- AIP 8.3.54 - 8.3.55
- AIP 8.3.53 - 8.3.54
- AIP 8.3.52 - 8.3.53
- AIP 8.3.51 - 8.3.52
- AIP 8.3.50 - 8.3.51
- AIP 8.3.49 - 8.3.50
- AIP 8.3.48 - 8.3.49
- AIP 8.3.47 - 8.3.48
- AIP 8.3.46 - 8.3.47
- AIP 8.3.45 - 8.3.46
- AIP 8.3.44 - 8.3.45
- AIP 8.3.43 - 8.3.44
- AIP 8.3.42 - 8.3.43
- AIP 8.3.41 - 8.3.42
- AIP 8.3.40 - 8.3.41
- AIP 8.3.39 - 8.3.40
- AIP 8.3.38 - 8.3.39
- AIP 8.3.37 - 8.3.38
- AIP 8.3.36 - 8.3.37
- AIP 8.3.35 - 8.3.36
- AIP 8.3.34 - 8.3.35
- AIP 8.3.33 - 8.3.34
- AIP 8.3.32 - 8.3.33
- AIP 8.3.31 - 8.3.32
- AIP 8.3.30 - 8.3.31
- AIP 8.3.29 - 8.3.30
- AIP 8.3.28 - 8.3.29
- AIP 8.3.27 - 8.3.28
- AIP 8.3.26 - 8.3.27
- AIP 8.3.25 - 8.3.26
- AIP 8.3.24 - 8.3.25
- AIP 8.3.23 - 8.3.24
- AIP 8.3.22 - 8.3.23
- AIP 8.3.21 - 8.3.22
- AIP 8.3.20 - 8.3.21
- AIP 8.3.19 - 8.3.20
- AIP 8.3.18 - 8.3.19
- AIP 8.3.17 - 8.3.18
- AIP 8.3.16 - 8.3.17
- AIP 8.3.15 - 8.3.16
- AIP 8.3.14 - 8.3.15
- AIP 8.3.13 - 8.3.14
- AIP 8.3.12 - 8.3.13
- AIP 8.3.11 - 8.3.12
- AIP 8.3.10 - 8.3.11
- AIP 8.3.9 - 8.3.10
- AIP 8.3.8 - 8.3.9
- AIP 8.3.7 - 8.3.8
- AIP 8.3.6 - 8.3.7
- AIP 8.3.5 - 8.3.6
- AIP 8.3.4 - 8.3.5
- AIP 8.3.3 - 8.3.4
- AIP 8.3.2 - 8.3.3
- AIP 8.3.1 - 8.3.2
- AIP 8.3.0 - 8.3.1
- AIP 8.2.6 - 8.3.0
AIP 8.3.54 - 8.3.55
No changes.
AIP 8.3.53 - 8.3.54
This section lists the results of a comparison between a CAST AIP 8.3.53 Assessment Model and a CAST AIP 8.3.54 Assessment Model. You can download the original compare_8353_8354.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.53 Assessment Model | Change | CAST 8.3.54 Assessment Model |
7196 | quality-rule | Avoid large number of String concatenation (JEE) | Documentation english | description = ...es should not call more than X times the + Method. \n\n However: \n * This does not... | Updated | description = ...es should resort to using "StringBuilder" or "StringBuffer" instead of "+" or "c... |
7196 | quality-rule | Avoid large number of String concatenation (JEE) | Documentation english | rationale = String concatenation resolved at runtime is much slower than using StringBuffer. | Updated | rationale = Prior to Java 9, the quickest way of concatenating String in Java is by using c... |
7196 | quality-rule | Avoid large number of String concatenation (JEE) | Documentation english | reference = ...ttp://www.precisejava.com/javaperf/j2se/StringAndStringBuffer.htm#Strings104 \nht... | Updated | reference = ...ttp://www.oracle.com/technetwork/java/javase/6u18-142093.html\nhttps://javapapers... |
7196 | quality-rule | Avoid large number of String concatenation (JEE) | Documentation english | remediation = Use StringBuffer and StringBuffer.append() method instead | Updated | remediation = Prior to Java 9, use StringBuffer and StringBuffer.append() method instead |
7196 | quality-rule | Avoid large number of String concatenation (JEE) | Documentation english | sample = String result = "hello";\nresult += " John";\nresult += " Smith"; // VIOLATION if ... | Updated | sample = Sample 1: \nString result = "hello";\nresult += " John";\nresult += " Smith"; // VI... |
7344 | quality-rule | Avoid "SELECT *" queries | Documentation english | description = ...ieves the artifacts containing queries using the "SELECT *" statement. | Updated | description = ...ieves the SQL artifacts containing queries using the "SELECT *" statement. This ... |
AIP 8.3.52 - 8.3.53
No changes.
AIP 8.3.51 - 8.3.52
No changes.
AIP 8.3.50 - 8.3.51
This section lists the results of a comparison between a CAST AIP 8.3.50 Assessment Model and a CAST AIP 8.3.51 Assessment Model. You can download the original compare_8350_8351.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.50 Assessment Model | Change | CAST 8.3.51 Assessment Model |
8022 | quality-rule | Avoid hiding attributes | Parameter #2: Types or sub-classes to exclude | values(JEE) = [org.apache.log4j.Logger, org.apache.commons.logging.Log] | Updated | values(JEE) = [org.apache.logging.log4j.core.Logger, org.apache.log4j.Logger, org.apache.commons.logging.Log, org.apache.logging.log4j.Logger] |
AIP 8.3.49 - 8.3.50
No changes.
AIP 8.3.48 - 8.3.49
No changes.
AIP 8.3.47 - 8.3.48
This section lists the results of a comparison between a CAST AIP 8.3.47 Assessment Model and a CAST AIP 8.3.48 Assessment Model. You can download the original compare_8347_8348.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.47 Assessment Model | Change | CAST 8.3.48 Assessment Model |
4576 | quality-rule | Provide accessors to Private Fields | Diagnosis | scopeID = 559, propertyID = 141004 | Updated | scopeID = 0, propertyID = 0 |
4576 | quality-rule | Provide accessors to Private Fields | Documentation english | description = ...ic fields.\n\n Accessors are identified using the following java bean naming conve... | Updated | description = ...ic fields. \n\n Accessors are identified using the following java bean naming conv... |
4576 | quality-rule | Provide accessors to Private Fields | Documentation english | rationale = ...accessors.\n\nThe only exception is injected fields of classes which are managed b... | Updated | rationale = ...accessors. \n\nThe only exception is injected fields of classes which are managed ... |
4576 | quality-rule | Provide accessors to Private Fields | Diagnosis | diagnosisValueType = integer | Updated | diagnosisValueType = no-value |
4576 | quality-rule | Provide accessors to Private Fields | Operation | localSiteDiagnose = null | Updated | localSiteDiagnose = DIAG_SCOPE_JAVABEST014 |
4576 | quality-rule | Provide accessors to Private Fields | Operation | localSiteCountTotal = null | Updated | localSiteCountTotal = DIAG_JAVA_PRIV_FIELD_TOTAL |
4592 | quality-rule | Avoid hiding static Methods | Diagnosis | scopeID = 557, propertyID = 140910 | Updated | scopeID = 0, propertyID = 0 |
4592 | quality-rule | Avoid hiding static Methods | Documentation english | associatedValueName = Number of violation occurrences | Updated | associatedValueName = Associated Value |
4592 | quality-rule | Avoid hiding static Methods | Documentation english | description = ... allowed. \nThis Quality Rule retrieves all static methods that are redefined in ... | Updated | description = ... allowed. This Quality Rule retrieves all static methods that are redefined in s... |
4592 | quality-rule | Avoid hiding static Methods | Documentation english | output = Associated to each violation, the following information is provided:\n- The numbe... | Updated | output = This report lists all hidden Static Methods. It provides the following informati... |
4592 | quality-rule | Avoid hiding static Methods | Documentation english | rationale = ... stability of the application.\n\nExcept for class derives from “javax.swing.plaf.... | Updated | rationale = ... stability of the application. |
4592 | quality-rule | Avoid hiding static Methods | Documentation english | reference = https://coderanch.com/wiki/659959/Overriding-Hiding\nhttps://coderanch.com/t/3800... | Updated | reference = http://faq.javaranch.com/view?OverridingVsHiding |
4592 | quality-rule | Avoid hiding static Methods | Documentation english | remediation = ...eview the design of the Method.\nSimply not override the static (class) methods. | Updated | remediation = ...eview the design of the Method |
4592 | quality-rule | Avoid hiding static Methods | Documentation english | remediationSample = class Foo {\n public static void classMethod() {\n System.out.println("c... | Removed | Missing |
4592 | quality-rule | Avoid hiding static Methods | Documentation english | sample = class Foo {\n public static void classMethod() {\n System.out.println("c... | Removed | Missing |
4592 | quality-rule | Avoid hiding static Methods | Documentation english | total = Number of methods. | Updated | total = The total procedure counts the number of static methods. |
4592 | quality-rule | Avoid hiding static Methods | Diagnosis | diagnosisValueType = integer | Updated | diagnosisValueType = no-value |
4592 | quality-rule | Avoid hiding static Methods | Operation | localSiteDiagnose = null | Updated | localSiteDiagnose = DIAG_SCOPE_JAVABEST022 |
4592 | quality-rule | Avoid hiding static Methods | Operation | localSiteCountTotal = null | Updated | localSiteCountTotal = DIAG_JAVA_ANA_CLASS_MET_TOTAL |
4594 | quality-rule | Avoid using 'java.io.File' | Documentation english | description = ...on Server to avoid any kind of dependencies with deployment environment of your ... | Updated | description = ...on Server (when web.xml or ejb-jar.xml file are present) |
4594 | quality-rule | Avoid using 'java.io.File' | Documentation english | rationale = ...e the application is deployed.\n\nAlso, a program violates the Enterprise JavaBean... | Updated | rationale = ...e the application is deployed. |
4594 | quality-rule | Avoid using 'java.io.File' | Documentation english | reference = https://cwe.mitre.org/data/definitions/576.html\n\nhttps://cwe.mitre.org/data/defi... | Removed | Missing |
4594 | quality-rule | Avoid using 'java.io.File' | Documentation english | sample = File f = new File(request.getParameter("fileName"))\n\n---------------\n\nFile f = n... | Removed | Missing |
4602 | quality-rule | Avoid using Fields (non static final) from other Classes | Diagnosis | scopeID = 0, propertyID = 0 | Updated | scopeID = 559, propertyID = 140947 |
4602 | quality-rule | Avoid using Fields (non static final) from other Classes | Diagnosis | diagnosisValueType = object | Updated | diagnosisValueType = integer |
4602 | quality-rule | Avoid using Fields (non static final) from other Classes | Operation | localSiteDiagnose = DIAG_SCOPE_JAVABEST027 | Updated | localSiteDiagnose = null |
4602 | quality-rule | Avoid using Fields (non static final) from other Classes | Operation | localSiteCountTotal = DIAG_JAVA_NA_ARTIFACT_TOTAL | Updated | localSiteCountTotal = null |
4700 | quality-rule | DELETED: Avoid using 'Throwable.printStackTrace()' within a try catch block | Diagnosis | scopeID = 558, propertyID = 140899 | Updated | scopeID = 0, propertyID = 0 |
4700 | quality-rule | DELETED: Avoid using 'Throwable.printStackTrace()' within a try catch block | Diagnosis | diagnosisValueType = integer | Updated | diagnosisValueType = no-value |
4700 | quality-rule | DELETED: Avoid using 'Throwable.printStackTrace()' within a try catch block | Operation | localSiteDiagnose = null | Updated | localSiteDiagnose = DIAG_SCOPE_JAVAPERF010 |
4700 | quality-rule | DELETED: Avoid using 'Throwable.printStackTrace()' within a try catch block | Operation | localSiteCountTotal = null | Updated | localSiteCountTotal = DIAG_JAVA_NA_ARTIFACT_TOTAL |
4702 | quality-rule | Avoid using 'Throwable.printStackTrace()' outside a try catch block | Diagnosis | scopeID = 558, propertyID = 140899 | Updated | scopeID = 0, propertyID = 0 |
4702 | quality-rule | Avoid using 'Throwable.printStackTrace()' outside a try catch block | Documentation english | associatedValueName = Number of violation occurrences | Updated | associatedValueName = Associated Value |
4702 | quality-rule | Avoid using 'Throwable.printStackTrace()' outside a try catch block | Documentation english | description = Throwable.printStackTrace(...) prints a Throwable and its stack trace to some st... | Updated | description = 'Throwable.printStackTrace()' should not be used outside a try catch block. |
4702 | quality-rule | Avoid using 'Throwable.printStackTrace()' outside a try catch block | Documentation english | name = ...kTrace()' with no argument | Updated | name = ...kTrace()' outside a try catch block |
4702 | quality-rule | Avoid using 'Throwable.printStackTrace()' outside a try catch block | Documentation english | output = Associated to each violation, the following information is provided:\n- The numbe... | Updated | output = This report lists all Java artifacts using 'Throwable.printStackTrace()' outside... |
4702 | quality-rule | Avoid using 'Throwable.printStackTrace()' outside a try catch block | Documentation english | rationale = ...kTrace()' usually means that it is used to log the stack of errors, which has th... | Updated | rationale = ...kTrace()' outside a catch block usually means that it is used to log the stack o... |
4702 | quality-rule | Avoid using 'Throwable.printStackTrace()' outside a try catch block | Documentation english | reference = http://cwe.mitre.org/data/definitions/489.html\nOWASP Top 10 2017 Category A3 - S... | Removed | Missing |
4702 | quality-rule | Avoid using 'Throwable.printStackTrace()' outside a try catch block | Documentation english | remediation = Loggers should be used instead to print Throwables, as they have many advantages... | Removed | Missing |
4702 | quality-rule | Avoid using 'Throwable.printStackTrace()' outside a try catch block | Documentation english | sample = public static void main(String[] args){\n try {\n test();\n } catch (U... | Removed | Missing |
4702 | quality-rule | Avoid using 'Throwable.printStackTrace()' outside a try catch block | Diagnosis | diagnosisValueType = integer | Updated | diagnosisValueType = no-value |
4702 | quality-rule | Avoid using 'Throwable.printStackTrace()' outside a try catch block | Operation | localSiteDiagnose = null | Updated | localSiteDiagnose = DIAG_SCOPE_JAVAPERF011 |
4702 | quality-rule | Avoid using 'Throwable.printStackTrace()' outside a try catch block | Operation | localSiteCountTotal = null | Updated | localSiteCountTotal = DIAG_JAVA_NA_ARTIFACT_TOTAL |
7200 | quality-rule | Avoid String concatenation in loops (JEE) | Diagnosis | scopeID = 1022002, propertyID = 140948 | Updated | scopeID = 0, propertyID = 0 |
7200 | quality-rule | Avoid String concatenation in loops (JEE) | Documentation english | description = ...reported.\n \n Note that the JVM is optimizing code such as System.out.println("... | Updated | description = ...reported.\n\nNote that the JVM is optimizing code such as System.out.println("x:"+... |
7200 | quality-rule | Avoid String concatenation in loops (JEE) | Documentation english | output = ...in loops.\n It provides the following information:\n Method full name | Updated | output = ...in loops.\nIt provides the following information:\n Method full name |
7200 | quality-rule | Avoid String concatenation in loops (JEE) | Documentation english | remediationSample = ..."hello");\n for (int i = 0; i < 1500; i++) {\n result.append("hello"); // FI... | Updated | remediationSample = ..."hello");\nfor (int i = 0; i < 1500; i++) {\n result.append("hello"); // FIXED\n... |
7200 | quality-rule | Avoid String concatenation in loops (JEE) | Documentation english | sample = ... "hello";\n for (int i = 0; i < 1500; i++) {\n result += "hello"; // VIOLATI... | Updated | sample = ... "hello";\nfor (int i = 0; i < 1500; i++) {\n result += "hello"; // VIOLATION\n} |
7200 | quality-rule | Avoid String concatenation in loops (JEE) | Diagnosis | diagnosisValueType = integer | Updated | diagnosisValueType = no-value |
7200 | quality-rule | Avoid String concatenation in loops (JEE) | Operation | localSiteDiagnose = null | Updated | localSiteDiagnose = DIAG_SCOPE_JAVAEMEM002 |
7200 | quality-rule | Avoid String concatenation in loops (JEE) | Operation | localSiteCountTotal = null | Updated | localSiteCountTotal = DIAG_JAVA_NA_ARTIFACT_TOTAL |
7202 | quality-rule | Check usage of '==' and '!=' on objects | Diagnosis | scopeID = 1022004, propertyID = 140955 | Updated | scopeID = 0, propertyID = 0 |
7202 | quality-rule | Check usage of '==' and '!=' on objects | Diagnosis | diagnosisValueType = integer | Updated | diagnosisValueType = no-value |
7202 | quality-rule | Check usage of '==' and '!=' on objects | Operation | localSiteDiagnose = null | Updated | localSiteDiagnose = DIAG_SCOPE_JAVAEMEM003 |
7202 | quality-rule | Check usage of '==' and '!=' on objects | Operation | localSiteCountTotal = null | Updated | localSiteCountTotal = DIAG_JAVA_NA_METH_CTOR_TOTAL |
7210 | quality-rule | Avoid instantiations inside loops | Documentation english | rationale = ...iples is to Avoid excessive object creation. This doesn't mean that you should g... | Updated | rationale = ...iples is this: Avoid excessive object creation. This doesn't mean that you shoul... |
7210 | quality-rule | Avoid instantiations inside loops | Documentation english | total = Number of non abstract Java Artifacts | Updated | total = Total number of methods and constructors |
7442 | quality-rule | Avoid to use this within Constructor in multi-thread environment | Documentation english | description = This rule detects all cases where this is - directly or not - referenced in a co... | Updated | description = This metric will detect all cases where this is - directly or not - referenced i... |
7442 | quality-rule | Avoid to use this within Constructor in multi-thread environment | Documentation english | total = Number of constructors | Updated | total = the total procedure counts all constructors |
7446 | quality-rule | Avoid double checked locking | Documentation english | associatedValueName = Number of violation occurrences | Updated | associatedValueName = Associated Value |
7446 | quality-rule | Avoid double checked locking | Documentation english | description = Double checked locking is a software design pattern used to reduce locking overh... | Updated | description = For JSE 4.x and previous version, all methods that are not synchronized and that... |
7446 | quality-rule | Avoid double checked locking | Documentation english | name = Avoid double checked locking for JSE 4.x and previous version | Updated | name = Avoid double checked locking |
7446 | quality-rule | Avoid double checked locking | Documentation english | output = Associated to each violation, the following information is provided:\n- The numbe... | Updated | output = This report lists all Methods that use double checked locking pattern.\nIt provid... |
7446 | quality-rule | Avoid double checked locking | Documentation english | rationale = Double-checked locking refers to the situation where a programmer checks to see ... | Updated | rationale = Double checked locking is a software design pattern used to reduce locking overh... |
7446 | quality-rule | Avoid double checked locking | Documentation english | reference = https://cwe.mitre.org/data/definitions/609.html\nhttp://www.cs.umd.edu/~pugh/java... | Updated | reference = http://www.cs.umd.edu/~pugh/java/memoryModel/DoubleCheckedLocking.html\nhttp://ww... |
7446 | quality-rule | Avoid double checked locking | Documentation english | total = Number of methods that are synchronized or use the synchronized keyword | Updated | total = The total will be the total of methods that are synchronized or use the synchron... |
7446 | quality-rule | Avoid double checked locking | Diagnosis | diagnosisValueType = integer | Updated | diagnosisValueType = no-value |
7492 | quality-rule | Avoid many-to-many association | Diagnosis | scopeID = 1022005, propertyID = 140999 | Updated | scopeID = 0, propertyID = 0 |
7492 | quality-rule | Avoid many-to-many association | Documentation english | description = This rule reports all Hibernate or JPA Entities that use many-to-many associatio... | Updated | description = Reports all Hibernate or JPA Entities that use many-to-many association. |
7492 | quality-rule | Avoid many-to-many association | Documentation english | name = Avoid Hibernate and JPA Entities using many-to-many association. | Updated | name = Avoid many-to-many association |
7492 | quality-rule | Avoid many-to-many association | Operation | localSiteDiagnose = null | Updated | localSiteDiagnose = DIAG_SCOPE_JEEAHML001 |
7492 | quality-rule | Avoid many-to-many association | Operation | localSiteCountViolations = count | Updated | localSiteCountViolations = count-distinct |
7492 | quality-rule | Avoid many-to-many association | Operation | localSiteCountTotal = null | Updated | localSiteCountTotal = DIAG_JEE_HIBE_ASSO_TOTAL |
7504 | quality-rule | Persistent classes should Implement hashCode() and equals() | Diagnosis | scopeID = 532, propertyID = 140963 | Updated | scopeID = 0, propertyID = 0 |
7504 | quality-rule | Persistent classes should Implement hashCode() and equals() | Documentation english | reference = ...tive-java-equals-and-hashcode/\n\nhttps://projectlombok.org/features/EqualsAndHash... | Updated | reference = ...tive-java-equals-and-hashcode/ |
7504 | quality-rule | Persistent classes should Implement hashCode() and equals() | Documentation english | remediation = ...the case. \nIf it is not the case, we recommend implementing it anyway to avoid i... | Updated | remediation = ...the case. If it is not the case, we recommend implementing it anyway to avoid is... |
7504 | quality-rule | Persistent classes should Implement hashCode() and equals() | Documentation english | remediationSample = ... hashCode() {\n ...\n }\n}\n\n// Use lombock annotation @EqualsAndHashCode;\n--... | Updated | remediationSample = ... hashCode() {\n ...\n }\n} |
7504 | quality-rule | Persistent classes should Implement hashCode() and equals() | Diagnosis | diagnosisValueType = integer | Updated | diagnosisValueType = no-value |
7504 | quality-rule | Persistent classes should Implement hashCode() and equals() | Operation | localSiteDiagnose = null | Updated | localSiteDiagnose = DIAG_SCOPE_JEEUB002 |
7504 | quality-rule | Persistent classes should Implement hashCode() and equals() | Operation | localSiteCountTotal = null | Updated | localSiteCountTotal = DIAG_JEE_PERSISTCLS_TOTAL |
7652 | quality-rule | Avoid throwing an exception in a catch block without chaining it | Diagnosis | scopeID = 1022003, propertyID = 140954 | Updated | scopeID = 0, propertyID = 0 |
7652 | quality-rule | Avoid throwing an exception in a catch block without chaining it | Diagnosis | diagnosisValueType = integer | Updated | diagnosisValueType = no-value |
7652 | quality-rule | Avoid throwing an exception in a catch block without chaining it | Operation | localSiteDiagnose = null | Updated | localSiteDiagnose = DIAG_SCOPE_JAVAPPEE002 |
7652 | quality-rule | Avoid throwing an exception in a catch block without chaining it | Operation | localSiteCountTotal = null | Updated | localSiteCountTotal = DIAG_JAVA_CTORCATCH_TOTAL |
7706 | quality-rule | Avoid table and column names that are too long (portability) | Diagnosis | scopeID = 1022001, propertyID = 140927 | Updated | scopeID = 0, propertyID = 0 |
7706 | quality-rule | Avoid table and column names that are too long (portability) | Diagnosis | diagnosisValueType = integer | Updated | diagnosisValueType = no-value |
7706 | quality-rule | Avoid table and column names that are too long (portability) | Operation | localSiteDiagnose = null | Updated | localSiteDiagnose = DIAG_SCOPE_JEEAOPI002 |
7706 | quality-rule | Avoid table and column names that are too long (portability) | Operation | localSiteCountTotal = null | Updated | localSiteCountTotal = DIAG_JEE_ENTPRPS_TOTAL |
7714 | quality-rule | Do not use auto-wiring | Diagnosis | scopeID = 529, propertyID = 140919 | Updated | scopeID = 0, propertyID = 0 |
7714 | quality-rule | Do not use auto-wiring | Documentation english | reference = https://blog.marcnuri.com/field-injection-is-not-recommended/\nhttps://howtodoinj... | Updated | reference = http://www.onjava.com/pub/a/onjava/2006/01/25/spring-xml-configuration-best-prac... |
7714 | quality-rule | Do not use auto-wiring | Documentation english | remediationSample = ...yBean"/> // FIXED\n...\n</beans>\n\n@Service\npublic class ModuleManagementService {\n... | Updated | remediationSample = ...yBean"/> // FIXED\n...\n</beans> |
