCryptoRule Finds encryption schemes using hardcoded IV, hardcoded key ApexXSSFromEscapeFalseRule Finds all . ApexSuggestUsingNamedCredRule Flags usage of http request.setHeader('Authorization',..) and suggests using named credentials which helps store credentials for the callout in a safe place. ApexCRUDViolationRule Finding missed CRUD checks for SOQL and DML operations. ApexDangerousMethodsRule Flags dangerous method calls, e.g. ApexInsecureEndpointRule Insecure HTTP endpoints passed to (req.setEndpoint) req. ApexSharingViolationsRule Finds Apex class that do not define sharing ApexOpenRedirectRule Looking for potential Open redirect via PageReference variable input ApexSOQLInjectionRule Detects if variables in Database.query(variable) or Database.countQuery is escaped with String.