7714 | quality-rule | Do not use auto-wiring | Documentation english | sample = ...n"/> // VIOLATION\n...\n</beans>\n\n\n\nimport org.springframework.stereotype.Componen... | Updated | sample = ...n"/> // VIOLATION\n...\n</beans> |
7714 | quality-rule | Do not use auto-wiring | Documentation english | total = Number of Spring bean | Updated | total = The total number of Spring bean, 0 if Spring is not used |
7714 | quality-rule | Do not use auto-wiring | Diagnosis | diagnosisValueType = integer | Updated | diagnosisValueType = no-value |
7714 | quality-rule | Do not use auto-wiring | Operation | localSiteDiagnose = null | Updated | localSiteDiagnose = DIAG_SCOPE_JEEARUSE004 |
7714 | quality-rule | Do not use auto-wiring | Operation | localSiteCountTotal = null | Updated | localSiteCountTotal = DIAG_JEE_SPRINGBEAN_TOTAL |
7730 | quality-rule | Use declarative transaction | Diagnosis | scopeID = 531, propertyID = 140920 | Updated | scopeID = 0, propertyID = 0 |
7730 | quality-rule | Use declarative transaction | Documentation english | description = The Bean Provider can choose between using programmatic transaction demarcation ... | Updated | description = When EJB Session and/or Message Driven Beans exist, this Quality Rule reports al... |
7730 | quality-rule | Use declarative transaction | Documentation english | remediationSample = use container-managed transaction demarcation (@Transactional Annotation or Conf... | Removed | Missing |
7730 | quality-rule | Use declarative transaction | Documentation english | sample = programmatic transaction demarcation:\nsample 1:\n@Stateless\n@TransactionManagemen... | Removed | Missing |
7730 | quality-rule | Use declarative transaction | Documentation english | total = Number of Java Methods and Constructors (including generic methods and generic c... | Updated | total = The number of Java Methods and Constructors when EJB Session and/or EJB Message ... |
7730 | quality-rule | Use declarative transaction | Diagnosis | diagnosisValueType = integer | Updated | diagnosisValueType = no-value |
7730 | quality-rule | Use declarative transaction | Operation | localSiteDiagnose = null | Updated | localSiteDiagnose = DIAG_SCOPE_JAVAPPUB004 |
7730 | quality-rule | Use declarative transaction | Operation | localSiteCountTotal = null | Updated | localSiteCountTotal = DIAG_JEE_METBEAN_TOTAL |
8214 | quality-rule | CWE-672: Expired or Released Resource should not be used | Documentation english | associatedValueName = Number of violation occurrences | Updated | associatedValueName = Associated Value |
8214 | quality-rule | CWE-672: Expired or Released Resource should not be used | Documentation english | description = ...methods accessing the closed SQL connections or data streams which are not valid... | Updated | description = ...methods acessing the closed SQL connections or data streams which are not valid.... |
8214 | quality-rule | CWE-672: Expired or Released Resource should not be used | Documentation english | name = Expired or Released Resource should not be used | Updated | name = CWE-672: Expired or Released Resource should not be used |
8214 | quality-rule | CWE-672: Expired or Released Resource should not be used | Documentation english | output = Associated to each violation, the following information is provided:\n- The numbe... | Updated | output = This report lists all methods that access the closed SQL connections or data str... |
8214 | quality-rule | CWE-672: Expired or Released Resource should not be used | Documentation english | rationale = When a resource is released it might not be in an expected state, later attempts... | Updated | rationale = This mainly comes from an incorrect code that by mistake access the invalid reso... |
8214 | quality-rule | CWE-672: Expired or Released Resource should not be used | Documentation english | reference = ....org/data/definitions/672.html\nASCSM-CWE-672: Expired or Released Resource Usage | Updated | reference = ....org/data/definitions/672.html |
8214 | quality-rule | CWE-672: Expired or Released Resource should not be used | Documentation english | remediation = ...should be called before closing the application. | Updated | remediation = ...should be always before closing the application. |
8214 | quality-rule | CWE-672: Expired or Released Resource should not be used | Documentation english | remediationSample = ...sing a connection");\n connection.close();\n} | Updated | remediationSample = ...sing a conection");\n connection.close();\n} |
8214 | quality-rule | CWE-672: Expired or Released Resource should not be used | Documentation english | sample = ...sing a connection");\n connection.close();\n\n connection.prepareStatemen... | Updated | sample = ...sing a conection");\n connection.close();\n System.out.println("Connecti... |
8214 | quality-rule | CWE-672: Expired or Released Resource should not be used | Documentation english | total = ...hods that have invalid access to the database resource in the body | Updated | total = ...hods that open a database resource in the body |
8216 | quality-rule | CWE-681: Avoid numerical data corruption during incompatible mutation | Documentation english | associatedValueName = Number of violation occurrences | Updated | associatedValueName = Associated Value |
8216 | quality-rule | CWE-681: Avoid numerical data corruption during incompatible mutation | Documentation english | description = This rule reports all incorrect numeric type conversions which may produce unexp... | Updated | description = Reports all incorrect numeric type conversions which may produce unexpected resu... |
8216 | quality-rule | CWE-681: Avoid numerical data corruption during incompatible mutation | Documentation english | name = Avoid using incompatible mutation | Updated | name = CWE-681: Avoid numerical data corruption during incompatible mutation |
8216 | quality-rule | CWE-681: Avoid numerical data corruption during incompatible mutation | Documentation english | output = Associated to each violation, the following information is provided:\n- The numbe... | Updated | output = Reports all incorrect numeric type conversions which may produce unexpected resu... |
8216 | quality-rule | CWE-681: Avoid numerical data corruption during incompatible mutation | Documentation english | total = Number of Java artifacts that can reference an incompatible mutation which inclu... | Updated | total = All artifacts that reference a incompatible mutation |
1020950 | quality-rule | Avoid providing password in Web Service URL | Quality Contribution to 'Secure Coding - API Abuse' (66063) | critical = true, weight = 7 | Removed | Missing contribution |
1022000 | quality-rule | Avoid using weak encryption algorithm as DES and triple DES | Quality Contribution to 'Secure Coding - Weak Security Features' (66064) | critical = true, weight = 9 | Removed | Missing contribution |
1022002 | quality-rule | Avoid using RSA Cryptographic algorithms without OAEP (Optimal Asymmetric Encryption Padding) | Quality Contribution to 'Secure Coding - Weak Security Features' (66064) | critical = true, weight = 9 | Removed | Missing contribution |
1020950 | quality-rule | Avoid providing password in Web Service URL | Definition | active = true, detached = false | Removed | Missing |
1022000 | quality-rule | Avoid using weak encryption algorithm as DES and triple DES | Definition | active = true, detached = false | Removed | Missing |
1022002 | quality-rule | Avoid using RSA Cryptographic algorithms without OAEP (Optimal Asymmetric Encryption Padding) | Definition | active = true, detached = false | Removed | Missing |
AIP 8.3.46 - 8.3.47
No changes.
AIP 8.3.45 - 8.3.46
This section lists the results of a comparison between a CAST AIP 8.3.45 Assessment Model and a CAST AIP 8.3.46 Assessment Model. You can download the original compare_8345_8346.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.45 Assessment Model | Change | CAST 8.3.46 Assessment Model |
7934 | quality-rule | Avoid Superclass (or Interface) knowing Subclass (or Interface) | Technologies | [ABAP, C#, VB.NET, JEE, .NET (Legacy Analyzer)] | Updated | Added: [C++] |
AIP 8.3.44 - 8.3.45
This section lists the results of a comparison between a CAST AIP 8.3.44 Assessment Model and a CAST AIP 8.3.45 Assessment Model. You can download the original compare_8344_8345.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.44 Assessment Model | Change | CAST 8.3.45 Assessment Model |
60015 | business-criterion | SEI Maintainability | Definition | active = true, detached = false | Removed | Missing |
61016 | technical-criterion | Maintainability Indexes (SEI) | Activation | active = true, detached = false | Updated | active = false |
62003 | quality-measure | SEI Maintainability Index 3 | Activation | active = true, detached = false | Updated | active = false |
62004 | quality-measure | SEI Maintainability Index 4 | Activation | active = true, detached = false | Updated | active = false |
AIP 8.3.43 - 8.3.44
This section lists the results of a comparison between a CAST AIP 8.3.43 Assessment Model and a CAST AIP 8.3.44 Assessment Model. You can download the original compare_8343_8344.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.43 Assessment Model | Change | CAST 8.3.44 Assessment Model |
1020950 | quality-rule | Avoid providing password in Web Service URL | Quality Contribution to 'Secure Coding - API Abuse' (66063) | Missing contribution | Added | critical = true, weight = 7 |
1020950 | quality-rule | Avoid providing password in Web Service URL | Quality Contribution to 'Secure Coding - Encapsulation' (66066) | critical = true, weight = 7 | Removed | Missing contribution |
1020950 | quality-rule | Avoid providing password in Web Service URL | Thresholds | [50.0, 90.0, 95.0, 99.0] | Updated | [98.0, 99.0, 99.5, 99.99] |
1020950 | quality-rule | Avoid providing password in Web Service URL | Documentation english | total = Number of url resources | Updated | total = Number of GET url resources |
AIP 8.3.42 - 8.3.43
This section lists the results of a comparison between a CAST AIP 8.3.42 Assessment Model and a CAST AIP 8.3.43 Assessment Model. You can download the original compare_8342_8343.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.42 Assessment Model | Change | CAST 8.3.43 Assessment Model |
7296 | quality-rule | Never define static variables in header files | Documentation english | description = ..., are outside any class scope. | Updated | description = ..., are outside any class scope.\n- This applies even if the header file is not ref... |
8550 | quality-rule | Avoid using ABAP command GENERATE SUBROUTINE POOL | Quality Contribution to 'Programming Practices - Structuredness' (61024) | critical = false, weight = 5 | Updated | critical = true |
AIP 8.3.41 - 8.3.42
This section lists the results of a comparison between a CAST AIP 8.3.41 Assessment Model and a CAST AIP 8.3.42 Assessment Model. You can download the original compare_8341_8342.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.41 Assessment Model | Change | CAST 8.3.42 Assessment Model |
2616 | quality-rule | Avoid undocumented Forms | Documentation english | description = Forms should be documented | Updated | description = This reports lists all Forms that have neither heading comments nor inline comme... |
2616 | quality-rule | Avoid undocumented Forms | Documentation english | total = Number of forms | Updated | total = Number of Forms |
2616 | quality-rule | Avoid undocumented Forms | Documentation english | Missing | Added | rationale = Maintainability of the code is facilitated if there is documentation in the code... |
2616 | quality-rule | Avoid undocumented Forms | Documentation english | Missing | Added | reference = https://cwe.mitre.org/data/definitions/1053.html |
2616 | quality-rule | Avoid undocumented Forms | Documentation english | Missing | Added | remediation = Add comments into the Form to explain what is its goal and how it works. |
7126 | quality-rule | Avoid Artifacts with high Commented-out Code Lines/Code Lines ratio | Documentation english | description = ... artifact.\n\nPlease note that unless the following criteria are met by the source... | Updated | description = ... artifact. \n\nPlease note that the number of Commented-out Code Lines is measured... |
7740 | quality-rule | Avoid HTTP response splitting | Documentation english | remediationSample = .../Sample 1\n// A possibility is to sanitize the rawInputData variable\nimport org.o... | Updated | remediationSample = .../Sample 1\nimport org.owasp.esapi.Encoder;\nString rawInputData = request.getParam... |
7740 | quality-rule | Avoid HTTP response splitting | Documentation english | sample = .../Sample 1\nresponse.addHeader(HEADER_NAME, rawInputData);\n\n//Sample 2\nString head... | Updated | sample = .../Sample 1\nString rawInputData = request.getParameter(INPUT);\nresponse.addHeader(... |
7748 | quality-rule | Avoid OS command injection | Documentation english | remediationSample = ...inates)\n{\nString utmCoords = null;\ntry {\nString latlonCoords = coordinates;\nRunt... | Updated | remediationSample = ...inates)\n{\n String utmCoords = null;\n try {\n String latlonCoords = coordinat... |
7748 | quality-rule | Avoid OS command injection | Documentation english | sample = ...inates)\n{\nString utmCoords = null;\ntry {\nString latlonCoords = coordinates;\nRunt... | Updated | sample = ...inates)\n{\n String utmCoords = null;\n try {\n String latlonCoords = coordinat... |
7782 | quality-rule | Avoid empty finally blocks | Documentation english | Missing | Added | reference = https://cwe.mitre.org/data/definitions/1069.html |
7782 | quality-rule | Avoid empty finally blocks | Documentation english | Missing | Added | remediation = Add code to the finally block, especially the release of resources used in the t... |
7792 | quality-rule | Avoid Classes with a High Number Of Children | Documentation english | associatedValueName = ...umber of classes | Updated | associatedValueName = ...umber of children |
7882 | quality-rule | Avoid using Native SQL | Documentation english | Missing | Added | reference = https://blogs.sap.com/2013/11/20/how-to-protect-your-abap-code-against-sql-injec... |
8028 | quality-rule | Avoid missing default in switch statements | Documentation english | reference = CISQ rule: ASCMM-MNT-1. | Updated | reference = CISQ rule: ASCMM-MNT-1.\n\nMISRA C++ 2008, 6-4-3: A switch statement shall be a we... |
8032 | quality-rule | Avoid using break statement in FOR loops | Documentation english | name = ...oid using a break statement in 'for' loops | Updated | name = ...oid using break statement in FOR loops |
8032 | quality-rule | Avoid using break statement in FOR loops | Documentation english | sample = ...ion\n }\n // ...\n} | Updated | sample = ...ion\n }\n} |
8242 | quality-rule | Avoid using insufficient random values for cookies | Documentation english | remediationSample = static SecureRandom ranGen = new SecureRandom();\n\nString GenerateReceiptURL(Stri... | Updated | remediationSample = @Override\npublic void doPost(HttpServletRequest request, HttpServletResponse res... |
8242 | quality-rule | Avoid using insufficient random values for cookies | Documentation english | sample = static Random ranGen = new Random();\n\nString GenerateReceiptURL(String baseUrl) ... | Updated | sample = @Override\npublic void doPost(HttpServletRequest request, HttpServletResponse res... |
8480 | quality-rule | Avoid using PREPARE STMT statement (Dynamic SQL) with STRING containing HOST variables | Documentation english | sample = ... inputs:\n\n* Potential SQL injection if X, Y or Z host variables come from untrus... | Updated | sample = ... inputs:\n\n\nSTRING "INSERT INTO TBL (a,b,c) VALUES (" X "," Y "," Z ")" INTO MY-S... |
8484 | quality-rule | Avoid HTTP response splitting through API requests | Documentation english | remediationSample = .../Sample 1\n// A possibility is to sanitize the rawInputData variable\nimport org.o... | Updated | remediationSample = .../Sample 1\nimport org.owasp.esapi.Encoder;\nString rawInputData; // value given by... |
8484 | quality-rule | Avoid HTTP response splitting through API requests | Documentation english | sample = .../Sample 1\nresponse.addHeader(HEADER_NAME, rawInputData);\n\n//Sample 2\nString head... | Updated | sample = .../Sample 1\nString rawInputData; // value given by an API request\nresponse.addHead... |
8494 | quality-rule | Avoid OS command injection through API requests | Documentation english | remediationSample = Sample 1:\npublic String coordinateTransformLatLonToUTM(String coordinates)\n{\nStr... | Updated | remediationSample = public String coordinateTransformLatLonToUTM(String coordinates)\n{\n String utmC... |
8494 | quality-rule | Avoid OS command injection through API requests | Documentation english | sample = Sample 1:\npublic String coordinateTransformLatLonToUTM(String coordinates)\n{\nStr... | Updated | sample = public String coordinateTransformLatLonToUTM(String coordinates)\n{\n String utmC... |
8518 | quality-rule | Avoid regular expression injection | Documentation english | name = Avoid Regular expression injection | Updated | name = Avoid regular expression injection |
8554 | quality-rule | Avoid using insufficient random generator | Documentation english | description = This rule will check if the library used to generate random number. | Updated | description = The application uses a Pseudo-Random Number Generator (PRNG), but the PRNG's alg... |
8554 | quality-rule | Avoid using insufficient random generator | Documentation english | remediationSample = ...aseUrl) {\nranGen.setSeed((new Date()).getTime());\nreturn(baseUrl + ranGen.nextIn... | Updated | remediationSample = ...aseUrl) {\n ranGen.setSeed((new Date()).getTime());\n return(baseUrl + ranGe... |
8554 | quality-rule | Avoid using insufficient random generator | Documentation english | sample = ...aseUrl) {\nranGen.setSeed((new Date()).getTime());\nreturn(baseUrl + ranGen.nextIn... | Updated | sample = ...aseUrl) {\n ranGen.setSeed((new Date()).getTime());\n return(baseUrl + ranGe... |
8566 | quality-rule | Avoid cyclic references in the definition of CDS views (S4/HAHA) | Definition | Missing | Added | active = true, detached = false |
8566 | quality-rule | Avoid cyclic references in the definition of CDS views (S4/HAHA) | Quality Contribution to 'Architecture - Multi-Layers and Data Access' (61001) | Missing contribution | Added | critical = false, weight = 7 |
8568 | quality-rule | Avoid calculated fields in WHERE-clauses and ON-clauses of CDS views (S4/HANA) | Definition | Missing | Added | active = true, detached = false |
8568 | quality-rule | Avoid calculated fields in WHERE-clauses and ON-clauses of CDS views (S4/HANA) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = false, weight = 7 |
AIP 8.3.40 - 8.3.41
This section lists the results of a comparison between a CAST AIP 8.3.40 Assessment Model and a CAST AIP 8.3.41 Assessment Model. You can download the original compare_8340_8341.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.40 Assessment Model | Change | CAST 8.3.41 Assessment Model |
7766 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity | Documentation english | reference = ...etric\nhttp://hissa.nist.gov/HHRFdata/Artifacts/ITLdoc/235/sttoc.htm | Updated | reference = ...etric\nhttps://www.nist.gov/publications/structured-testing-testing-methodology-u... |
8420 | quality-rule | Avoid second order SQL injection | Documentation english | output = ...forged by user input\n\nIt provides the following information:\n - Method full name... | Updated | output = ...forged by database content\n\nIt provides the following information:\n - Method ful... |
8484 | quality-rule | Avoid HTTP response splitting through API requests | Documentation english | sample = ...ER_NAME);\nCookie cookie = new Cookie("header", header);\nresponse.addCookie(cooki... | Updated | sample = ...ER_NAME);\n// ...\nCookie cookie = new Cookie("header", header);\nresponse.addCooki... |
8520 | quality-rule | Avoid second order regular expression injection | Documentation english | output = ...forged by user input\n\nIt provides the following information:\n - Method full name... | Updated | output = ...forged by database content\n\nIt provides the following information:\n - Method ful... |
8526 | quality-rule | Avoid second order deserialization injection | Documentation english | output = ...forged by user input\n\nIt provides the following information:\n - Method full name... | Updated | output = ...forged by database content\n\nIt provides the following information:\n - Method ful... |
8526 | quality-rule | Avoid second order deserialization injection | Documentation english | Missing | Added | associatedValueName = Call stack from user input source down to the target method |
8532 | quality-rule | Avoid second order XQuery injection | Documentation english | output = ...forged by user input\n\nIt provides the following information:\n - Method full name... | Updated | output = ...forged by database content\n\nIt provides the following information:\n - Method ful... |
8538 | quality-rule | Avoid second order expression language injection | Documentation english | output = ...forged by user input\n\nIt provides the following information:\n - Method full name... | Updated | output = ...forged by database content\n\nIt provides the following information:\n - Method ful... |
8560 | quality-rule | Avoid server-side request forgery | Definition | Missing | Added | active = true, detached = false |
8560 | quality-rule | Avoid server-side request forgery | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8562 | quality-rule | Avoid server-side request forgery through API requests | Definition | Missing | Added | active = true, detached = false |
8562 | quality-rule | Avoid server-side request forgery through API requests | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8564 | quality-rule | Avoid second order server-side request forgery | Definition | Missing | Added | active = true, detached = false |
8564 | quality-rule | Avoid second order server-side request forgery | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
AIP 8.3.39 - 8.3.40
This section lists the results of a comparison between a CAST AIP 8.3.39 Assessment Model and a CAST AIP 8.3.40 Assessment Model. You can download the original compare_8339_8340.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.39 Assessment Model | Change | CAST 8.3.40 Assessment Model |
8108 | quality-rule | Avoid missing release of stream connection after an effective lifetime | Documentation english | remediationSample = ...er.ReadToEnd();\n }\n }\n} | Updated | remediationSample = ...er.ReadToEnd();\n }\n }\n}\n\n------- VB.NET ---------\n\n' with using statement... |
8108 | quality-rule | Avoid missing release of stream connection after an effective lifetime | Documentation english | sample = ... return reader.ReadToEnd();\n} | Updated | sample = ... return reader.ReadToEnd();\n}\n\n------- VB.NET ---------\n\nPublic Function ReadTe... |
AIP 8.3.38 - 8.3.39
This section lists the results of a comparison between a CAST AIP 8.3.38 Assessment Model and a CAST AIP 8.3.39 Assessment Model. You can download the original compare_8338_8339.xlsx file (which you should open in Microsoft Excel) if you prefer. Note that in AIP Core 8.3.39, main extensions that were previous shipped with AIP Core were removed.
Metric | Type | Name | Topic | CAST 8.3.38 Assessment Model | Change | CAST 8.3.39 Assessment Model |
1606 | quality-rule | Triggers should not directly modify tables, a procedure or function should be used instead | Technologies | [Forms, PL/SQL, SQL] | Updated | Removed: [SQL] |
1634 | quality-rule | Avoid unreferenced Tables | Technologies | [SQL Server, PL/SQL, Microsoft T-SQL, Sybase T-SQL, SQL] | Updated | Removed: [SQL] |
3570 | quality-rule | Avoid using Keywords as names | Activation | active = false, detached = true | Updated | active = true, detached = false |
3570 | quality-rule | Avoid using Keywords as names | Documentation english | description = ...ds should not be used as names. For list of supported keyword for C# please see ... | Updated | description = ...ds should not be used as names |
3570 | quality-rule | Avoid using Keywords as names | Documentation english | name = DELETED: Avoid using Keywords as names | Updated | name = Avoid using Keywords as names |
3570 | quality-rule | Avoid using Keywords as names | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | Missing contribution | Added | critical = false, weight = 2 |
7404 | quality-rule | Avoid unreferenced views | Technologies | [SQL Server, PL/SQL, Microsoft T-SQL, Sybase T-SQL, SQL] | Updated | Removed: [SQL] |
7760 | quality-rule | Avoid triggers, functions and procedures with a very low comment/code ratio | Technologies | [SQL Server, Forms, PL/SQL, Microsoft T-SQL, Sybase T-SQL, SQL] | Updated | Removed: [SQL] |
7760 | quality-rule | Avoid triggers, functions and procedures with a very low comment/code ratio | Parameter #1: Minimum % Comment / Code Ratio | values(SQL) = [5] | Updated | values(SQL) = No default values |
7762 | quality-rule | Avoid undocumented Triggers, Functions and Procedures | Technologies | [SQL Server, Forms, PL/SQL, Microsoft T-SQL, Sybase T-SQL, SQL] | Updated | Removed: [SQL] |
7766 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity | Technologies | [ASP, ABAP, SQL Server, Forms, Visual Basic, PowerBuilder, Cobol, C++, C, C#, VB.NET, JavaScript, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL, .NET (Legacy Analyzer), SQL] | Updated | Removed: [SQL] |
7768 | quality-rule | Avoid Artifacts with High Depth of Code | Technologies | [ASP, ABAP, SQL Server, Forms, Visual Basic, PowerBuilder, Cobol, C++, C, C#, VB.NET, JavaScript, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL, .NET (Legacy Analyzer), SQL] | Updated | Removed: [SQL] |
7772 | quality-rule | Avoid Artifacts with High Essential Complexity | Technologies | [ASP, ABAP, SQL Server, Forms, Visual Basic, PowerBuilder, Cobol, C++, C, C#, VB.NET, JavaScript, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL, .NET (Legacy Analyzer), SQL] | Updated | Removed: [SQL] |
7774 | quality-rule | Avoid Artifacts with High Integration Complexity | Technologies | [ASP, ABAP, SQL Server, Forms, Visual Basic, Cobol, C++, C, C#, VB.NET, JavaScript, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL, .NET (Legacy Analyzer), SQL] | Updated | Removed: [SQL] |
7776 | quality-rule | Avoid Artifacts with High Fan-In | Technologies | [ASP, ABAP, SQL Server, Forms, Visual Basic, PowerBuilder, Cobol, C++, C, C#, VB.NET, JavaScript, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL, .NET (Legacy Analyzer), HTML5, SQL] | Updated | Removed: [HTML5, SQL] |
7778 | quality-rule | Avoid Artifacts with High Fan-Out | Technologies | [ASP, ABAP, SQL Server, Forms, Visual Basic, PowerBuilder, Cobol, C++, C, C#, VB.NET, JavaScript, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL, .NET (Legacy Analyzer), HTML5, SQL] | Updated | Removed: [HTML5, SQL] |
7782 | quality-rule | Avoid empty finally blocks | Technologies | [ASP, C#, VB.NET, JEE, .NET (Legacy Analyzer), HTML5] | Updated | Removed: [HTML5] |
7784 | quality-rule | Avoid Artifacts with lines longer than X characters | Technologies | [ASP, SQL Server, Forms, Visual Basic, C++, C, C#, VB.NET, JavaScript, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL, .NET (Legacy Analyzer), HTML5, SQL] | Updated | Removed: [HTML5, SQL] |
7786 | quality-rule | Avoid long Table or View names | Technologies | [SAP SQL, SQL Server, PL/SQL, Microsoft T-SQL, Sybase T-SQL, SQL] | Updated | Removed: [SQL] |
7788 | quality-rule | Avoid empty catch blocks | Technologies | [ABAP, C#, VB.NET, JEE, .NET (Legacy Analyzer), HTML5] | Updated | Removed: [HTML5] |
7792 | quality-rule | Avoid Classes with a High Number Of Children | Technologies | [ABAP, Visual Basic, PowerBuilder, C++, C#, VB.NET, JEE, .NET (Legacy Analyzer), HTML5] | Updated | Removed: [HTML5] |
7808 | quality-rule | Avoid Artifacts with SQL statement including subqueries | Technologies | [ABAP, SQL Server, Forms, Visual Basic, Cobol, C++, C, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL, SQL] | Updated | Removed: [SQL] |
7814 | quality-rule | Avoid Tables not using referential integrity | Technologies | [SQL Server, PL/SQL, Microsoft T-SQL, Sybase T-SQL, SQL] | Updated | Removed: [SQL] |
7816 | quality-rule | Avoid using GOTO statement | Technologies | [SQL Server, Forms, C++, C, C#, VB.NET, PL/SQL, Microsoft T-SQL, Sybase T-SQL, SQL] | Updated | Removed: [SQL] |
7828 | quality-rule | Avoid Artifacts with High RAW SQL Complexity | Technologies | [ABAP, SQL Server, Forms, Visual Basic, PowerBuilder, Cobol, C++, C, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL, SQL] | Updated | Removed: [SQL] |
7840 | quality-rule | Trigger naming convention - prefix control | Technologies | [SQL Server, Forms, PL/SQL, Microsoft T-SQL, Sybase T-SQL, SQL] | Updated | Removed: [SQL] |
7840 | quality-rule | Trigger naming convention - prefix control | Parameter #1: Trigger name prefix | values(SQL) = [D_, U_, L_] | Updated | values(SQL) = No default values |
7842 | quality-rule | Avoid large Artifacts - too many Lines of Code | Technologies | [ABAP, SQL Server, Forms, Cobol, C++, C, C#, VB.NET, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL, .NET (Legacy Analyzer), HTML5, SQL] | Updated | Removed: [HTML5, SQL] |
7842 | quality-rule | Avoid large Artifacts - too many Lines of Code | Parameter #1: Maximum Line Count | values(HTML5) = [100] | Updated | values(HTML5) = No default values |
7842 | quality-rule | Avoid large Artifacts - too many Lines of Code | Parameter #1: Maximum Line Count | values(SQL) = [50] | Updated | values(SQL) = No default values |
7844 | quality-rule | Avoid undocumented Classes | Technologies | [ABAP, Visual Basic, C++, C#, VB.NET, JEE, .NET (Legacy Analyzer), HTML5] | Updated | Removed: [HTML5] |
7852 | quality-rule | Database view naming convention - prefix control | Technologies | [SAP SQL, SQL Server, PL/SQL, Microsoft T-SQL, Sybase T-SQL, SQL] | Updated | Removed: [SQL] |
7852 | quality-rule | Database view naming convention - prefix control | Parameter #1: Prefix | values(SQL) = [v_, V_] | Updated | values(SQL) = No default values |
7854 | quality-rule | Database table naming convention - prefix control | Technologies | [SAP SQL, SQL Server, PL/SQL, Microsoft T-SQL, Sybase T-SQL, SQL] | Updated | Removed: [SQL] |
7854 | quality-rule | Database table naming convention - prefix control | Parameter #1: Prefix | values(SQL) = [T_, t_] | Updated | values(SQL) = No default values |
7856 | quality-rule | Avoid Tables with more than 20 columns on an OLTP system | Technologies | [SQL Server, PL/SQL, Microsoft T-SQL, Sybase T-SQL, SQL] | Updated | Removed: [SQL] |
7860 | quality-rule | Avoid unreferenced Functions and Procedures | Technologies | [ASP, ABAP, Forms, Visual Basic, C++, C, JavaScript, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL, SQL] | Updated | Removed: [SQL] |
7898 | quality-rule | SQL Function naming convention - prefix control | Technologies | [SQL Server, PL/SQL, Microsoft T-SQL, Sybase T-SQL, SQL] | Updated | Removed: [SQL] |
7898 | quality-rule | SQL Function naming convention - prefix control | Parameter #1: Prefix | values(SQL) = [fn_, F_] | Updated | values(SQL) = No default values |
7900 | quality-rule | Stored Procedure naming convention - prefix control | Technologies | [SQL Server, Forms, PL/SQL, Microsoft T-SQL, Sybase T-SQL, SQL] | Updated | Removed: [SQL] |
7900 | quality-rule | Stored Procedure naming convention - prefix control | Parameter #1: Prefix | values(SQL) = [SP_, P_, usp_] | Updated | values(SQL) = No default values |
7944 | quality-rule | Avoid High Response for Classes | Technologies | [ABAP, PowerBuilder, C++, C#, VB.NET, JEE, .NET (Legacy Analyzer), HTML5] | Updated | Removed: [HTML5] |
8028 | quality-rule | Avoid missing default in switch statements | Technologies | [C++, C, C#, VB.NET, JEE, HTML5] | Updated | Removed: [HTML5] |
8032 | quality-rule | Avoid using a break statement in 'for' loops | Technologies | [C++, C, C#, VB.NET, JEE, .NET (Legacy Analyzer), HTML5] | Updated | Removed: [HTML5] |
10201 | sizing-measure | Backfired Function Points | Parameter #1: BackFired FP ratio | values(SQL) = [60.0] | Updated | values(SQL) = No default values |
65105 | quality-distribution | Size Distribution | Parameter #1: Average Size Threshold | values(HTML5) = [100.0] | Updated | values(HTML5) = No default values |
65105 | quality-distribution | Size Distribution | Parameter #1: Average Size Threshold | values(SQL) = [100.0] | Updated | values(SQL) = No default values |
65105 | quality-distribution | Size Distribution | Parameter #2: Large Size Threshold | values(HTML5) = [500.0] | Updated | values(HTML5) = No default values |
65105 | quality-distribution | Size Distribution | Parameter #2: Large Size Threshold | values(SQL) = [500.0] | Updated | values(SQL) = No default values |
65105 | quality-distribution | Size Distribution | Parameter #3: Very Large Size Threshold | values(HTML5) = [1000.0] | Updated | values(HTML5) = No default values |
65105 | quality-distribution | Size Distribution | Parameter #3: Very Large Size Threshold | values(SQL) = [1000.0] | Updated | values(SQL) = No default values |
65350 | quality-distribution | Coupling Distribution | Parameter #1: Average Coupling Artifacts Threshold | values(HTML5) = [4.0] | Updated | values(HTML5) = No default values |
65350 | quality-distribution | Coupling Distribution | Parameter #1: Average Coupling Artifacts Threshold | values(SQL) = [4.0] | Updated | values(SQL) = No default values |
65350 | quality-distribution | Coupling Distribution | Parameter #2: High Coupling Artifacts Threshold | values(HTML5) = [10.0] | Updated | values(HTML5) = No default values |
65350 | quality-distribution | Coupling Distribution | Parameter #2: High Coupling Artifacts Threshold | values(SQL) = [10.0] | Updated | values(SQL) = No default values |
65350 | quality-distribution | Coupling Distribution | Parameter #3: Very High Coupling Artifacts Threshold | values(HTML5) = [30.0] | Updated | values(HTML5) = No default values |
65350 | quality-distribution | Coupling Distribution | Parameter #3: Very High Coupling Artifacts Threshold | values(SQL) = [30.0] | Updated | values(SQL) = No default values |
65501 | quality-distribution | Cyclomatic Complexity Distribution | Parameter #1: Average Complexity Artifact Threshold | values(HTML5) = [5.0] | Updated | values(HTML5) = No default values |
65501 | quality-distribution | Cyclomatic Complexity Distribution | Parameter #1: Average Complexity Artifact Threshold | values(SQL) = [5.0] | Updated | values(SQL) = No default values |
65501 | quality-distribution | Cyclomatic Complexity Distribution | Parameter #2: High Complexity Artifact Threshold | values(HTML5) = [15.0] | Updated | values(HTML5) = No default values |
65501 | quality-distribution | Cyclomatic Complexity Distribution | Parameter #2: High Complexity Artifact Threshold | values(SQL) = [15.0] | Updated | values(SQL) = No default values |
65501 | quality-distribution | Cyclomatic Complexity Distribution | Parameter #3: Very High Complexity Artifact Threshold | values(HTML5) = [30.0] | Updated | values(HTML5) = No default values |
65501 | quality-distribution | Cyclomatic Complexity Distribution | Parameter #3: Very High Complexity Artifact Threshold | values(SQL) = [30.0] | Updated | values(SQL) = No default values |
65601 | quality-distribution | 4GL Complexity Distribution | Parameter #1: Heavy Forms threshold | values(JSP) = [20.0] | Updated | values(JSP) = No default values |
65601 | quality-distribution | 4GL Complexity Distribution | Parameter #2: Lengthy Forms threshold | values(JSP) = [20.0] | Updated | values(JSP) = No default values |
65601 | quality-distribution | 4GL Complexity Distribution | Parameter #3: High Data Layer threshold | values(JSP) = [20.0] | Updated | values(JSP) = No default values |
65601 | quality-distribution | 4GL Complexity Distribution | Parameter #4: High Fan out threshold | values(JSP) = [20.0] | Updated | values(JSP) = No default values |
66010 | quality-distribution | Reuse by Call Distribution | Parameter #1: Average Reuse Threshold | values(SQL) = [4.0] | Updated | values(SQL) = No default values |
66010 | quality-distribution | Reuse by Call Distribution | Parameter #2: High Reuse Threshold | values(SQL) = [10.0] | Updated | values(SQL) = No default values |
66010 | quality-distribution | Reuse by Call Distribution | Parameter #3: Very High Reuse Threshold | values(SQL) = [50.0] | Updated | values(SQL) = No default values |
66015 | quality-distribution | Class Complexity Distribution (WMC) | Parameter #1: Average Class Complexity Threshold | values(SQL) = [100.0] | Updated | values(SQL) = No default values |
66015 | quality-distribution | Class Complexity Distribution (WMC) | Parameter #2: High Class Complexity Threshold | values(SQL) = [500.0] | Updated | values(SQL) = No default values |
66015 | quality-distribution | Class Complexity Distribution (WMC) | Parameter #3: Very High Class Complexity Threshold | values(SQL) = [1000.0] | Updated | values(SQL) = No default values |
66020 | quality-distribution | Class Fan-Out Distribution | Parameter #1: Average Class Fan-Out Threshold | values(SQL) = [5.0] | Updated | values(SQL) = No default values |
66020 | quality-distribution | Class Fan-Out Distribution | Parameter #2: High Class Fan-Out Threshold | values(SQL) = [15.0] | Updated | values(SQL) = No default values |
66020 | quality-distribution | Class Fan-Out Distribution | Parameter #3: Very High Class Fan-Out Threshold | values(SQL) = [30.0] | Updated | values(SQL) = No default values |
66021 | quality-distribution | Class Fan-In Distribution | Parameter #1: Average Class Fan-In Threshold | values(SQL) = [4.0] | Updated | values(SQL) = No default values |
66021 | quality-distribution | Class Fan-In Distribution | Parameter #2: High Class Fan-In Threshold | values(SQL) = [10.0] | Updated | values(SQL) = No default values |
66021 | quality-distribution | Class Fan-In Distribution | Parameter #3: Very High Class Fan-In Threshold | values(SQL) = [30.0] | Updated | values(SQL) = No default values |
1020000 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity (HTML5/Javascript) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 5 | Removed | Missing contribution |
1020000 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity (HTML5/Javascript) | Definition | active = true, detached = false | Removed | Missing |
1020002 | quality-rule | Avoid programs with low comment / code ratio (HTML5/Javascript) | Quality Contribution to 'Documentation - Volume of Comments' (61028) | critical = false, weight = 6 | Removed | Missing contribution |
1020002 | quality-rule | Avoid programs with low comment / code ratio (HTML5/Javascript) | Definition | active = true, detached = false | Removed | Missing |
1020004 | quality-rule | Avoid using querySelectorAll | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = true, weight = 7 | Removed | Missing contribution |
1020004 | quality-rule | Avoid using querySelectorAll | Definition | active = true, detached = false | Removed | Missing |
1020006 | quality-rule | Avoid calling a function in a termination loop | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = true, weight = 7 | Removed | Missing contribution |
1020006 | quality-rule | Avoid calling a function in a termination loop | Definition | active = true, detached = false | Removed | Missing |
1020008 | quality-rule | Avoid using for-in loop | Quality Contribution to 'Efficiency - Expensive Calls in Loops' (66068) | critical = false, weight = 4 | Removed | Missing contribution |
1020008 | quality-rule | Avoid using for-in loop | Definition | active = true, detached = false | Removed | Missing |
1020010 | quality-rule | Avoid using forEach() | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 7 | Removed | Missing contribution |
1020010 | quality-rule | Avoid using forEach() | Definition | active = true, detached = false | Removed | Missing |
1020012 | quality-rule | Avoid using a web service with WebSocket inside a loop | Quality Contribution to 'Efficiency - Expensive Calls in Loops' (66068) | critical = true, weight = 7 | Removed | Missing contribution |
1020012 | quality-rule | Avoid using a web service with WebSocket inside a loop | Definition | active = true, detached = false | Removed | Missing |
1020014 | quality-rule | Avoid using a web service with XMLHttpRequest inside a loop | Quality Contribution to 'Efficiency - Expensive Calls in Loops' (66068) | critical = true, weight = 7 | Removed | Missing contribution |
1020014 | quality-rule | Avoid using a web service with XMLHttpRequest inside a loop | Definition | active = true, detached = false | Removed | Missing |
1020016 | quality-rule | Avoid using too much dot notation in loop | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 4 | Removed | Missing contribution |
1020016 | quality-rule | Avoid using too much dot notation in loop | Definition | active = true, detached = false | Removed | Missing |
1020018 | quality-rule | Avoid using Web SQL databases | Quality Contribution to 'Architecture - Multi-Layers and Data Access' (61001) | critical = true, weight = 9 | Removed | Missing contribution |
1020018 | quality-rule | Avoid using Web SQL databases | Definition | active = true, detached = false | Removed | Missing |
1020020 | quality-rule | Avoid JavaScript to block page loading | Quality Contribution to 'Efficiency - Memory, Network and Disk Space Management' (61018) | critical = false, weight = 5 | Removed | Missing contribution |
1020020 | quality-rule | Avoid JavaScript to block page loading | Definition | active = true, detached = false | Removed | Missing |
1020022 | quality-rule | Avoid using submitted markup containing "form" and "formaction" attributes | Quality Contribution to 'Secure Coding - Input Validation' (66062) | critical = true, weight = 9 | Removed | Missing contribution |
1020022 | quality-rule | Avoid using submitted markup containing "form" and "formaction" attributes | Definition | active = true, detached = false | Removed | Missing |
1020024 | quality-rule | Avoid using submit markup related to "form" with id attribute | Quality Contribution to 'Secure Coding - Input Validation' (66062) | critical = true, weight = 7 | Removed | Missing contribution |
1020024 | quality-rule | Avoid using submit markup related to "form" with id attribute | Definition | active = true, detached = false | Removed | Missing |
1020026 | quality-rule | Avoid using autofocus and onfocus in submitted markup | Quality Contribution to 'Secure Coding - Input Validation' (66062) | critical = true, weight = 7 | Removed | Missing contribution |
1020026 | quality-rule | Avoid using autofocus and onfocus in submitted markup | Definition | active = true, detached = false | Removed | Missing |
1020028 | quality-rule | Avoid using autofocus and onblur in submitted markup | Quality Contribution to 'Secure Coding - Input Validation' (66062) | critical = true, weight = 7 | Removed | Missing contribution |
1020028 | quality-rule | Avoid using autofocus and onblur in submitted markup | Definition | active = true, detached = false | Removed | Missing |
1020030 | quality-rule | Avoid using javascript or expression in the CSS file | Quality Contribution to 'Secure Coding - Input Validation' (66062) | critical = true, weight = 9 | Removed | Missing contribution |
1020030 | quality-rule | Avoid using javascript or expression in the CSS file | Definition | active = true, detached = false | Removed | Missing |
1020032 | quality-rule | Avoid using video poster attributes in combination with javascript | Quality Contribution to 'Secure Coding - Input Validation' (66062) | critical = true, weight = 7 | Removed | Missing contribution |
1020032 | quality-rule | Avoid using video poster attributes in combination with javascript | Definition | active = true, detached = false | Removed | Missing |
1020034 | quality-rule | Avoid hosting HTML code in iframe srcdoc | Quality Contribution to 'Secure Coding - Input Validation' (66062) | critical = true, weight = 7 | Removed | Missing contribution |
1020034 | quality-rule | Avoid hosting HTML code in iframe srcdoc | Definition | active = true, detached = false | Removed | Missing |
1020036 | quality-rule | Avoid using onscroll event with autofocus input | Quality Contribution to 'Secure Coding - Input Validation' (66062) | critical = true, weight = 7 | Removed | Missing contribution |
1020036 | quality-rule | Avoid using onscroll event with autofocus input | Definition | active = true, detached = false | Removed | Missing |
1020038 | quality-rule | Avoid defining and calling functions inside loops | Quality Contribution to 'Efficiency - Expensive Calls in Loops' (66068) | critical = false, weight = 5 | Removed | Missing contribution |
1020038 | quality-rule | Avoid defining and calling functions inside loops | Definition | active = true, detached = false | Removed | Missing |
1020040 | quality-rule | Avoid using delete with no object properties | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | critical = false, weight = 5 | Removed | Missing contribution |
1020040 | quality-rule | Avoid using delete with no object properties | Definition | active = true, detached = false | Removed | Missing |
1020042 | quality-rule | Avoid having iframe inside a tag | Quality Contribution to 'Secure Coding - Input Validation' (66062) | critical = true, weight = 7 | Removed | Missing contribution |
1020042 | quality-rule | Avoid having iframe inside a tag | Definition | active = true, detached = false | Removed | Missing |
1020044 | quality-rule | Avoid using setData in ondragstart with attribute draggable set to true | Quality Contribution to 'Secure Coding - Input Validation' (66062) | critical = true, weight = 7 | Removed | Missing contribution |
1020044 | quality-rule | Avoid using setData in ondragstart with attribute draggable set to true | Definition | active = true, detached = false | Removed | Missing |
1020046 | quality-rule | Avoid using oninput in body containing input autofocus | Quality Contribution to 'Secure Coding - Input Validation' (66062) | critical = true, weight = 7 | Removed | Missing contribution |
1020046 | quality-rule | Avoid using oninput in body containing input autofocus | Definition | active = true, detached = false | Removed | Missing |
1020048 | quality-rule | Avoid using source tag in video/audio with event handler | Quality Contribution to 'Secure Coding - Input Validation' (66062) | critical = true, weight = 7 | Removed | Missing contribution |
1020048 | quality-rule | Avoid using source tag in video/audio with event handler | Definition | active = true, detached = false | Removed | Missing |
1020050 | quality-rule | Avoid white-listing the "dirname" attribute in user generated content | Quality Contribution to 'Secure Coding - Input Validation' (66062) | critical = true, weight = 7 | Removed | Missing contribution |
1020050 | quality-rule | Avoid white-listing the "dirname" attribute in user generated content | Definition | active = true, detached = false | Removed | Missing |
1020052 | quality-rule | Avoid using import with external URI | Quality Contribution to 'Secure Coding - Input Validation' (66062) | critical = true, weight = 7 | Removed | Missing contribution |
1020052 | quality-rule | Avoid using import with external URI | Definition | active = true, detached = false | Removed | Missing |
1020054 | quality-rule | Avoid using delete on arrays | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | critical = false, weight = 5 | Removed | Missing contribution |
1020054 | quality-rule | Avoid using delete on arrays | Definition | active = true, detached = false | Removed | Missing |
1020056 | quality-rule | Avoid using Javascript Document.all collection | Quality Contribution to 'Efficiency - Memory, Network and Disk Space Management' (61018) | critical = false, weight = 4 | Removed | Missing contribution |
1020056 | quality-rule | Avoid using Javascript Document.all collection | Definition | active = true, detached = false | Removed | Missing |
1020058 | quality-rule | Avoid using eval() | Quality Contribution to 'Secure Coding - Input Validation' (66062) | critical = true, weight = 7 | Removed | Missing contribution |
1020058 | quality-rule | Avoid using eval() | Definition | active = true, detached = false | Removed | Missing |
1020060 | quality-rule | Avoid using console.log() | Quality Contribution to 'Secure Coding - Encapsulation' (66066) | critical = false, weight = 5 | Removed | Missing contribution |
1020060 | quality-rule | Avoid using console.log() | Definition | active = true, detached = false | Removed | Missing |
1020062 | quality-rule | Avoid using non thread-safe Javascript singleton pattern | Quality Contribution to 'Secure Coding - API Abuse' (66063) | critical = false, weight = 8 | Removed | Missing contribution |
1020062 | quality-rule | Avoid using non thread-safe Javascript singleton pattern | Definition | active = true, detached = false | Removed | Missing |
1020064 | quality-rule | Avoid Superclass knowing Subclass in Javascript | Quality Contribution to 'Programming Practices - OO Inheritance and Polymorphism' (61003) | critical = false, weight = 9 | Removed | Missing contribution |
1020064 | quality-rule | Avoid Superclass knowing Subclass in Javascript | Definition | active = true, detached = false | Removed | Missing |
1020066 | quality-rule | Avoid using Javascript Function constructor | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | critical = false, weight = 7 | Removed | Missing contribution |
1020066 | quality-rule | Avoid using Javascript Function constructor | Definition | active = true, detached = false | Removed | Missing |
1020068 | quality-rule | Avoid return statement in finally block | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | critical = true, weight = 8 | Removed | Missing contribution |
1020068 | quality-rule | Avoid return statement in finally block | Definition | active = true, detached = false | Removed | Missing |
1020070 | quality-rule | Avoid hardcoded network resource names in Javascript | Quality Contribution to 'Architecture - OS and Platform Independence' (61004) | critical = false, weight = 7 | Removed | Missing contribution |
1020070 | quality-rule | Avoid hardcoded network resource names in Javascript | Definition | active = true, detached = false | Removed | Missing |
1020072 | quality-rule | Avoid direct access to Database Tables in Javascript | Quality Contribution to 'Architecture - Multi-Layers and Data Access' (61001) | critical = false, weight = 6 | Removed | Missing contribution |
1020072 | quality-rule | Avoid direct access to Database Tables in Javascript | Definition | active = true, detached = false | Removed | Missing |
1020074 | quality-rule | Avoid enabling autocomplete "on" for inputs/forms | Quality Contribution to 'Secure Coding - Input Validation' (66062) | critical = false, weight = 7 | Removed | Missing contribution |
1020074 | quality-rule | Avoid enabling autocomplete "on" for inputs/forms | Definition | active = true, detached = false | Removed | Missing |
1020076 | quality-rule | Avoid Artifacts with too many parameters (Javascript) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 8 | Removed | Missing contribution |
1020076 | quality-rule | Avoid Artifacts with too many parameters (Javascript) | Definition | active = true, detached = false | Removed | Missing |
1020078 | quality-rule | Avoid using setTimeout() | Quality Contribution to 'Secure Coding - Input Validation' (66062) | critical = true, weight = 7 | Removed | Missing contribution |
1020078 | quality-rule | Avoid using setTimeout() | Definition | active = true, detached = false | Removed | Missing |
1020080 | quality-rule | Avoid using setInterval() | Quality Contribution to 'Secure Coding - Input Validation' (66062) | critical = true, weight = 7 | Removed | Missing contribution |
1020080 | quality-rule | Avoid using setInterval() | Definition | active = true, detached = false | Removed | Missing |
1020082 | quality-rule | Avoid undocumented Functions | Quality Contribution to 'Documentation - Volume of Comments' (61028) | critical = false, weight = 7 | Removed | Missing contribution |
1020082 | quality-rule | Avoid undocumented Functions | Definition | active = true, detached = false | Removed | Missing |
1020084 | quality-rule | Avoid unreferenced Functions | Quality Contribution to 'Dead code (static)' (61027) | critical = false, weight = 4 | Removed | Missing contribution |
1020084 | quality-rule | Avoid unreferenced Functions | Definition | active = true, detached = false | Removed | Missing |
1020086 | quality-rule | Avoid Functions having a very low Comment/Code ratio | Quality Contribution to 'Documentation - Volume of Comments' (61028) | critical = false, weight = 3 | Removed | Missing contribution |
1020086 | quality-rule | Avoid Functions having a very low Comment/Code ratio | Definition | active = true, detached = false | Removed | Missing |
1020088 | quality-rule | Avoid Artifacts with lines longer than X characters | Quality Contribution to 'Documentation - Style Conformity' (61006) | critical = false, weight = 2 | Removed | Missing contribution |
1020088 | quality-rule | Avoid Artifacts with lines longer than X characters | Definition | active = true, detached = false | Removed | Missing |
1020090 | quality-rule | Avoid Artifacts with High Depth of Code | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 5 | Removed | Missing contribution |
1020090 | quality-rule | Avoid Artifacts with High Depth of Code | Definition | active = true, detached = false | Removed | Missing |
1020300 | quality-rule | Avoid using the call of web service $.ajax inside a loop | Quality Contribution to 'Efficiency - Expensive Calls in Loops' (66068) | critical = true, weight = 9 | Removed | Missing contribution |
1020300 | quality-rule | Avoid using the call of web service $.ajax inside a loop | Definition | active = true, detached = false | Removed | Missing |
1020302 | quality-rule | Avoid using element type in jQuery | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 5 | Removed | Missing contribution |
1020302 | quality-rule | Avoid using element type in jQuery | Definition | active = true, detached = false | Removed | Missing |
1020304 | quality-rule | Implement success and error callbacks when using jquery web service call | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | critical = true, weight = 8 | Removed | Missing contribution |
1020304 | quality-rule | Implement success and error callbacks when using jquery web service call | Definition | active = true, detached = false | Removed | Missing |
1020306 | quality-rule | Always use find for Id->Child nested selectors | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 7 | Removed | Missing contribution |
1020306 | quality-rule | Always use find for Id->Child nested selectors | Definition | active = true, detached = false | Removed | Missing |
1020308 | quality-rule | Always cache the returned objects in variables to be reused | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 7 | Removed | Missing contribution |
1020308 | quality-rule | Always cache the returned objects in variables to be reused | Definition | active = true, detached = false | Removed | Missing |
1020310 | quality-rule | Use "type=" to select elements by type | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 5 | Removed | Missing contribution |
1020310 | quality-rule | Use "type=" to select elements by type | Definition | active = true, detached = false | Removed | Missing |
1020312 | quality-rule | Avoid use of anonymous functions to attach events | Quality Contribution to 'Architecture - Reuse' (66009) | critical = false, weight = 5 | Removed | Missing contribution |
1020312 | quality-rule | Avoid use of anonymous functions to attach events | Definition | active = true, detached = false | Removed | Missing |
1020314 | quality-rule | Avoid using css() of many elements | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 7 | Removed | Missing contribution |
1020314 | quality-rule | Avoid using css() of many elements | Definition | active = true, detached = false | Removed | Missing |
1020316 | quality-rule | Avoid Universal Selectors | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 7 | Removed | Missing contribution |
1020316 | quality-rule | Avoid Universal Selectors | Definition | active = true, detached = false | Removed | Missing |
1020318 | quality-rule | Avoid using jQuery deprecated methods | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | critical = false, weight = 5 | Removed | Missing contribution |
1020318 | quality-rule | Avoid using jQuery deprecated methods | Definition | active = true, detached = false | Removed | Missing |
1020500 | quality-rule | Avoid the use of the default JavaScript implementation [].forEach in AngularJS web app | Quality Contribution to 'Efficiency - Expensive Calls in Loops' (66068) | critical = false, weight = 4 | Removed | Missing contribution |
1020500 | quality-rule | Avoid the use of the default JavaScript implementation [].forEach in AngularJS web app | Definition | active = true, detached = false | Removed | Missing |
1020502 | quality-rule | Avoid the use of JSON.parse and JSON.stringify in AngularJS web app | Quality Contribution to 'Architecture - Reuse' (66009) | critical = false, weight = 4 | Removed | Missing contribution |
1020502 | quality-rule | Avoid the use of JSON.parse and JSON.stringify in AngularJS web app | Definition | active = true, detached = false | Removed | Missing |
1020504 | quality-rule | Avoid using the call of web service with AngularJS $http inside a loop | Quality Contribution to 'Efficiency - Expensive Calls in Loops' (66068) | critical = true, weight = 5 | Removed | Missing contribution |
1020504 | quality-rule | Avoid using the call of web service with AngularJS $http inside a loop | Definition | active = true, detached = false | Removed | Missing |
1020506 | quality-rule | Avoid using $scope in controllers | Quality Contribution to 'Programming Practices - Structuredness' (61024) | critical = false, weight = 5 | Removed | Missing contribution |
1020506 | quality-rule | Avoid using $scope in controllers | Definition | active = false, detached = false | Removed | Missing |
1020508 | quality-rule | Use Angular wrapper service $document | Quality Contribution to 'Programming Practices - Structuredness' (61024) | critical = false, weight = 3 | Removed | Missing contribution |
1020508 | quality-rule | Use Angular wrapper service $document | Definition | active = true, detached = false | Removed | Missing |
1020510 | quality-rule | Use Angular wrapper service $window | Quality Contribution to 'Programming Practices - Structuredness' (61024) | critical = false, weight = 3 | Removed | Missing contribution |
1020510 | quality-rule | Use Angular wrapper service $window | Definition | active = true, detached = false | Removed | Missing |
1020512 | quality-rule | Use Angular wrapper service $timeout | Quality Contribution to 'Programming Practices - Structuredness' (61024) | critical = false, weight = 3 | Removed | Missing contribution |
1020512 | quality-rule | Use Angular wrapper service $timeout | Definition | active = true, detached = false | Removed | Missing |
1020514 | quality-rule | Only use the angular.isUndefined or angular.isDefined methods in AngularJS application | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | critical = false, weight = 3 | Removed | Missing contribution |
1020514 | quality-rule | Only use the angular.isUndefined or angular.isDefined methods in AngularJS application | Definition | active = true, detached = false | Removed | Missing |
1020516 | quality-rule | Avoid using Javascript Array typecheck in AngularJS application | Quality Contribution to 'Programming Practices - Structuredness' (61024) | critical = false, weight = 5 | Removed | Missing contribution |
1020516 | quality-rule | Avoid using Javascript Array typecheck in AngularJS application | Definition | active = true, detached = false | Removed | Missing |
1020518 | quality-rule | Avoid using Javascript Date typecheck in AngularJS application | Quality Contribution to 'Programming Practices - Structuredness' (61024) | critical = false, weight = 5 | Removed | Missing contribution |
1020518 | quality-rule | Avoid using Javascript Date typecheck in AngularJS application | Definition | active = true, detached = false | Removed | Missing |
1020520 | quality-rule | Avoid using Javascript Function typecheck in AngularJS application | Quality Contribution to 'Programming Practices - Structuredness' (61024) | critical = false, weight = 5 | Removed | Missing contribution |
1020520 | quality-rule | Avoid using Javascript Function typecheck in AngularJS application | Definition | active = true, detached = false | Removed | Missing |
1020522 | quality-rule | Avoid using Javascript String typecheck in AngularJS application | Quality Contribution to 'Programming Practices - Structuredness' (61024) | critical = false, weight = 5 | Removed | Missing contribution |
1020522 | quality-rule | Avoid using Javascript String typecheck in AngularJS application | Definition | active = true, detached = false | Removed | Missing |
1020524 | quality-rule | Avoid using Javascript Object typecheck in AngularJS application | Quality Contribution to 'Programming Practices - Structuredness' (61024) | critical = false, weight = 5 | Removed | Missing contribution |
1020524 | quality-rule | Avoid using Javascript Object typecheck in AngularJS application | Definition | active = true, detached = false | Removed | Missing |
1020526 | quality-rule | Avoid using Javascript Number typecheck in AngularJS application | Quality Contribution to 'Programming Practices - Structuredness' (61024) | critical = false, weight = 5 | Removed | Missing contribution |
1020526 | quality-rule | Avoid using Javascript Number typecheck in AngularJS application | Definition | active = true, detached = false | Removed | Missing |
1020528 | quality-rule | Avoid using Javascript Regexp typecheck in AngularJS application | Quality Contribution to 'Programming Practices - Structuredness' (61024) | critical = false, weight = 5 | Removed | Missing contribution |
1020528 | quality-rule | Avoid using Javascript Regexp typecheck in AngularJS application | Definition | active = true, detached = false | Removed | Missing |
1020530 | quality-rule | Avoid using !angular.isUndefined() and !angular.isDefined() in AngularJS application | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | critical = false, weight = 3 | Removed | Missing contribution |
1020530 | quality-rule | Avoid using !angular.isUndefined() and !angular.isDefined() in AngularJS application | Definition | active = true, detached = false | Removed | Missing |
1020532 | quality-rule | Use Angular factory() instead of service() | Quality Contribution to 'Programming Practices - Structuredness' (61024) | critical = false, weight = 5 | Removed | Missing contribution |
1020532 | quality-rule | Use Angular factory() instead of service() | Definition | active = true, detached = false | Removed | Missing |
1020534 | quality-rule | Avoid using a web service with AngularJS $resource inside a loop | Quality Contribution to 'Efficiency - Expensive Calls in Loops' (66068) | critical = true, weight = 5 | Removed | Missing contribution |
1020534 | quality-rule | Avoid using a web service with AngularJS $resource inside a loop | Definition | active = true, detached = false | Removed | Missing |
1020536 | quality-rule | Avoid using $ or jQuery, use angular.element instead | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | critical = false, weight = 5 | Removed | Missing contribution |
1020536 | quality-rule | Avoid using $ or jQuery, use angular.element instead | Definition | active = true, detached = false | Removed | Missing |
1020538 | quality-rule | Avoid wrapping angular.element objects with jQuery or $ | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | critical = false, weight = 5 | Removed | Missing contribution |
1020538 | quality-rule | Avoid wrapping angular.element objects with jQuery or $ | Definition | active = true, detached = false | Removed | Missing |
1020540 | quality-rule | Avoid using $http success and error function | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | critical = false, weight = 8 | Removed | Missing contribution |
1020540 | quality-rule | Avoid using $http success and error function | Definition | active = true, detached = false | Removed | Missing |
1020542 | quality-rule | Enable Content Security Policy when creating an AngularJS application | Quality Contribution to 'Secure Coding - Input Validation' (66062) | critical = true, weight = 9 | Removed | Missing contribution |
1020542 | quality-rule | Enable Content Security Policy when creating an AngularJS application | Definition | active = true, detached = false | Removed | Missing |
1020544 | quality-rule | Avoid disabling Strict Contextual Escaping (SCE) when created | Quality Contribution to 'Secure Coding - Input Validation' (66062) | critical = true, weight = 7 | Removed | Missing contribution |
1020544 | quality-rule | Avoid disabling Strict Contextual Escaping (SCE) when created | Definition | active = true, detached = false | Removed | Missing |
1020546 | quality-rule | Avoid using unsanitized AngularJS application | Quality Contribution to 'Secure Coding - Input Validation' (66062) | critical = true, weight = 7 | Removed | Missing contribution |
1020546 | quality-rule | Avoid using unsanitized AngularJS application | Definition | active = true, detached = false | Removed | Missing |
1020548 | quality-rule | Avoid disabling withCredentials option for the httpProvider | Quality Contribution to 'Secure Coding - Input Validation' (66062) | critical = true, weight = 7 | Removed | Missing contribution |
1020548 | quality-rule | Avoid disabling withCredentials option for the httpProvider | Definition | active = true, detached = false | Removed | Missing |
1020700 | quality-rule | Avoid the lack of error handling in the Node.js callbacks | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | critical = false, weight = 5 | Removed | Missing contribution |
1020700 | quality-rule | Avoid the lack of error handling in the Node.js callbacks | Definition | active = true, detached = false | Removed | Missing |
1020702 | quality-rule | Avoid using process.exit() | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | critical = false, weight = 7 | Removed | Missing contribution |
1020702 | quality-rule | Avoid using process.exit() | Definition | active = true, detached = false | Removed | Missing |
1020704 | quality-rule | Avoid using string concatenation when using __dirname and __filename | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | critical = false, weight = 5 | Removed | Missing contribution |
1020704 | quality-rule | Avoid using string concatenation when using __dirname and __filename | Definition | active = true, detached = false | Removed | Missing |
1020706 | quality-rule | Ensure the Content-Security-Policy is activated | Quality Contribution to 'Secure Coding - Input Validation' (66062) | critical = true, weight = 9 | Removed | Missing contribution |
1020706 | quality-rule | Ensure the Content-Security-Policy is activated | Definition | active = true, detached = false | Removed | Missing |
1020708 | quality-rule | Ensure the X-Powered-By header is disabled | Quality Contribution to 'Secure Coding - Input Validation' (66062) | critical = true, weight = 9 | Removed | Missing contribution |
1020708 | quality-rule | Ensure the X-Powered-By header is disabled | Definition | active = true, detached = false | Removed | Missing |
1020710 | quality-rule | Ensure the X-XSS-Protection header is enabled | Quality Contribution to 'Secure Coding - Input Validation' (66062) | critical = true, weight = 9 | Removed | Missing contribution |
1020710 | quality-rule | Ensure the X-XSS-Protection header is enabled | Definition | active = true, detached = false | Removed | Missing |
1020712 | quality-rule | Ensure the X-Frame-Options header is setup | Quality Contribution to 'Secure Coding - Input Validation' (66062) | critical = true, weight = 9 | Removed | Missing contribution |
1020712 | quality-rule | Ensure the X-Frame-Options header is setup | Definition | active = true, detached = false | Removed | Missing |
1020714 | quality-rule | Avoid having multiple routes for the same path with Node.js Express App | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = true, weight = 8 | Removed | Missing contribution |
1020714 | quality-rule | Avoid having multiple routes for the same path with Node.js Express App | Definition | active = true, detached = false | Removed | Missing |
1020716 | quality-rule | Avoid using the call of web service with Node.js http.get or http.request inside a loop | Quality Contribution to 'Efficiency - Expensive Calls in Loops' (66068) | critical = true, weight = 8 | Removed | Missing contribution |
1020716 | quality-rule | Avoid using the call of web service with Node.js http.get or http.request inside a loop | Definition | active = true, detached = false | Removed | Missing |
1020718 | quality-rule | Ensure that browser cannot cache or store a page | Quality Contribution to 'Secure Coding - Input Validation' (66062) | critical = false, weight = 7 | Removed | Missing contribution |
1020718 | quality-rule | Ensure that browser cannot cache or store a page | Definition | active = true, detached = false | Removed | Missing |
1020720 | quality-rule | Allow only HTTPS communication | Quality Contribution to 'Secure Coding - Input Validation' (66062) | critical = true, weight = 9 | Removed | Missing contribution |
1020720 | quality-rule | Allow only HTTPS communication | Definition | active = true, detached = false | Removed | Missing |
1020722 | quality-rule | Ensure to use secure HTTPS protocol | Quality Contribution to 'Secure Coding - Input Validation' (66062) | critical = true, weight = 9 | Removed | Missing contribution |
1020722 | quality-rule | Ensure to use secure HTTPS protocol | Definition | active = true, detached = false | Removed | Missing |
1020724 | quality-rule | Ensure that marked is sanitized | Quality Contribution to 'Secure Coding - Input Validation' (66062) | critical = true, weight = 7 | Removed | Missing contribution |
1020724 | quality-rule | Ensure that marked is sanitized | Definition | active = true, detached = false | Removed | Missing |
1020726 | quality-rule | Ensure that CSRF Protection is enabled | Quality Contribution to 'Secure Coding - Input Validation' (66062) | critical = true, weight = 9 | Removed | Missing contribution |
1020726 | quality-rule | Ensure that CSRF Protection is enabled | Definition | active = true, detached = false | Removed | Missing |
1020728 | quality-rule | Avoid creating cookie without setting httpOnly option | Quality Contribution to 'Secure Coding - Encapsulation' (66066) | critical = true, weight = 7 | Removed | Missing contribution |
1020728 | quality-rule | Avoid creating cookie without setting httpOnly option | Definition | active = true, detached = false | Removed | Missing |
1020730 | quality-rule | Ensure Node.js filesystem are closed | Quality Contribution to 'Secure Coding - API Abuse' (66063) | critical = false, weight = 7 | Removed | Missing contribution |
1020730 | quality-rule | Ensure Node.js filesystem are closed | Definition | active = true, detached = false | Removed | Missing |
1101000 | quality-rule | Never use SQL queries with a cartesian product (SQL) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 7 | Removed | Missing contribution |
1101000 | quality-rule | Never use SQL queries with a cartesian product (SQL) | Definition | active = true, detached = false | Removed | Missing |
1101002 | quality-rule | Never use SQL queries with a cartesian product on XXL Tables (SQL) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = true, weight = 9 | Removed | Missing contribution |
1101002 | quality-rule | Never use SQL queries with a cartesian product on XXL Tables (SQL) | Definition | active = true, detached = false | Removed | Missing |
1101004 | quality-rule | Avoid non-indexed SQL queries | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 9 | Removed | Missing contribution |
1101004 | quality-rule | Avoid non-indexed SQL queries | Definition | active = true, detached = false | Removed | Missing |
1101006 | quality-rule | Avoid non-indexed XXL SQL queries | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = true, weight = 9 | Removed | Missing contribution |
1101006 | quality-rule | Avoid non-indexed XXL SQL queries | Definition | active = true, detached = false | Removed | Missing |
1101008 | quality-rule | Avoid non-SARGable queries | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 3 | Removed | Missing contribution |
1101008 | quality-rule | Avoid non-SARGable queries | Definition | active = true, detached = false | Removed | Missing |
1101010 | quality-rule | Avoid NATURAL JOIN queries | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 5 | Removed | Missing contribution |
1101010 | quality-rule | Avoid NATURAL JOIN queries | Definition | active = true, detached = false | Removed | Missing |
1101012 | quality-rule | Specify column names instead of column numbers in ORDER BY clauses | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 3 | Removed | Missing contribution |
1101012 | quality-rule | Specify column names instead of column numbers in ORDER BY clauses | Definition | active = true, detached = false | Removed | Missing |
1101014 | quality-rule | Avoid queries using old style join convention instead of ANSI-Standard joins (SQL) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 4 | Removed | Missing contribution |
1101014 | quality-rule | Avoid queries using old style join convention instead of ANSI-Standard joins (SQL) | Definition | active = true, detached = false | Removed | Missing |
1101016 | quality-rule | Avoid Artifacts with too many parameters (SQL) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 4 | Removed | Missing contribution |
1101016 | quality-rule | Avoid Artifacts with too many parameters (SQL) | Definition | active = true, detached = false | Removed | Missing |
1101018 | quality-rule | Avoid using the GROUP BY clause | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 5 | Removed | Missing contribution |
1101018 | quality-rule | Avoid using the GROUP BY clause | Definition | active = true, detached = false | Removed | Missing |
1101020 | quality-rule | Avoid using quoted identifiers | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | critical = false, weight = 3 | Removed | Missing contribution |
1101020 | quality-rule | Avoid using quoted identifiers | Definition | active = true, detached = false | Removed | Missing |
1101022 | quality-rule | Avoid Tables without Primary Key (SQL) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = true, weight = 5 | Removed | Missing contribution |
1101022 | quality-rule | Avoid Tables without Primary Key (SQL) | Definition | active = true, detached = false | Removed | Missing |
1101024 | quality-rule | Avoid using dynamic SQL in SQL Artifacts | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 5 | Removed | Missing contribution |
1101024 | quality-rule | Avoid using dynamic SQL in SQL Artifacts | Definition | active = true, detached = false | Removed | Missing |
1101026 | quality-rule | Always define column names when inserting values | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | critical = false, weight = 5 | Removed | Missing contribution |
1101026 | quality-rule | Always define column names when inserting values | Definition | active = true, detached = false | Removed | Missing |
1101028 | quality-rule | Use MINUS or EXCEPT operator instead of NOT EXISTS and NOT IN subqueries | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 5 | Removed | Missing contribution |
1101028 | quality-rule | Use MINUS or EXCEPT operator instead of NOT EXISTS and NOT IN subqueries | Definition | active = true, detached = false | Removed | Missing |
1101030 | quality-rule | Avoid Artifacts with queries on too many Tables and/or Views | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 7 | Removed | Missing contribution |
1101030 | quality-rule | Avoid Artifacts with queries on too many Tables and/or Views | Definition | active = true, detached = false | Removed | Missing |
1101032 | quality-rule | Avoid exists and not exists independent clauses (SQL) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = true, weight = 6 | Removed | Missing contribution |
1101032 | quality-rule | Avoid exists and not exists independent clauses (SQL) | Definition | active = true, detached = false | Removed | Missing |
1101034 | quality-rule | DISTINCT should not be used in SQL SELECT statements | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 5 | Removed | Missing contribution |
1101034 | quality-rule | DISTINCT should not be used in SQL SELECT statements | Definition | active = true, detached = false | Removed | Missing |
1101036 | quality-rule | Use ANSI standard operators in SQL WHERE clauses | Quality Contribution to 'Architecture - OS and Platform Independence' (61004) | critical = false, weight = 3 | Removed | Missing contribution |
1101036 | quality-rule | Use ANSI standard operators in SQL WHERE clauses | Definition | active = true, detached = false | Removed | Missing |
1101038 | quality-rule | Replace OR conditions testing equality on the same identifier in SQL WHERE clauses by an IN test condition | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 5 | Removed | Missing contribution |
1101038 | quality-rule | Replace OR conditions testing equality on the same identifier in SQL WHERE clauses by an IN test condition | Definition | active = true, detached = false | Removed | Missing |
1101040 | quality-rule | Avoid empty catch blocks (SQL) | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | critical = true, weight = 7 | Removed | Missing contribution |
1101040 | quality-rule | Avoid empty catch blocks (SQL) | Definition | active = true, detached = false | Removed | Missing |
1101042 | quality-rule | Table naming convention - character set control (SQL) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 1 | Removed | Missing contribution |
1101042 | quality-rule | Table naming convention - character set control (SQL) | Definition | active = true, detached = false | Removed | Missing |
1101044 | quality-rule | View naming convention - character set control (SQL) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 1 | Removed | Missing contribution |
1101044 | quality-rule | View naming convention - character set control (SQL) | Definition | active = true, detached = false | Removed | Missing |
1101046 | quality-rule | Package naming convention - prefix control (SQL) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 5 | Removed | Missing contribution |
1101046 | quality-rule | Package naming convention - prefix control (SQL) | Definition | active = false, detached = false | Removed | Missing |
1101048 | quality-rule | Package Function naming convention - prefix control (SQL) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 5 | Removed | Missing contribution |
1101048 | quality-rule | Package Function naming convention - prefix control (SQL) | Definition | active = false, detached = false | Removed | Missing |
1101050 | quality-rule | Package Stored Procedure naming convention - prefix control (SQL) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 5 | Removed | Missing contribution |
1101050 | quality-rule | Package Stored Procedure naming convention - prefix control (SQL) | Definition | active = false, detached = false | Removed | Missing |
1101052 | quality-rule | Use WHEN OTHERS in exception management (SQL) | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | critical = true, weight = 8 | Removed | Missing contribution |
1101052 | quality-rule | Use WHEN OTHERS in exception management (SQL) | Definition | active = true, detached = false | Removed | Missing |
1101054 | quality-rule | Never use WHEN OTHER THEN NULL | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | critical = true, weight = 8 | Removed | Missing contribution |
1101054 | quality-rule | Never use WHEN OTHER THEN NULL | Definition | active = true, detached = false | Removed | Missing |
1101056 | quality-rule | Avoid large Tables - too many columns (SQL) | Quality Contribution to 'Volume - Number of Components' (61022) | critical = false, weight = 6 | Removed | Missing contribution |
1101056 | quality-rule | Avoid large Tables - too many columns (SQL) | Definition | active = true, detached = false | Removed | Missing |
1101058 | quality-rule | Do not mix ANSI and non-ANSI JOIN syntax in the same query | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 4 | Removed | Missing contribution |
1101058 | quality-rule | Do not mix ANSI and non-ANSI JOIN syntax in the same query | Definition | active = true, detached = false | Removed | Missing |
1101060 | quality-rule | LIKE operator should not start with a wildcard character | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 4 | Removed | Missing contribution |
1101060 | quality-rule | LIKE operator should not start with a wildcard character | Definition | active = true, detached = false | Removed | Missing |
1101062 | quality-rule | Use at most one statement per line (SQL) | Quality Contribution to 'Documentation - Style Conformity' (61006) | critical = false, weight = 1 | Removed | Missing contribution |
1101062 | quality-rule | Use at most one statement per line (SQL) | Definition | active = true, detached = false | Removed | Missing |
1101064 | quality-rule | Avoid cascading Triggers (SQL) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 4 | Removed | Missing contribution |
1101064 | quality-rule | Avoid cascading Triggers (SQL) | Definition | active = true, detached = false | Removed | Missing |
1101066 | quality-rule | Avoid improperly written triangular joins with XXL tables | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 4 | Removed | Missing contribution |
1101066 | quality-rule | Avoid improperly written triangular joins with XXL tables | Definition | active = true, detached = false | Removed | Missing |
1101068 | quality-rule | Avoid synonym with both private and public definition | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 1 | Removed | Missing contribution |
1101068 | quality-rule | Avoid synonym with both private and public definition | Definition | active = true, detached = false | Removed | Missing |
1101070 | quality-rule | Avoid explicit comparison with NULL | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 4 | Removed | Missing contribution |
1101070 | quality-rule | Avoid explicit comparison with NULL | Definition | active = true, detached = false | Removed | Missing |
1101072 | quality-rule | Tables should be aliased | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | critical = false, weight = 4 | Removed | Missing contribution |
1101072 | quality-rule | Tables should be aliased | Definition | active = true, detached = false | Removed | Missing |
1101074 | quality-rule | Tables aliases should not end with a numeric suffix | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | critical = false, weight = 4 | Removed | Missing contribution |
1101074 | quality-rule | Tables aliases should not end with a numeric suffix | Definition | active = true, detached = false | Removed | Missing |
1101076 | quality-rule | Column references should be qualified | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | critical = false, weight = 4 | Removed | Missing contribution |
1101076 | quality-rule | Column references should be qualified | Definition | active = true, detached = false | Removed | Missing |
1101078 | quality-rule | Prefer PRIVATE to PUBLIC synonym | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 1 | Removed | Missing contribution |
1101078 | quality-rule | Prefer PRIVATE to PUBLIC synonym | Definition | active = true, detached = false | Removed | Missing |
1101080 | quality-rule | Avoid orphaned synonyms | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | critical = false, weight = 1 | Removed | Missing contribution |
1101080 | quality-rule | Avoid orphaned synonyms | Definition | active = true, detached = false | Removed | Missing |
1101082 | quality-rule | Avoid looping chain of synonyms | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 1 | Removed | Missing contribution |
1101082 | quality-rule | Avoid looping chain of synonyms | Definition | active = true, detached = false | Removed | Missing |
1101084 | quality-rule | Avoid Cursors inside a loop (SQL) | Quality Contribution to 'Efficiency - Expensive Calls in Loops' (66068) | critical = true, weight = 7 | Removed | Missing contribution |
1101084 | quality-rule | Avoid Cursors inside a loop (SQL) | Definition | active = true, detached = false | Removed | Missing |
1101086 | quality-rule | VARCHAR2 and NVARCHAR2 should be used | Quality Contribution to 'Efficiency - Memory, Network and Disk Space Management' (61018) | critical = false, weight = 2 | Removed | Missing contribution |
1101086 | quality-rule | VARCHAR2 and NVARCHAR2 should be used | Definition | active = true, detached = false | Removed | Missing |
1101088 | quality-rule | LONG and LONG RAW datatypes should no longer be used | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 8 | Removed | Missing contribution |
1101088 | quality-rule | LONG and LONG RAW datatypes should no longer be used | Definition | active = true, detached = false | Removed | Missing |
AIP 8.3.37 - 8.3.38
This section lists the results of a comparison between a CAST AIP 8.3.37 Assessment Model and a CAST AIP 8.3.38 Assessment Model. You can download the original compare_8337_8338.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.37 Assessment Model | Change | CAST 8.3.38 Assessment Model |
8032 | quality-rule | Avoid using a break statement in 'for' loops | Documentation english | description = ...at contains multiple 'break' statement in a 'for' loop. 'break' statements locat... | Updated | description = ...at contain a 'break' statement in a 'for' loop. 'break' statements located in ne... |
8032 | quality-rule | Avoid using a break statement in 'for' loops | Documentation english | name = ...oid using multiple break statement in 'for' loops | Updated | name = ...oid using a break statement in 'for' loops |
8032 | quality-rule | Avoid using a break statement in 'for' loops | Documentation english | rationale = ...ad. Using many 'break' statements in 'for' loops makes them more difficult to re... | Updated | rationale = ...ad. Using too many 'break' statements in 'for' loops makes them more difficult t... |
8032 | quality-rule | Avoid using a break statement in 'for' loops | Documentation english | reference = MISRA C++:2008, 6-6-4 - For any iteration statement there shall be no more than ... | Removed | Missing |
8032 | quality-rule | Avoid using a break statement in 'for' loops | Documentation english | remediationSample = for (int i = 0; i < 10; i++) \n{ \n if ( ... ) \n {\n // do some... | Removed | Missing |
8032 | quality-rule | Avoid using a break statement in 'for' loops | Documentation english | sample = ... \n if ( ... ) \n {\n // do something..\n\n break; // compliant... | Updated | sample = ... \n if (true) \n {\n break; // Violation\n }\n // ...\n} |
8556 | quality-rule | 'XML GENERATE' should be used with 'WITH ENCODING' | Definition | Missing | Added | active = true, detached = false |
8556 | quality-rule | 'XML GENERATE' should be used with 'WITH ENCODING' | Quality Contribution to 'Architecture - Multi-Layers and Data Access' (61001) | Missing contribution | Added | critical = false, weight = 7 |
8558 | quality-rule | Avoid using XML PARSE without 'VALIDATING' | Definition | Missing | Added | active = true, detached = false |
8558 | quality-rule | Avoid using XML PARSE without 'VALIDATING' | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 8 |
AIP 8.3.36 - 8.3.37
This section lists the results of a comparison between a CAST AIP 8.3.36 Assessment Model and a CAST AIP 8.3.37 Assessment Model. You can download the original compare_8336_8337.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.36 Assessment Model | Change | CAST 8.3.37 Assessment Model |
7796 | quality-rule | Avoid Classes with a High Lack of Cohesion - variant | Operation | localSiteCountTotal = DIT_MANY_CLASS | Updated | localSiteCountTotal = DIT_LCOM_CLASS |
7798 | quality-rule | Avoid Classes with a High Lack of Cohesion | Operation | localSiteCountTotal = DIT_MANY_CLASS | Updated | localSiteCountTotal = DIT_LCOM_CLASS |
AIP 8.3.35 - 8.3.36
This section lists the results of a comparison between a CAST AIP 8.3.35 Assessment Model and a CAST AIP 8.3.36 Assessment Model. You can download the original compare_8335_8336.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.35 Assessment Model | Change | CAST 8.3.36 Assessment Model |
8116 | quality-rule | Avoid calling system function (CALL 'cfunc') | Documentation english | sample = ... CALL 'SYSTEM' ID 'COMMAND' FIELD command \n ID 'TAB' FIELD tabl-... | Updated | sample = ... CALL 'C_SAPGPARAM' ID 'NAME' FIELD 'SAPDBHOST'\n ID 'V... |
8534 | quality-rule | Avoid XQuery injection through API requests | Documentation english | sample = ...ring login = request.getParameter("login");\nXQDataSource dataSource = new SaxonX... | Updated | sample = ...ring login; // value given by an API request\nXQDataSource dataSource = new Saxon... |
8536 | quality-rule | Avoid expression language injection | Definition | Missing | Added | active = true, detached = false |
8536 | quality-rule | Avoid expression language injection | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8538 | quality-rule | Avoid second order expression language injection | Definition | Missing | Added | active = true, detached = false |
8538 | quality-rule | Avoid second order expression language injection | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8540 | quality-rule | Avoid expression language injection through API requests | Definition | Missing | Added | active = true, detached = false |
8540 | quality-rule | Avoid expression language injection through API requests | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8542 | quality-rule | Avoid debug forging | Definition | Missing | Added | active = true, detached = false |
8542 | quality-rule | Avoid debug forging | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = false, weight = 8 |
8544 | quality-rule | Avoid debug forging through API requests | Definition | Missing | Added | active = true, detached = false |
8544 | quality-rule | Avoid debug forging through API requests | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = false, weight = 8 |
8546 | quality-rule | Avoid using ABAP command CALL 'SYSTEM' | Definition | Missing | Added | active = true, detached = false |
8546 | quality-rule | Avoid using ABAP command CALL 'SYSTEM' | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8548 | quality-rule | Avoid using ABAP command INSERT REPORT | Definition | Missing | Added | active = true, detached = false |
8548 | quality-rule | Avoid using ABAP command INSERT REPORT | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8550 | quality-rule | Avoid using ABAP command GENERATE SUBROUTINE POOL | Definition | Missing | Added | active = true, detached = false |
8550 | quality-rule | Avoid using ABAP command GENERATE SUBROUTINE POOL | Quality Contribution to 'Programming Practices - Structuredness' (61024) | Missing contribution | Added | critical = false, weight = 5 |
8552 | quality-rule | Avoid using ABAP command OPEN DATASET with the FILTER addition | Definition | Missing | Added | active = true, detached = false |
8552 | quality-rule | Avoid using ABAP command OPEN DATASET with the FILTER addition | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 8 |
8554 | quality-rule | Avoid using insufficient random generator | Definition | Missing | Added | active = true, detached = false |
8554 | quality-rule | Avoid using insufficient random generator | Quality Contribution to 'Secure Coding - Weak Security Features' (66064) | Missing contribution | Added | critical = false, weight = 8 |
AIP 8.3.34 - 8.3.35
This section lists the results of a comparison between a CAST AIP 8.3.34 Assessment Model and a CAST AIP 8.3.35 Assessment Model. You can download the original compare_8334_8335.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.34 Assessment Model | Change | CAST 8.3.35 Assessment Model |
7742 | quality-rule | Avoid SQL injection | Documentation english | name = Avoid SQL injection vulnerabilities | Updated | name = Avoid SQL injection |
7746 | quality-rule | Avoid LDAP injection | Documentation english | name = Avoid LDAP injection vulnerabilities | Updated | name = Avoid LDAP injection |
7748 | quality-rule | Avoid OS command injection | Documentation english | name = Avoid OS command injection vulnerabilities | Updated | name = Avoid OS command injection |
7750 | quality-rule | Avoid XPath injection | Documentation english | name = Avoid XPath injection vulnerabilities | Updated | name = Avoid XPath injection |
7752 | quality-rule | Avoid file path manipulation | Documentation english | name = Avoid file path manipulation vulnerabilities | Updated | name = Avoid file path manipulation |
8044 | quality-rule | Avoid log forging | Documentation english | name = Avoid log forging vulnerabilities | Updated | name = Avoid log forging |
8044 | quality-rule | Avoid log forging | Documentation english | remediationSample = String val = request.getParameter("value");\ntry {\n int value = Integer.parseI... | Updated | remediationSample = String taintedInput = request.getParameter("value");\ntry {\n int value = Integ... |
8044 | quality-rule | Avoid log forging | Documentation english | sample = String val = request.getParameter("value");\ntry {\n int value = Integer.parseI... | Updated | sample = String taintedInput = request.getParameter("value");\ntry {\n int value = Integ... |
8436 | quality-rule | Avoid thread injection | Documentation english | name = Avoid thread injection vulnerabilities | Updated | name = Avoid thread injection |
8490 | quality-rule | Avoid SQL injection through API requests | Documentation english | name = ...injection vulnerabilities through API requests | Updated | name = ...injection through API requests |
8492 | quality-rule | Avoid LDAP injection through API requests | Documentation english | name = ...injection vulnerabilities through API requests | Updated | name = ...injection through API requests |
8494 | quality-rule | Avoid OS command injection through API requests | Documentation english | name = ...injection vulnerabilities through API requests | Updated | name = ...injection through API requests |
8498 | quality-rule | Avoid thread injection through API requests | Documentation english | name = ...injection vulnerabilities through API requests | Updated | name = ...injection through API requests |
8504 | quality-rule | Avoid XPath injection through API requests | Documentation english | name = ...injection vulnerabilities through API requests | Updated | name = ...injection through API requests |
8506 | quality-rule | Avoid file path manipulation through API requests | Documentation english | name = ...ipulation vulnerabilities through API requests | Updated | name = ...ipulation through API requests |
8508 | quality-rule | Avoid log forging through API requests | Documentation english | name = ...g forging vulnerabilities through API requests | Updated | name = ...g forging through API requests |
8508 | quality-rule | Avoid log forging through API requests | Documentation english | remediationSample = String val; // value given by an API request\ntry {\n int value = Integer.parse... | Updated | remediationSample = String taintedInput; // value given by an API request\ntry {\n int value = Inte... |
8508 | quality-rule | Avoid log forging through API requests | Documentation english | sample = String val; // value given by an API request\ntry {\n int value = Integer.parse... | Updated | sample = String taintedInput; // value given by an API request\ntry {\n int value = Inte... |
8520 | quality-rule | Avoid second order regular expression injection | Documentation english | name = ...ond order Regular expression injection | Updated | name = ...ond order regular expression injection |
8522 | quality-rule | Avoid regular expression injection through API requests | Documentation english | name = Avoid Regular expression injection through API requests | Updated | name = Avoid regular expression injection through API requests |
8530 | quality-rule | Avoid XQuery injection | Definition | Missing | Added | active = true, detached = false |
8530 | quality-rule | Avoid XQuery injection | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8532 | quality-rule | Avoid second order XQuery injection | Definition | Missing | Added | active = true, detached = false |
8532 | quality-rule | Avoid second order XQuery injection | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8534 | quality-rule | Avoid XQuery injection through API requests | Definition | Missing | Added | active = true, detached = false |
8534 | quality-rule | Avoid XQuery injection through API requests | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
AIP 8.3.33 - 8.3.34
This section lists the results of a comparison between a CAST AIP 8.3.33 Assessment Model and a CAST AIP 8.3.34 Assessment Model. You can download the original compare_8333_8334.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.33 Assessment Model | Change | CAST 8.3.34 Assessment Model |
1596 | quality-rule | Avoid using "nullable" Columns except in the last position in a Table | Documentation english | associatedValueName = Column name | Removed | Missing |
1596 | quality-rule | Avoid using "nullable" Columns except in the last position in a Table | Diagnosis | diagnosisValueType = text | Updated | diagnosisValueType = no-value |
7740 | quality-rule | Avoid HTTP response splitting | Documentation english | remediationSample = Sample 1\n// include validation code for rawInputData --> cleanData\nresponse.add... | Updated | remediationSample = //Sample 1\n// A possibility is to sanitize the rawInputData variable\nimport org.... |
7740 | quality-rule | Avoid HTTP response splitting | Documentation english | sample = Sample 1\nresponse.addHeader(HEADER_NAME, rawInputData);\n\nSample 2\nString header ... | Updated | sample = //Sample 1\nresponse.addHeader(HEADER_NAME, rawInputData);\n\n//Sample 2\nString hea... |
8484 | quality-rule | Avoid HTTP response splitting through API requests | Documentation english | remediationSample = Sample 1\n// include validation code for rawInputData --> cleanData\nresponse.add... | Updated | remediationSample = //Sample 1\n// A possibility is to sanitize the rawInputData variable\nimport org.... |
8484 | quality-rule | Avoid HTTP response splitting through API requests | Documentation english | sample = Sample 1\nresponse.addHeader(HEADER_NAME, rawInputData);\n\nSample 2\nString header ... | Updated | sample = //Sample 1\nresponse.addHeader(HEADER_NAME, rawInputData);\n\n//Sample 2\nString hea... |
AIP 8.3.32 - 8.3.33
This section lists the results of a comparison between a CAST AIP 8.3.32 Assessment Model and a CAST AIP 8.3.33 Assessment Model. You can download the original compare_8332_8333.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.32 Assessment Model | Change | CAST 8.3.33 Assessment Model |
8034 | quality-rule | Working-Storage variables must be initialized before being read | Documentation english | name = Variables defined in Working-Storage section must be initialized before to be re... | Updated | name = Working-Storage variables must be initialized before being read |
AIP 8.3.31 - 8.3.32
This section lists the results of a comparison between a CAST AIP 8.3.31 Assessment Model and a CAST AIP 8.3.32 Assessment Model. You can download the original compare_8331_8332.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.31 Assessment Model | Change | CAST 8.3.32 Assessment Model |
8032 | quality-rule | Avoid using multiple break statement in 'for' loops | Documentation english | description = ...at contain a 'break' statement in a 'for' loop. 'break' statements located in ne... | Updated | description = ...at contains multiple 'break' statement in a 'for' loop. 'break' statements locat... |
8032 | quality-rule | Avoid using multiple break statement in 'for' loops | Documentation english | name = ...oid using a break statement in 'for' loops | Updated | name = ...oid using multiple break statement in 'for' loops |
8032 | quality-rule | Avoid using multiple break statement in 'for' loops | Documentation english | rationale = ...ad. Using too many 'break' statements in 'for' loops makes them more difficult t... | Updated | rationale = ...ad. Using many 'break' statements in 'for' loops makes them more difficult to re... |
8032 | quality-rule | Avoid using multiple break statement in 'for' loops | Documentation english | sample = ... \n if (true) \n {\n break; // Violation\n }\n // ...\n} | Updated | sample = ... \n if ( ... ) \n {\n // do something..\n\n break; // compliant... |
8032 | quality-rule | Avoid using multiple break statement in 'for' loops | Documentation english | Missing | Added | reference = MISRA C++:2008, 6-6-4 - For any iteration statement there shall be no more than ... |
8032 | quality-rule | Avoid using multiple break statement in 'for' loops | Documentation english | Missing | Added | remediationSample = for (int i = 0; i < 10; i++) \n{ \n if ( ... ) \n {\n // do some... |
AIP 8.3.30 - 8.3.31
This section lists the results of a comparison between a CAST AIP 8.3.30 Assessment Model and a CAST AIP 8.3.31 Assessment Model. You can download the original compare_8330_8331.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.30 Assessment Model | Change | CAST 8.3.31 Assessment Model |
7266 | quality-rule | Call 'base.Dispose()' or 'MyBase.Finalize()' in the "finally" block of 'Dispose(bool)' methods | Documentation english | description = ...e pattern (defined here: http://msdn.microsoft.com/en-us/library/b1yfkh5e(VS.71)... | Updated | description = ...e pattern that is 'Dispose(bool)' methods. You should keep it\ninside try of try/... |
7266 | quality-rule | Call 'base.Dispose()' or 'MyBase.Finalize()' in the "finally" block of 'Dispose(bool)' methods | Documentation english | reference = Resource Management in .NET\nby Krzysztof Cwalina\nProgram Manager - Microsoft .NE... | Updated | reference = https://docs.microsoft.com/en-us/dotnet/standard/garbage-collection/implementing... |
7266 | quality-rule | Call 'base.Dispose()' or 'MyBase.Finalize()' in the "finally" block of 'Dispose(bool)' methods | Documentation english | Missing | Added | output = This report lists all Dispose methods with no try/finally block or with no call ... |
7266 | quality-rule | Call 'base.Dispose()' or 'MyBase.Finalize()' in the "finally" block of 'Dispose(bool)' methods | Documentation english | Missing | Added | remediation = keep dispose(bool) method in try-finally block and inside finally block make use... |
7266 | quality-rule | Call 'base.Dispose()' or 'MyBase.Finalize()' in the "finally" block of 'Dispose(bool)' methods | Documentation english | Missing | Added | sample = protected virtual void Dispose(bool disposing) \n{\n if (disposing) \n {\n ... |
7526 | quality-rule | Avoid using hard-coded paths | Documentation english | description = ...using hardcoded paths instead of using logical file paths | Updated | description = ...using hard-coded paths instead of using logical file paths |
7526 | quality-rule | Avoid using hard-coded paths | Documentation english | name = ...using hardcoded paths | Updated | name = ...using hard-coded paths |
7526 | quality-rule | Avoid using hard-coded paths | Documentation english | rationale = ...ad of hardcoded paths. | Updated | rationale = ...ad of hard-coded paths. |
7526 | quality-rule | Avoid using hard-coded paths | Documentation english | remediation = ...ad of hardcoded paths and the standard ABAP function "FILE_GET_NAME" instead. | Updated | remediation = ...ad of hard-coded paths and the standard ABAP function "FILE_GET_NAME" instead. |
8160 | quality-rule | Check PCB status code after DLI queries | Documentation english | description = ...ode after accessing an IMS database. | Updated | description = ...ode after calling the DL/I call. |
8160 | quality-rule | Check PCB status code after DLI queries | Documentation english | rationale = When accessing IMS databases it is recommended to check the return code based on... | Updated | rationale = When calling the DL/I call it is recommended to check the return code based on t... |
8430 | quality-rule | Avoid using hard-coded seed or no seed at all for random values generation | Documentation english | name = ...using hardcoded seed or no seed at all for random values generation | Updated | name = ...using hard-coded seed or no seed at all for random values generation |
AIP 8.3.29 - 8.3.30
This section lists the results of a comparison between a CAST AIP 8.3.29 Assessment Model and a CAST AIP 8.3.30 Assessment Model. You can download the original compare_8329_8330.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.29 Assessment Model | Change | CAST 8.3.30 Assessment Model |
7860 | quality-rule | Avoid unreferenced Functions and Procedures | Documentation english | description = ...Functions that are not referenced except main.\n\nNotes: \n- JavaScript eventHandle... | Updated | description = ...Functions and Procedures that are not referenced except main.\n\nNotes: \n- JavaScr... |
7860 | quality-rule | Avoid unreferenced Functions and Procedures | Documentation english | name = Avoid unreferenced Functions | Updated | name = Avoid unreferenced Functions and Procedures |
7860 | quality-rule | Avoid unreferenced Functions and Procedures | Documentation english | output = ... Functions\nIt provides the following information:\n Function full name. | Updated | output = ... Functions / Procedures\nIt provides the following information:\n Function / Proc... |
7860 | quality-rule | Avoid unreferenced Functions and Procedures | Documentation english | remediation = ... Function is truly unnecessary.\nRemove Functions that are not used. | Updated | remediation = ... Function / Procedure is truly unnecessary.\nRemove Functions / Procedures that a... |
7860 | quality-rule | Avoid unreferenced Functions and Procedures | Documentation english | Missing | Added | reference = CISQ/OMG : ASCMM-MNT-20 (Unreachable Named Callable or Method Control Element)\nh... |
AIP 8.3.28 - 8.3.29
This section lists the results of a comparison between a CAST AIP 8.3.28 Assessment Model and a CAST AIP 8.3.29 Assessment Model. You can download the original compare_8328_8329.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.28 Assessment Model | Change | CAST 8.3.29 Assessment Model |
3570 | quality-rule | DELETED: Avoid using Keywords as names | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 2 | Removed | Missing contribution |
7742 | quality-rule | Avoid SQL injection vulnerabilities | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
7746 | quality-rule | Avoid LDAP injection vulnerabilities | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
7748 | quality-rule | Avoid OS command injection vulnerabilities | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
7750 | quality-rule | Avoid XPath injection vulnerabilities | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
7752 | quality-rule | Avoid file path manipulation vulnerabilities | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
7832 | quality-rule | Avoid unreferenced Classes | Technologies | [ABAP, Visual Basic, C++, JEE] | Updated | Removed: [JEE] |
8044 | quality-rule | Avoid log forging vulnerabilities | Documentation english | output = - Method full name - Call stack from user input source down to the target log me... | Updated | output = List all methods that make resource calls forged by user input It provides the ... |
8044 | quality-rule | Avoid log forging vulnerabilities | Documentation english | reference = ....org/data/definitions/117.html Open Web Application Security Project (OWASP) ht... | Updated | reference = ....org/data/definitions/117.html |
8098 | quality-rule | Avoid uncontrolled format string | Documentation english | output = ...ods that miss calling the required input validation calls It provides the foll... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
8238 | quality-rule | Avoid mixing trusted and untrusted data in HTTP requests | Documentation english | remediationSample = // Never mix trusted and untrusted data | Updated | remediationSample = // The goal is to never mix trusted and untrusted data. // There is no generic s... |
8240 | quality-rule | Avoid using unsecured cookie | Documentation english | description = The 'Secure' attribute for sensitive cookies in HTTPS sessions is not set, which... | Updated | description = This rule will check in the source code if the 'Secure' attribute for sensitive ... |
8242 | quality-rule | Avoid using insufficient random values for cookies | Documentation english | reference = ....org/data/definitions/330.html Open Web Application Security Project (OWASP) ht... | Updated | reference = ....org/data/definitions/330.html |
8408 | quality-rule | Avoid reflected cross-site scripting (non persistent) | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
8410 | quality-rule | Avoid cross-site scripting (persistent) | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
8414 | quality-rule | Avoid weak cryptographic algorithm | Documentation english | output = List all methods that miss calling the required input validation calls It provi... | Updated | output = Associated to each violation, the following information is provided: - The numbe... |
8416 | quality-rule | Avoid use of a reversible one-way hash | Documentation english | output = List all methods that miss calling the required input validation calls It provi... | Updated | output = Associated to each violation, the following information is provided: - The numbe... |
8418 | quality-rule | Avoid NoSQL injection | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
8420 | quality-rule | Avoid second order SQL injection | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
8434 | quality-rule | Avoid process control | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
8436 | quality-rule | Avoid thread injection vulnerabilities | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
8438 | quality-rule | Avoid code injection | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
8440 | quality-rule | Avoid reflection injection | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
8442 | quality-rule | Avoid resource injection | Documentation english | description = ...he intended sphere of control. | Updated | description = ...he intended sphere of control. Resources may be sockets or connection strings. |
8442 | quality-rule | Avoid resource injection | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
8442 | quality-rule | Avoid resource injection | Documentation english | remediationSample = ... int result = VALUE; serverSocket = new ServerSocket(result); ... | Updated | remediationSample = Using "socket injection" (JEE) ______________________________ ... int result = V... |
8442 | quality-rule | Avoid resource injection | Documentation english | sample = ... String value = request.getParameter("value"); int result = Integer.parseInt(... | Updated | sample = Using "socket injection" (JEE) ______________________________ ... String value =... |
8444 | quality-rule | Avoid resource URL manipulation | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
8446 | quality-rule | Avoid URL redirection to untrusted site | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
8482 | quality-rule | Avoid cross-site scripting through API requests | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
8484 | quality-rule | Avoid HTTP response splitting through API requests | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
8486 | quality-rule | Avoid resource injection through API requests | Documentation english | description = ...he intended sphere of control. | Updated | description = ...he intended sphere of control. Resources may be sockets or connection strings. |
8486 | quality-rule | Avoid resource injection through API requests | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
8486 | quality-rule | Avoid resource injection through API requests | Documentation english | remediationSample = ... int result = VALUE; serverSocket = new ServerSocket(result); ... | Updated | remediationSample = Using "socket injection" (JEE) ______________________________ ... int result = V... |
8486 | quality-rule | Avoid resource injection through API requests | Documentation english | sample = ... // value is the String given by an API request int result = Integer.parseInt... | Updated | sample = Using "socket injection" (JEE) ______________________________ ... // value is th... |
8488 | quality-rule | Avoid resource URL manipulation through API requests | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
8490 | quality-rule | Avoid SQL injection vulnerabilities through API requests | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
8492 | quality-rule | Avoid LDAP injection vulnerabilities through API requests | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
8494 | quality-rule | Avoid OS command injection vulnerabilities through API requests | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
8496 | quality-rule | Avoid process control through API requests | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
8498 | quality-rule | Avoid thread injection vulnerabilities through API requests | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
8500 | quality-rule | Avoid code injection through API requests | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
8502 | quality-rule | Avoid reflection injection through API requests | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
8504 | quality-rule | Avoid XPath injection vulnerabilities through API requests | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
8506 | quality-rule | Avoid file path manipulation vulnerabilities through API requests | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
8508 | quality-rule | Avoid log forging vulnerabilities through API requests | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
8508 | quality-rule | Avoid log forging vulnerabilities through API requests | Documentation english | reference = ....org/data/definitions/117.html Open Web Application Security Project (OWASP) ht... | Updated | reference = ....org/data/definitions/117.html |
8510 | quality-rule | Avoid uncontrolled format string through API requests | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
8512 | quality-rule | Avoid mixing trusted and untrusted data in HTTP requests through API requests | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
8514 | quality-rule | Avoid NoSQL injection through API requests | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
8516 | quality-rule | Avoid URL redirection to untrusted site through API requests | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
8518 | quality-rule | Avoid Regular expression injection | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
8520 | quality-rule | Avoid second order Regular expression injection | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
8522 | quality-rule | Avoid Regular expression injection through API requests | Documentation english | output = ...ods that miss calling the required input validation calls It provides the follo... | Updated | output = ...ods that make resource calls forged by user input It provides the following inf... |
8524 | quality-rule | Avoid deserialization injection | Definition | Missing | Added | active = true, detached = false |
8524 | quality-rule | Avoid deserialization injection | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8526 | quality-rule | Avoid second order deserialization injection | Definition | Missing | Added | active = true, detached = false |
8526 | quality-rule | Avoid second order deserialization injection | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8528 | quality-rule | Avoid deserialization injection through API requests | Definition | Missing | Added | active = true, detached = false |
8528 | quality-rule | Avoid deserialization injection through API requests | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
AIP 8.3.27 - 8.3.28
No change between a CAST AIP 8.3.27 Assessment Model and a CAST AIP 8.3.28 Assessment Model.
AIP 8.3.26 - 8.3.27
This section lists the results of a comparison between a CAST AIP 8.3.26 Assessment Model and a CAST AIP 8.3.27 Assessment Model. You can download the original compare_8326_8327.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.26 Assessment Model | Change | CAST 8.3.27 Assessment Model |
7792 | quality-rule | Avoid Classes with a High Number Of Children | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of classes |
7834 | quality-rule | Avoid undocumented Interfaces | Technologies | [ABAP, C++, C#, VB.NET, .NET (Legacy Analyzer)] | Updated | Added: [JEE] |
7838 | quality-rule | Avoid undocumented Methods | Technologies | [ABAP, Visual Basic, PowerBuilder, C++, C#, VB.NET, .NET (Legacy Analyzer)] | Updated | Added: [JEE] |
7844 | quality-rule | Avoid undocumented Classes | Technologies | [ABAP, Visual Basic, C++, C#, VB.NET, .NET (Legacy Analyzer), HTML5] | Updated | Added: [JEE] |
8408 | quality-rule | Avoid reflected cross-site scripting (non persistent) | Documentation english | rationale = ...ser. The most dangerous web application vulnerabilty is known as cross-site scr... | Updated | rationale = ...ser. The cross-site scripting (XSS) is a dangerous web application vulnerabilit... |
8478 | quality-rule | Avoid Buffer Overruns when using ADD, SUBTRACT, MULTIPLY, DIVIDE & COMPUTE statement inside a loop | Documentation english | remediation = ...these statments inside a loop. | Updated | remediation = ...these statements inside a loop. |
8482 | quality-rule | Avoid cross-site scripting through API requests | Documentation english | rationale = ...ser. The most dangerous web application vulnerabilty is known as cross-site scr... | Updated | rationale = ...ser. The cross-site scripting (XSS) is a dangerous web application vulnerabilit... |
AIP 8.3.25 - 8.3.26
This section lists the results of a comparison between a CAST AIP 8.3.25 Assessment Model and a CAST AIP 8.3.26 Assessment Model. You can download the original compare_8325_8326.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.25 Assessment Model | Change | CAST 8.3.26 Assessment Model |
8504 | quality-rule | Avoid XPath injection vulnerabilities through API requests | Technologies | [C#, VB.NET] | Updated | Added: [JEE] |
8516 | quality-rule | Avoid URL redirection to untrusted site through API requests | Technologies | [VB.NET, JEE] | Updated | Added: [C#] |
8518 | quality-rule | Avoid Regular expression injection | Definition | Missing | Added | active = true, detached = false |
8518 | quality-rule | Avoid Regular expression injection | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8520 | quality-rule | Avoid second order Regular expression injection | Definition | Missing | Added | active = true, detached = false |
8520 | quality-rule | Avoid second order Regular expression injection | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8522 | quality-rule | Avoid Regular expression injection through API requests | Definition | Missing | Added | active = true, detached = false |
8522 | quality-rule | Avoid Regular expression injection through API requests | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
AIP 8.3.24 - 8.3.25
This section lists the results of a comparison between a CAST AIP 8.3.24 Assessment Model and a CAST AIP 8.3.25 Assessment Model. You can download the original compare_8324_8325.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.24 Assessment Model | Change | CAST 8.3.25 Assessment Model |
8468 | quality-rule | Program semantic should respect the logic of flow execution | Documentation english | rationale = error-prone | Updated | rationale = The code contains a control flow path that does not reflect the algorithm that t... |
8482 | quality-rule | Avoid cross-site scripting through API requests | Definition | Missing | Added | active = true, detached = false |
8482 | quality-rule | Avoid cross-site scripting through API requests | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8484 | quality-rule | Avoid HTTP response splitting through API requests | Definition | Missing | Added | active = true, detached = false |
8484 | quality-rule | Avoid HTTP response splitting through API requests | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8486 | quality-rule | Avoid resource injection through API requests | Definition | Missing | Added | active = true, detached = false |
8486 | quality-rule | Avoid resource injection through API requests | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8488 | quality-rule | Avoid resource URL manipulation through API requests | Definition | Missing | Added | active = true, detached = false |
8488 | quality-rule | Avoid resource URL manipulation through API requests | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8490 | quality-rule | Avoid SQL injection vulnerabilities through API requests | Definition | Missing | Added | active = true, detached = false |
8490 | quality-rule | Avoid SQL injection vulnerabilities through API requests | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8492 | quality-rule | Avoid LDAP injection vulnerabilities through API requests | Definition | Missing | Added | active = true, detached = false |
8492 | quality-rule | Avoid LDAP injection vulnerabilities through API requests | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8494 | quality-rule | Avoid OS command injection vulnerabilities through API requests | Definition | Missing | Added | active = true, detached = false |
8494 | quality-rule | Avoid OS command injection vulnerabilities through API requests | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8496 | quality-rule | Avoid process control through API requests | Definition | Missing | Added | active = true, detached = false |
8496 | quality-rule | Avoid process control through API requests | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8498 | quality-rule | Avoid thread injection vulnerabilities through API requests | Definition | Missing | Added | active = true, detached = false |
8498 | quality-rule | Avoid thread injection vulnerabilities through API requests | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8500 | quality-rule | Avoid code injection through API requests | Definition | Missing | Added | active = true, detached = false |
8500 | quality-rule | Avoid code injection through API requests | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8502 | quality-rule | Avoid reflection injection through API requests | Definition | Missing | Added | active = true, detached = false |
8502 | quality-rule | Avoid reflection injection through API requests | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8504 | quality-rule | Avoid XPath injection vulnerabilities through API requests | Definition | Missing | Added | active = true, detached = false |
8504 | quality-rule | Avoid XPath injection vulnerabilities through API requests | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8506 | quality-rule | Avoid file path manipulation vulnerabilities through API requests | Definition | Missing | Added | active = true, detached = false |
8506 | quality-rule | Avoid file path manipulation vulnerabilities through API requests | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8508 | quality-rule | Avoid log forging vulnerabilities through API requests | Definition | Missing | Added | active = true, detached = false |
8508 | quality-rule | Avoid log forging vulnerabilities through API requests | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 8 |
8510 | quality-rule | Avoid uncontrolled format string through API requests | Definition | Missing | Added | active = true, detached = false |
8510 | quality-rule | Avoid uncontrolled format string through API requests | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8512 | quality-rule | Avoid mixing trusted and untrusted data in HTTP requests through API requests | Definition | Missing | Added | active = true, detached = false |
8512 | quality-rule | Avoid mixing trusted and untrusted data in HTTP requests through API requests | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8514 | quality-rule | Avoid NoSQL injection through API requests | Definition | Missing | Added | active = true, detached = false |
8514 | quality-rule | Avoid NoSQL injection through API requests | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8516 | quality-rule | Avoid URL redirection to untrusted site through API requests | Definition | Missing | Added | active = true, detached = false |
8516 | quality-rule | Avoid URL redirection to untrusted site through API requests | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
AIP 8.3.23 - 8.3.24
This section lists the results of a comparison between a CAST AIP 8.3.23 Assessment Model and a CAST AIP 8.3.24 Assessment Model. You can download the original compare_8323_8324.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.23 Assessment Model | Change | CAST 8.3.24 Assessment Model |
634 | quality-rule | Avoid using VARIANT Structures | Diagnosis | diagnosisValueType = integer | Updated | diagnosisValueType = object |
4576 | quality-rule | Provide accessors to Private Fields | Diagnosis | scopeID = 0, propertyID = 0 | Updated | scopeID = 559, propertyID = 141004 |
4576 | quality-rule | Provide accessors to Private Fields | Documentation english | description = ...fields. Accessors are identified using the following java bean naming convent... | Updated | description = ...fields. Accessors are identified using the following java bean naming conventi... |
4576 | quality-rule | Provide accessors to Private Fields | Documentation english | rationale = ...cessors. The only exception is injected fields of classes which are managed by... | Updated | rationale = ...cessors. The only exception is injected fields of classes which are managed by ... |
4576 | quality-rule | Provide accessors to Private Fields | Diagnosis | diagnosisValueType = no-value | Updated | diagnosisValueType = integer |
4576 | quality-rule | Provide accessors to Private Fields | Operation | localSiteDiagnose = DIAG_SCOPE_JAVABEST014 | Updated | localSiteDiagnose = null |
4576 | quality-rule | Provide accessors to Private Fields | Operation | localSiteCountTotal = DIAG_JAVA_PRIV_FIELD_TOTAL | Updated | localSiteCountTotal = null |
7392 | quality-rule | Avoid having multiple artifacts deleting data on the same SQL table | Documentation english | remediationSample = ...X classes update the same table public class TestUpdate { public static void... | Updated | remediationSample = ...X classes delete the same table public class TestDelete { public static void... |
7392 | quality-rule | Avoid having multiple artifacts deleting data on the same SQL table | Documentation english | sample = ...class TestUpdate1 { public static void main(java.lang.String[] args) { ... | Updated | sample = ...class TestDelete1 { public static void main(java.lang.String[] args) { ... |
7492 | quality-rule | Avoid Hibernate and JPA Entities using many-to-many association. | Diagnosis | scopeID = 0, propertyID = 0 | Updated | scopeID = 1022005, propertyID = 140999 |
7492 | quality-rule | Avoid Hibernate and JPA Entities using many-to-many association. | Documentation english | description = Reports all Hibernate or JPA Entities that use many-to-many association. | Updated | description = This rule reports all Hibernate or JPA Entities that use many-to-many associatio... |
7492 | quality-rule | Avoid Hibernate and JPA Entities using many-to-many association. | Documentation english | name = Avoid many-to-many association | Updated | name = Avoid Hibernate and JPA Entities using many-to-many association. |
7492 | quality-rule | Avoid Hibernate and JPA Entities using many-to-many association. | Operation | localSiteDiagnose = DIAG_SCOPE_JEEAHML001 | Updated | localSiteDiagnose = null |
7492 | quality-rule | Avoid Hibernate and JPA Entities using many-to-many association. | Operation | localSiteCountViolations = count-distinct | Updated | localSiteCountViolations = count |
7492 | quality-rule | Avoid Hibernate and JPA Entities using many-to-many association. | Operation | localSiteCountTotal = DIAG_JEE_HIBE_ASSO_TOTAL | Updated | localSiteCountTotal = null |
8240 | quality-rule | Avoid using unsecured cookie | Documentation english | description = ...he method "setSecure" ensures that the session cookie is not visible to an attac... | Updated | description = ...he method 'setSecure' ensures that the session cookie is not visible to an attac... |
8438 | quality-rule | Avoid code injection | Documentation english | reference = CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS C... | Updated | reference = CWE-94: Improper Control of Generation of Code ('Code Injection') https://cwe.mi... |
8468 | quality-rule | Program semantic should respect the logic of flow execution | Definition | Missing | Added | active = true, detached = false |
8468 | quality-rule | Program semantic should respect the logic of flow execution | Quality Contribution to 'Programming Practices - Structuredness' (61024) | Missing contribution | Added | critical = true, weight = 8 |
8470 | quality-rule | Avoid using STRING without overflow check | Definition | Missing | Added | active = true, detached = false |
8470 | quality-rule | Avoid using STRING without overflow check | Quality Contribution to 'Efficiency - Memory, Network and Disk Space Management' (61018) | Missing contribution | Added | critical = true, weight = 8 |
8476 | quality-rule | Avoid calling unsafe C library functions from COBOL | Definition | Missing | Added | active = true, detached = false |
8476 | quality-rule | Avoid calling unsafe C library functions from COBOL | Quality Contribution to 'Secure Coding - Weak Security Features' (66064) | Missing contribution | Added | critical = true, weight = 8 |
8478 | quality-rule | Avoid Buffer Overruns when using ADD, SUBTRACT, MULTIPLY, DIVIDE & COMPUTE statement inside a loop | Definition | Missing | Added | active = true, detached = false |
8478 | quality-rule | Avoid Buffer Overruns when using ADD, SUBTRACT, MULTIPLY, DIVIDE & COMPUTE statement inside a loop | Quality Contribution to 'Secure Coding - Time and State' (66065) | Missing contribution | Added | critical = true, weight = 8 |
8480 | quality-rule | Avoid using PREPARE STMT statement (Dynamic SQL) with STRING containing HOST variables | Definition | Missing | Added | active = true, detached = false |
8480 | quality-rule | Avoid using PREPARE STMT statement (Dynamic SQL) with STRING containing HOST variables | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 10 |
AIP 8.3.22 - 8.3.23
This section lists the results of a comparison between a CAST AIP 8.3.22 Assessment Model and a CAST AIP 8.3.23 Assessment Model. You can download the original compare_8322_8323.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.22 Assessment Model | Change | CAST 8.3.23 Assessment Model |
2586 | quality-rule | DELETED: Utilization of "DoEvents" inside a loop | Activation | active = true, detached = false | Updated | detached = true |
2586 | quality-rule | DELETED: Utilization of "DoEvents" inside a loop | Documentation english | name = Utilization of "DoEvents" inside a loop | Updated | name = DELETED: Utilization of "DoEvents" inside a loop |
2586 | quality-rule | Utilization of "DoEvents" inside a loop | Quality Contribution to 'Efficiency - Expensive Calls in Loops' (66068) | critical = true, weight = 8 | Removed | Missing contribution |
8062 | quality-rule | An unconditional 'throw', 'return' or 'break' shall terminate every non-empty switch-clause | Documentation english | reference = MISRA C++ | Updated | reference = MISRA C++, 2008 Rule 6-4-5: An unconditional throw or break statement shall ter... |
8098 | quality-rule | Avoid uncontrolled format string | Documentation english | remediationSample = ...l inputs. Don't use inputs in formatters. | Updated | remediationSample = ...l inputs. Never use inputs in formatters. |
8098 | quality-rule | Avoid uncontrolled format string | Documentation english | sample = ...rmatter = FormatterCase(); PrintReq() {} public void execute... | Updated | sample = ...rmatter = new FormatterCase(); PrintReq() {} public void exe... |
8240 | quality-rule | Avoid using unsecured cookie | Documentation english | description = ...s in plaintext over an HTTP session. Using the method "setSecure" ensures that ... | Updated | description = ...s in plain text over an HTTP session. Using the method "setSecure" ensures that... |
AIP 8.3.21 - 8.3.22
This section lists the results of a comparison between a CAST AIP 8.3.21 Assessment Model and a CAST AIP 8.3.22 Assessment Model. You can download the original compare_8321_8322.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.21 Assessment Model | Change | CAST 8.3.22 Assessment Model |
7246 | quality-rule | Avoid Packages with High Efferent Coupling (CE) | Operation | localSiteCountTotal = DIAG_JAVA_ALLCLASS_INT_TOTAL | Updated | localSiteCountTotal = DIAG_JAVA_CLASS_PACKAGES_TOTAL |
7248 | quality-rule | Avoid Packages with High Afferent Coupling (CA) | Operation | localSiteCountTotal = DIAG_JAVA_APP_CLASS_INT_TOTAL | Updated | localSiteCountTotal = DIAG_JAVA_CLASS_PACKAGES_TOTAL |
AIP 8.3.20 - 8.3.21
This section lists the results of a comparison between a CAST AIP 8.3.20 Assessment Model and the CAST AIP 8.3.21 Assessment Model. You can download the original compare_8320_8321.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.20 Assessment Model | Change | CAST 8.3.21 Assessment Model |
3570 | quality-rule | DELETED: Avoid using Keywords as names | Activation | active = true, detached = false | Updated | active = false |
3570 | quality-rule | DELETED: Avoid using Keywords as names | Documentation english | name = Avoid using Keywords as names | Updated | name = DELETED: Avoid using Keywords as names |
7862 | quality-rule | Avoid catching an exception of type Exception, RuntimeException, or Throwable | Documentation english | reference = Exception-Handling Antipatterns by Tim McCune http://today.java.net/pub/a/today/... | Updated | reference = SEI CERT Oracle Coding Standard for Java https://wiki.sei.cmu.edu/confluence/dis... |
AIP 8.3.19 - 8.3.20
This section lists the results of a comparison between a CAST AIP 8.3.19 Assessment Model and the CAST AIP 8.3.20 Assessment Model. You can download the original compare_8319_8320.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.19 Assessment Model | Change | CAST 8.3.20 Assessment Model |
8082 | quality-rule | Avoid Tables without Primary Key | Documentation english | remediation = Apply referential integrity through constraint:: | Updated | remediation = Check the statement and if so, add primary key. |
8082 | quality-rule | Avoid Tables without Primary Key | Documentation english | sample = ...d_col INT PRIMARY KEY, col2 CHARACTER VARYING(20), ... ) | Updated | sample = ...d_col INT, col2 CHARACTER VARYING(20), ... ) |
8082 | quality-rule | Avoid Tables without Primary Key | Documentation english | Missing | Added | reference = https://stackoverflow.com/questions/39649981/why-is-it-a-bad-idea-to-have-a-tabl... |
1101008 | quality-rule | Avoid non-SARGable queries | Documentation english | description = ...g a query that has only non-SARGable arquments expressions in where clauses or i... | Updated | description = ...g a query having 100% non-SARGable arguments expressions in where clauses or in ... |
1101008 | quality-rule | Avoid non-SARGable queries | Documentation english | rationale = non-SARGable WHERE clauses are performances killers : for a non-SARGable query, ... | Updated | rationale = Non-SARGable WHERE clauses, having 100% Non-SARGable arguments, are performances... |
1101008 | quality-rule | Avoid non-SARGable queries | Documentation english | Missing | Added | reference = http://dotnetvj.blogspot.com/2010/02/sargable-vs-non-sargable-queries.html |
AIP 8.3.18 - 8.3.19
This section lists the results of a comparison between a CAST AIP 8.3.18 Assessment Model and the CAST AIP 8.3.19 Assessment Model. You can download the original compare_8318_8319.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.18 Assessment Model | Change | CAST 8.3.19 Assessment Model |
4594 | quality-rule | Avoid using 'java.io.File' | Documentation english | description = ...on Server (when web.xml or ejb-jar.xml file are present) | Updated | description = ...on Server to avoid any kind of dependencies with deployment environment of your ... |
4594 | quality-rule | Avoid using 'java.io.File' | Documentation english | rationale = ...e the application is deployed. | Updated | rationale = ...e the application is deployed. Also, a program violates the Enterprise JavaBean... |
4594 | quality-rule | Avoid using 'java.io.File' | Documentation english | Missing | Added | reference = https://cwe.mitre.org/data/definitions/576.html https://cwe.mitre.org/data/defi... |
4594 | quality-rule | Avoid using 'java.io.File' | Documentation english | Missing | Added | sample = File f = new File(request.getParameter("fileName")) --------------- File f = n... |
4702 | quality-rule | Avoid using 'Throwable.printStackTrace()' with no argument | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
4702 | quality-rule | Avoid using 'Throwable.printStackTrace()' with no argument | Documentation english | output = This report lists all Java artifacts using 'Throwable.printStackTrace()'. It pro... | Updated | output = Associated to each violation, the following information is provided: - The numbe... |
4702 | quality-rule | Avoid using 'Throwable.printStackTrace()' with no argument | Documentation english | rationale = ...up the stdout or the log file. | Updated | rationale = ...up the stdout or the log file. It is recommended to use a Logger instead. |
7202 | quality-rule | Check usage of '==' and '!=' on objects | Diagnosis | scopeID = 0, propertyID = 0 | Updated | scopeID = 1022004, propertyID = 140955 |
7202 | quality-rule | Check usage of '==' and '!=' on objects | Diagnosis | diagnosisValueType = no-value | Updated | diagnosisValueType = integer |
7202 | quality-rule | Check usage of '==' and '!=' on objects | Operation | localSiteDiagnose = DIAG_SCOPE_JAVAEMEM003 | Updated | localSiteDiagnose = null |
7202 | quality-rule | Check usage of '==' and '!=' on objects | Operation | localSiteCountTotal = DIAG_JAVA_NA_METH_CTOR_TOTAL | Updated | localSiteCountTotal = null |
7210 | quality-rule | Avoid instantiations inside loops | Documentation english | rationale = ...iples is this: Avoid excessive object creation. This doesn't mean that you shoul... | Updated | rationale = ...iples is to Avoid excessive object creation. This doesn't mean that you should g... |
7210 | quality-rule | Avoid instantiations inside loops | Documentation english | total = Total number of methods and constructors | Updated | total = Number of non abstract Java Artifacts |
7442 | quality-rule | Avoid to use this within Constructor in multi-thread environment | Documentation english | description = This metric will detect all cases where this is - directly or not - referenced i... | Updated | description = This rule detects all cases where this is - directly or not - referenced in a co... |
7442 | quality-rule | Avoid to use this within Constructor in multi-thread environment | Documentation english | total = the total procedure counts all constructors | Updated | total = Number of constructors |
7446 | quality-rule | Avoid double checked locking for JSE 4.x and previous version | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
7446 | quality-rule | Avoid double checked locking for JSE 4.x and previous version | Documentation english | description = For JSE 4.x and previous version, all methods that are not synchronized and that... | Updated | description = Double checked locking is a software design pattern used to reduce locking overh... |
7446 | quality-rule | Avoid double checked locking for JSE 4.x and previous version | Documentation english | name = Avoid double checked locking | Updated | name = Avoid double checked locking for JSE 4.x and previous version |
7446 | quality-rule | Avoid double checked locking for JSE 4.x and previous version | Documentation english | output = This report lists all Methods that use double checked locking pattern. It provid... | Updated | output = Associated to each violation, the following information is provided: - The numbe... |
7446 | quality-rule | Avoid double checked locking for JSE 4.x and previous version | Documentation english | rationale = Double checked locking is a software design pattern used to reduce locking overh... | Updated | rationale = Double-checked locking refers to the situation where a programmer checks to see ... |
7446 | quality-rule | Avoid double checked locking for JSE 4.x and previous version | Documentation english | reference = http://www.cs.umd.edu/~pugh/java/memoryModel/DoubleCheckedLocking.html http://ww... | Updated | reference = https://cwe.mitre.org/data/definitions/609.html http://www.cs.umd.edu/~pugh/java... |
7446 | quality-rule | Avoid double checked locking for JSE 4.x and previous version | Documentation english | total = The total will be the total of methods that are synchronized or use the synchron... | Updated | total = Number of methods that are synchronized or use the synchronized keyword |
7504 | quality-rule | Persistent classes should Implement hashCode() and equals() | Diagnosis | scopeID = 0, propertyID = 0 | Updated | scopeID = 532, propertyID = 140963 |
7504 | quality-rule | Persistent classes should Implement hashCode() and equals() | Documentation english | reference = ...tive-java-equals-and-hashcode/ | Updated | reference = ...tive-java-equals-and-hashcode/ https://projectlombok.org/features/EqualsAndHash... |
7504 | quality-rule | Persistent classes should Implement hashCode() and equals() | Documentation english | remediation = ...the case. If it is not the case, we recommend implementing it anyway to avoid is... | Updated | remediation = ...the case. If it is not the case, we recommend implementing it anyway to avoid i... |
7504 | quality-rule | Persistent classes should Implement hashCode() and equals() | Documentation english | remediationSample = ... hashCode() { ... } } | Updated | remediationSample = ... hashCode() { ... } } // Use lombock annotation @EqualsAndHashCode; --... |
7504 | quality-rule | Persistent classes should Implement hashCode() and equals() | Diagnosis | diagnosisValueType = no-value | Updated | diagnosisValueType = integer |
7504 | quality-rule | Persistent classes should Implement hashCode() and equals() | Operation | localSiteDiagnose = DIAG_SCOPE_JEEUB002 | Updated | localSiteDiagnose = null |
7504 | quality-rule | Persistent classes should Implement hashCode() and equals() | Operation | localSiteCountTotal = DIAG_JEE_PERSISTCLS_TOTAL | Updated | localSiteCountTotal = null |
8216 | quality-rule | Avoid using incompatible mutation | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
8216 | quality-rule | Avoid using incompatible mutation | Documentation english | description = Reports all incorrect numeric type conversions which may produce unexpected resu... | Updated | description = This rule reports all incorrect numeric type conversions which may produce unexp... |
8216 | quality-rule | Avoid using incompatible mutation | Documentation english | name = CWE-681: Avoid numerical data corruption during incompatible mutation | Updated | name = Avoid using incompatible mutation |
8216 | quality-rule | Avoid using incompatible mutation | Documentation english | output = Reports all incorrect numeric type conversions which may produce unexpected resu... | Updated | output = Associated to each violation, the following information is provided: - The numbe... |
8216 | quality-rule | Avoid using incompatible mutation | Documentation english | total = All artefacts that can reference an incompatible mutation which includes methods... | Updated | total = Number of Java artifacts that can reference an incompatible mutation which inclu... |
8418 | quality-rule | Avoid NoSQL injection | Documentation english | reference = CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL... | Updated | reference = CWE-943: Improper Neutralization of Special Elements in Data Query Logic https:/... |
8464 | quality-rule | Avoid Open SQL SELECT queries without WHERE condition on XXL Tables | Definition | Missing | Added | active = true, detached = false |
8464 | quality-rule | Avoid Open SQL SELECT queries without WHERE condition on XXL Tables | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = true, weight = 9 |
1022002 | quality-rule | Avoid using RSA Cryptographic algorithms without OAEP (Optimal Asymmetric Encryption Padding) | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
1022002 | quality-rule | Avoid using RSA Cryptographic algorithms without OAEP (Optimal Asymmetric Encryption Padding) | Documentation english | description = ...A/NONE is found in source code This rule is compliant with : CWE-780 - Use of ... | Updated | description = ...A/NONE is found in source code |
1022002 | quality-rule | Avoid using RSA Cryptographic algorithms without OAEP (Optimal Asymmetric Encryption Padding) | Documentation english | output = This rule reports full name of the java method using RSA encryption algorithm wi... | Updated | output = Associated to each violation, the following information is provided: - The numbe... |
1022002 | quality-rule | Avoid using RSA Cryptographic algorithms without OAEP (Optimal Asymmetric Encryption Padding) | Documentation english | rationale = ...act of predictable common text | Updated | rationale = ...act of predictable common text. |
1022002 | quality-rule | Avoid using RSA Cryptographic algorithms without OAEP (Optimal Asymmetric Encryption Padding) | Documentation english | remediationSample = ...("RSA/ECB/PKCS1Padding", "BC"); | Updated | remediationSample = ...("RSA/ECB/OAEPWithMD5AndMGF1Padding", "BC"); |
1022002 | quality-rule | Avoid using RSA Cryptographic algorithms without OAEP (Optimal Asymmetric Encryption Padding) | Documentation english | total = java method | Updated | total = Number of Java methods |
AIP 8.3.17 - 8.3.18
This section lists the results of a comparison between a CAST AIP 8.3.17 Assessment Model and the CAST AIP 8.3.18 Assessment Model. You can download the original compare_8317_8318.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.17 Assessment Model | Change | CAST 8.3.18 Assessment Model |
7522 | quality-rule | DELETED: Avoid using literals in assignments (hardcoded values) | Documentation english | name = Avoid using literals in assignments (hardcoded values) | Updated | name = DELETED: Avoid using literals in assignments (hardcoded values) |
8238 | quality-rule | Avoid mixing trusted and untrusted data in HTTP requests | Documentation english | description = The product mixes trusted and untrusted data in the same data structure or struc... | Updated | description = Using CAST data-flow engine, this quality rule detects paths from user input met... |
AIP 8.3.16 - 8.3.17
This section lists the results of a comparison between a CAST AIP 8.3.16 Assessment Model and the CAST AIP 8.3.17 Assessment Model. You can download the original compare_8316_8317.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.16 Assessment Model | Change | CAST 8.3.17 Assessment Model |
1606 | quality-rule | Triggers should not directly modify tables, a procedure or function should be used instead | Technologies | [Forms, PL/SQL] | Updated | Added: [SQL] |
3612 | quality-rule | Avoid missing release of SQL connection after an effective lifetime (C#, VB.NET) | Documentation english | name = Close SQL connection ASAP | Updated | name = Avoid missing release of SQL connection after an effective lifetime (C#, VB.NET) |
3612 | quality-rule | Avoid missing release of SQL connection after an effective lifetime (C#, VB.NET) | Documentation english | reference = CISQ rules: ASCPEM-PRF-15, ASCRM-CWE-772. | Updated | reference = https://cwe.mitre.org/data/definitions/772.html ASCPEM-PRF-15, ASCRM-CWE-772. |
7786 | quality-rule | Avoid long Table or View names | Technologies | [SAP SQL, SQL Server, PL/SQL, Microsoft T-SQL, Sybase T-SQL] | Updated | Added: [SQL] |
7824 | quality-rule | Avoid directly throwing instance of Exception class | Documentation english | name = The exception Exception should never been thrown. Always Subclass Exception and ... | Updated | name = Avoid directly throwing instance of Exception class |
7840 | quality-rule | Trigger naming convention - prefix control | Technologies | [SQL Server, Forms, PL/SQL, Microsoft T-SQL, Sybase T-SQL] | Updated | Added: [SQL] |
7840 | quality-rule | Trigger naming convention - prefix control | Parameter #1: Trigger name prefix | values(SQL) = No default values | Updated | values(SQL) = [U_, D_, L_] |
7852 | quality-rule | Database view naming convention - prefix control | Technologies | [SAP SQL, SQL Server, PL/SQL, Microsoft T-SQL, Sybase T-SQL] | Updated | Added: [SQL] |
7852 | quality-rule | Database view naming convention - prefix control | Parameter #1: Prefix | values(SQL) = No default values | Updated | values(SQL) = [V_, v_] |
7854 | quality-rule | Database table naming convention - prefix control | Technologies | [SAP SQL, SQL Server, PL/SQL, Microsoft T-SQL, Sybase T-SQL] | Updated | Added: [SQL] |
7854 | quality-rule | Database table naming convention - prefix control | Parameter #1: Prefix | values(SQL) = No default values | Updated | values(SQL) = [T_, t_] |
7898 | quality-rule | SQL Function naming convention - prefix control | Technologies | [SQL Server, PL/SQL, Microsoft T-SQL, Sybase T-SQL] | Updated | Added: [SQL] |
7898 | quality-rule | SQL Function naming convention - prefix control | Parameter #1: Prefix | values(SQL) = No default values | Updated | values(SQL) = [F_, fn_] |
7900 | quality-rule | Stored Procedure naming convention - prefix control | Technologies | [SQL Server, Forms, PL/SQL, Microsoft T-SQL, Sybase T-SQL] | Updated | Added: [SQL] |
7900 | quality-rule | Stored Procedure naming convention - prefix control | Parameter #1: Prefix | values(SQL) = No default values | Updated | values(SQL) = [usp_, SP_, P_] |
8108 | quality-rule | Avoid missing release of stream connection after an effective lifetime | Documentation english | name = Close the outermost stream ASAP | Updated | name = Avoid missing release of stream connection after an effective lifetime |
8108 | quality-rule | Avoid missing release of stream connection after an effective lifetime | Documentation english | remediation = ...up annotation (lombok.Cleanup) | Updated | remediation = ...up annotation (lombok.Cleanup) - or use a using statement (.NET only) |
8108 | quality-rule | Avoid missing release of stream connection after an effective lifetime | Documentation english | remediationSample = with finally ~~~~~~~~~~~~ private void correctWriting() throws IOException { ... | Updated | remediationSample = ------- Java ------- with finally ~~~~~~~~~~~~ private void correctWriting()... |
8108 | quality-rule | Avoid missing release of stream connection after an effective lifetime | Documentation english | sample = private void incorrectWriting() throws IOException { DataOutputStream out = ... | Updated | sample = ------- Java ------- private void incorrectWriting() throws IOException { D... |
8110 | quality-rule | Avoid not using dedicated stored procedures when processing multiple data accesses | Documentation english | description = ...that exceed a threshold value. The threshold for the number of data queries is ... | Updated | description = ...that exceed a threshold value. |
8110 | quality-rule | Avoid not using dedicated stored procedures when processing multiple data accesses | Documentation english | name = Use dedicated stored procedures when multiple data accesses are needed (ASCPEM-P... | Updated | name = Avoid not using dedicated stored procedures when processing multiple data access... |
8112 | quality-rule | Avoid improper processing of the execution status of data handling operations | Documentation english | description = ...xception are said to be valid. Note: This quality rule implements the rule ASC... | Updated | description = ...xception are said to be valid. |
8240 | quality-rule | Avoid using unsecured cookie | Documentation english | name = Sensitive cookie in HTTPS session without 'Secure' attribute | Updated | name = Avoid using unsecured cookie |
8240 | quality-rule | Avoid using unsecured cookie | Documentation english | reference = ...017_A3-Sensitive_Data_Exposure https://www.owasp.org/index.php/Top_10-2017_A2-Br... | Updated | reference = ...017_A3-Sensitive_Data_Exposure |
8242 | quality-rule | Avoid using insufficient random values for cookies | Documentation english | name = Use of insufficiently random values | Updated | name = Avoid using insufficient random values for cookies |
8242 | quality-rule | Avoid using insufficient random values for cookies | Documentation english | Missing | Added | remediationSample = static SecureRandom ranGen = new SecureRandom(); String GenerateReceiptURL(Stri... |
8242 | quality-rule | Avoid using insufficient random values for cookies | Documentation english | Missing | Added | sample = static Random ranGen = new Random(); String GenerateReceiptURL(String baseUrl) ... |
8424 | quality-rule | Avoid using hard-coded HMAC keys | Documentation english | description = ...re key to generate a HMAC hash | Updated | description = ...re key to generate a HMAC hash. |
8434 | quality-rule | Avoid process control | Documentation english | description = The software accesses to a library using externally-influenced input from an ups... | Updated | description = Using CAST data-flow engine, this metric detects paths from user input methods d... |
8436 | quality-rule | Avoid thread injection vulnerabilities | Documentation english | description = The software constructs all or part of a thread parameter using externally-influ... | Updated | description = Using CAST data-flow engine, this metric detects paths from user input methods d... |
8436 | quality-rule | Avoid thread injection vulnerabilities | Documentation english | rationale = ...behavior. This could allow attackers to execute unexpected, dangerous commands d... | Updated | rationale = ...behavior. This could allow attackers to execute unexpected, dangerous commands ... |
8438 | quality-rule | Avoid code injection | Documentation english | description = The software constructs all or part of a dynamic evaluation using externally-inf... | Updated | description = Using CAST data-flow engine, this metric detects paths from user input methods d... |
8438 | quality-rule | Avoid code injection | Documentation english | rationale = ...omponent. This could allow attackers to execute unexpected, dangerous commands d... | Updated | rationale = ...omponent. This could allow attackers to execute unexpected, dangerous commands ... |
8440 | quality-rule | Avoid reflection injection | Documentation english | description = The application uses external input with reflection to select which classes or c... | Updated | description = Using CAST data-flow engine, this metric detects paths from user input methods d... |
8440 | quality-rule | Avoid reflection injection | Documentation english | rationale = ...ectly on the operating system. | Updated | rationale = ...ectly on the operating system. The application uses external input with reflect... |
8444 | quality-rule | Avoid resource URL manipulation | Documentation english | description = The application uses external input with reflection methods manipulating resourc... | Updated | description = Using CAST data-flow engine, this metric detects paths from user input methods d... |
8444 | quality-rule | Avoid resource URL manipulation | Documentation english | rationale = ...behavior. This may enable an attacker to access or modify otherwise protected sy... | Updated | rationale = ...behavior. This may enable an attacker to access or modify otherwise protected s... |
8446 | quality-rule | Avoid URL redirection to untrusted site | Definition | Missing | Added | active = true, detached = false |
8446 | quality-rule | Avoid URL redirection to untrusted site | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
1020950 | quality-rule | Avoid providing password in Web Service URL | Definition | Missing | Added | active = true, detached = false |
1020950 | quality-rule | Avoid providing password in Web Service URL | Quality Contribution to 'Secure Coding - Encapsulation' (66066) | Missing contribution | Added | critical = true, weight = 7 |
1101000 | quality-rule | Never use SQL queries with a cartesian product (SQL) | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
1101000 | quality-rule | Never use SQL queries with a cartesian product (SQL) | Documentation english | name = ...eries with a cartesian product | Updated | name = ...eries with a cartesian product (SQL) |
1101000 | quality-rule | Never use SQL queries with a cartesian product (SQL) | Documentation english | output = List all Artifacts which contain a cartesian join. The following information is ... | Updated | output = Associated to each violation, the following information is provided: - The numbe... |
1101000 | quality-rule | Never use SQL queries with a cartesian product (SQL) | Documentation english | total = The total procedure counts Artifacts with SQL code. | Updated | total = Number of Artifacts with SQL code. |
1101002 | quality-rule | Never use SQL queries with a cartesian product on XXL Tables (SQL) | Documentation english | associatedValueName = number of violation patterns | Updated | associatedValueName = Number of violation occurrences |
1101002 | quality-rule | Never use SQL queries with a cartesian product on XXL Tables (SQL) | Documentation english | name = ...artesian product on XXL Tables | Updated | name = ...artesian product on XXL Tables (SQL) |
1101002 | quality-rule | Never use SQL queries with a cartesian product on XXL Tables (SQL) | Documentation english | output = The output lists all SQL Artifacts using at least one SQL query with a Cartesian... | Updated | output = Associated to each violation, the following information is provided: - The numbe... |
1101002 | quality-rule | Never use SQL queries with a cartesian product on XXL Tables (SQL) | Documentation english | total = The total procedure counts Artifacts with SQL code from schemas containing XXL t... | Updated | total = Number of Artifacts with SQL code from schemas containing XXL tables or views. |
1101004 | quality-rule | Avoid non-indexed SQL queries | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
1101004 | quality-rule | Avoid non-indexed SQL queries | Documentation english | remediationSample = TABLE1 is indexed on (COL2, COL1) and TABLE2 on COL3. Both tables are not XXS. F... | Updated | remediationSample = The remediation is to add index on TABLE1 (COL3, COL1). |
1101004 | quality-rule | Avoid non-indexed SQL queries | Documentation english | total = The total procedure counts Artifacts with SQL code from schemas containing table... | Updated | total = Number of Artifacts with SQL code from schemas containing tables or views. |
1101004 | quality-rule | Avoid non-indexed SQL queries | Documentation english | Missing | Added | sample = TABLE1 is indexed on (COL2, COL1) and TABLE2 on COL3. Both tables are not XXS. F... |
1101006 | quality-rule | Avoid non-indexed XXL SQL queries | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
1101006 | quality-rule | Avoid non-indexed XXL SQL queries | Documentation english | remediationSample = TABLE1 is indexed on (COL2, COL1) and TABLE2 on COL3. Both tables are XXL. For t... | Updated | remediationSample = The remediation is to add index on TABLE1 (COL3, COL1). |
1101006 | quality-rule | Avoid non-indexed XXL SQL queries | Documentation english | total = The total procedure counts Artifacts with SQL code from schemas containing XXL t... | Updated | total = Number of Artifacts with SQL code from schemas containing XXL tables or views. |
1101006 | quality-rule | Avoid non-indexed XXL SQL queries | Documentation english | Missing | Added | sample = TABLE1 is indexed on (COL2, COL1) and TABLE2 on COL3. Both tables are XXL. For t... |
1101008 | quality-rule | Avoid non-SARGable queries | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
1101008 | quality-rule | Avoid non-SARGable queries | Documentation english | output = List all Artifacts having a non-SARGable query. The following information is pro... | Updated | output = Associated to each violation, the following information is provided: - The numbe... |
1101008 | quality-rule | Avoid non-SARGable queries | Documentation english | remediationSample = -- Index scan (slow) WHERE UPPER(ColumnValue) = 'SUMMER' -- not sargable predica... | Updated | remediationSample = -- Index seek (fast) WHERE ColumnValue = 'Summer' -- sargable predicate ------... |
1101008 | quality-rule | Avoid non-SARGable queries | Documentation english | total = The total procedure counts Artifacts with SQL code. | Updated | total = Number of Artifacts with SQL code. |
1101008 | quality-rule | Avoid non-SARGable queries | Documentation english | Missing | Added | sample = -- Index scan (slow) WHERE UPPER(ColumnValue) = 'SUMMER' -- not sargable predica... |
1101010 | quality-rule | Avoid NATURAL JOIN queries | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
1101010 | quality-rule | Avoid NATURAL JOIN queries | Documentation english | output = List all Artifacts having NATURAL JOINs. The following information is provided: ... | Updated | output = Associated to each violation, the following information is provided: - The numbe... |
1101010 | quality-rule | Avoid NATURAL JOIN queries | Documentation english | remediationSample = The following example: SELECT first_name, department_name FROM employees NA... | Updated | remediationSample = Could be rewritten as: SELECT first_name,department_name FROM employees JOI... |
1101010 | quality-rule | Avoid NATURAL JOIN queries | Documentation english | total = The total procedure counts Artifacts with SQL code. | Updated | total = Number of Artifacts with SQL code. |
1101010 | quality-rule | Avoid NATURAL JOIN queries | Documentation english | Missing | Added | sample = SELECT first_name, department_name FROM employees NATURAL JOIN departments; |
1101012 | quality-rule | Specify column names instead of column numbers in ORDER BY clauses | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
1101012 | quality-rule | Specify column names instead of column numbers in ORDER BY clauses | Documentation english | output = List all Artifacts containing column numbers in ORDER BY clauses. The following ... | Updated | output = Associated to each violation, the following information is provided: - The numbe... |
1101012 | quality-rule | Specify column names instead of column numbers in ORDER BY clauses | Documentation english | remediationSample = The following example: SELECT first_name, department_name FROM employees JO... | Updated | remediationSample = SELECT first_name, department_name FROM employees JOIN departments ON (empl... |
1101012 | quality-rule | Specify column names instead of column numbers in ORDER BY clauses | Documentation english | total = The total procedure counts Artifacts with SQL code. | Updated | total = Number of Artifacts with SQL code. |
1101012 | quality-rule | Specify column names instead of column numbers in ORDER BY clauses | Documentation english | Missing | Added | sample = SELECT first_name, department_name FROM employees JOIN departments ON (empl... |
1101014 | quality-rule | Avoid queries using old style join convention instead of ANSI-Standard joins (SQL) | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
1101014 | quality-rule | Avoid queries using old style join convention instead of ANSI-Standard joins (SQL) | Documentation english | name = ...onvention instead of ANSI-Standard joins | Updated | name = ...onvention instead of ANSI-Standard joins (SQL) |
1101014 | quality-rule | Avoid queries using old style join convention instead of ANSI-Standard joins (SQL) | Documentation english | output = List all Artifacts containing NON ANSI joins. The following information is provi... | Updated | output = Associated to each violation, the following information is provided: - The numbe... |
1101014 | quality-rule | Avoid queries using old style join convention instead of ANSI-Standard joins (SQL) | Documentation english | remediationSample = The following example: SELECT first_name, department_name FROM employees, depart... | Updated | remediationSample = SELECT first_name, department_name FROM employees JOIN departments ON (empl... |
1101014 | quality-rule | Avoid queries using old style join convention instead of ANSI-Standard joins (SQL) | Documentation english | total = The total procedure counts Artifacts with SQL code. | Updated | total = Number of Artifacts with SQL code. |
1101014 | quality-rule | Avoid queries using old style join convention instead of ANSI-Standard joins (SQL) | Documentation english | Missing | Added | sample = SELECT first_name, department_name FROM employees, departments where(employees.m... |
1101016 | quality-rule | Avoid Artifacts with too many parameters (SQL) | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of parameters |
1101016 | quality-rule | Avoid Artifacts with too many parameters (SQL) | Documentation english | name = ...facts with too many parameters | Updated | name = ...facts with too many parameters (SQL) |
1101016 | quality-rule | Avoid Artifacts with too many parameters (SQL) | Documentation english | total = The total procedure counts Artifacts with SQL code. | Updated | total = Number of Artifacts with SQL code. |
1101018 | quality-rule | Avoid using the GROUP BY clause | Technologies | [SQL] | Updated | Added: [ABAP] |
1101018 | quality-rule | Avoid using the GROUP BY clause | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
1101018 | quality-rule | Avoid using the GROUP BY clause | Documentation english | output = List all Artifacts containing GROUP BY clauses. The following information is pro... | Updated | output = Associated to each violation, the following information is provided: - The numbe... |
1101018 | quality-rule | Avoid using the GROUP BY clause | Documentation english | remediationSample = The following query should be reviewed: Select T.title_id, T.def_id, T.publisher... | Removed | Missing |
1101018 | quality-rule | Avoid using the GROUP BY clause | Documentation english | total = The total procedure counts Artifacts with SQL code. | Updated | total = Number of Artifacts with SQL code. |
1101018 | quality-rule | Avoid using the GROUP BY clause | Documentation english | Missing | Added | sample = The following query should be reviewed: Select T.title_id, T.def_id, T.publisher... |
1101020 | quality-rule | Avoid using quoted identifiers | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
1101020 | quality-rule | Avoid using quoted identifiers | Documentation english | output = List all Artifacts containing quoted identifiers. The following information is p... | Updated | output = Associated to each violation, the following information is provided: - The numbe... |
1101020 | quality-rule | Avoid using quoted identifiers | Documentation english | remediationSample = ...DECLARE "End" NUMBER := 1; BEGIN dbms_output.put_line('A quoted identifier E... | Updated | remediationSample = ...DECLARE L_End NUMBER := 1; BEGIN dbms_output.put_line('A quoted identifier E... |
1101020 | quality-rule | Avoid using quoted identifiers | Documentation english | total = The total procedure counts Artifacts with SQL code. | Updated | total = Number of Artifacts with SQL code. |
1101020 | quality-rule | Avoid using quoted identifiers | Documentation english | Missing | Added | sample = The following statement should be reviewed: DECLARE "End" NUMBER := 1; BEGIN ... |
1101022 | quality-rule | Avoid Tables without Primary Key (SQL) | Documentation english | associatedValueName = This metric displays the list of tables without Primary key constraints | Updated | associatedValueName = List of tables without Primary key constraints |
1101022 | quality-rule | Avoid Tables without Primary Key (SQL) | Documentation english | name = ...oid Tables without Primary Key | Updated | name = ...oid Tables without Primary Key (SQL) |
1101022 | quality-rule | Avoid Tables without Primary Key (SQL) | Documentation english | remediationSample = The following statement should be reviewed: create table SQLAMDA001_7_TBL1 (cate... | Updated | remediationSample = Add a primary key: alter table SQLAMDA001_7_TBL1 add constraint SQLAMDA001_7_TBL... |
1101022 | quality-rule | Avoid Tables without Primary Key (SQL) | Documentation english | total = The total procedure counts Tables. | Updated | total = Number of Tables. |
1101022 | quality-rule | Avoid Tables without Primary Key (SQL) | Documentation english | Missing | Added | sample = The following statement should be reviewed: create table SQLAMDA001_7_TBL1 (cate... |
1101024 | quality-rule | Avoid using dynamic SQL in SQL Artifacts | Technologies | [SQL] | Updated | Added: [ABAP] |
1101024 | quality-rule | Avoid using dynamic SQL in SQL Artifacts | Documentation english | associatedValueName = This metric lists SQL Artifacts using dynamic SQL. | Updated | associatedValueName = Number of violation occurrences |
1101024 | quality-rule | Avoid using dynamic SQL in SQL Artifacts | Documentation english | output = List all Artifacts using dynamic SQL. The following information is provided: - T... | Updated | output = Associated to each violation, the following information is provided: - The numbe... |
1101024 | quality-rule | Avoid using dynamic SQL in SQL Artifacts | Documentation english | remediationSample = The following procedure should be reviewed: CREATE PROCEDURE SEARCH (IN V_DYNAMI... | Removed | Missing |
1101024 | quality-rule | Avoid using dynamic SQL in SQL Artifacts | Documentation english | total = The total procedure counts Artifacts with SQL code. | Updated | total = Number of Artifacts with SQL code. |
1101024 | quality-rule | Avoid using dynamic SQL in SQL Artifacts | Documentation english | Missing | Added | sample = The following procedure should be reviewed: CREATE PROCEDURE SEARCH (IN V_DYNAMI... |
1101026 | quality-rule | Always define column names when inserting values | Documentation english | associatedValueName = This metric lists SQL Artifacts without columns in insert clauses. | Updated | associatedValueName = Number of violation occurrences |
1101026 | quality-rule | Always define column names when inserting values | Documentation english | output = List all Artifacts without columns in INSERT clause. The following information i... | Updated | output = Associated to each violation, the following information is provided: - The numbe... |
1101026 | quality-rule | Always define column names when inserting values | Documentation english | remediationSample = The following procedure should be reviewed: CREATE PROCEDURE INSERT_VALUES BEGIN... | Updated | remediationSample = Add columns in INSERT clause: CREATE PROCEDURE INSERT_VALUES BEGIN INSERT INTO... |
1101026 | quality-rule | Always define column names when inserting values | Documentation english | total = The total procedure counts Artifacts with SQL code. | Updated | total = Number of Artifacts with SQL code. |
1101026 | quality-rule | Always define column names when inserting values | Documentation english | Missing | Added | sample = The following procedure should be reviewed: CREATE PROCEDURE INSERT_VALUES BEGIN... |
1101028 | quality-rule | Use MINUS or EXCEPT operator instead of NOT EXISTS and NOT IN subqueries | Documentation english | associatedValueName = This metric lists SQL Artifacts with NOT EXISTS or NOT IN subqueries. | Updated | associatedValueName = Number of violation occurrences |
1101028 | quality-rule | Use MINUS or EXCEPT operator instead of NOT EXISTS and NOT IN subqueries | Documentation english | output = List all Artifacts with NO EXISTS and NOT IN subqueries. The following informati... | Updated | output = Associated to each violation, the following information is provided: - The numbe... |
1101028 | quality-rule | Use MINUS or EXCEPT operator instead of NOT EXISTS and NOT IN subqueries | Documentation english | remediationSample = The following procedure should be reviewed: CREATE PROCEDURE INSERT_BOOK_TITLE B... | Updated | remediationSample = Replace NOT EXISTS suquerie with MINUS operator: CREATE PROCEDURE INSERT_BOOK_TI... |
1101028 | quality-rule | Use MINUS or EXCEPT operator instead of NOT EXISTS and NOT IN subqueries | Documentation english | total = The total procedure counts Artifacts with SQL code. | Updated | total = Number of Artifacts with SQL code. |
1101028 | quality-rule | Use MINUS or EXCEPT operator instead of NOT EXISTS and NOT IN subqueries | Documentation english | Missing | Added | sample = The following procedure should be reviewed: CREATE PROCEDURE INSERT_BOOK_TITLE B... |
1101030 | quality-rule | Avoid Artifacts with queries on too many Tables and/or Views | Technologies | [SQL] | Updated | Added: [ABAP] |
1101030 | quality-rule | Avoid Artifacts with queries on too many Tables and/or Views | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of joined Tables and/or Views |
1101030 | quality-rule | Avoid Artifacts with queries on too many Tables and/or Views | Documentation english | name = ...Tables and or Views | Updated | name = ...Tables and/or Views |
1101030 | quality-rule | Avoid Artifacts with queries on too many Tables and/or Views | Documentation english | total = The total procedure counts Artifacts with SQL code. | Updated | total = Number of Artifacts with SQL code. |
1101032 | quality-rule | Avoid exists and not exists independent clauses (SQL) | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
1101032 | quality-rule | Avoid exists and not exists independent clauses (SQL) | Documentation english | name = ...not exists independent clauses | Updated | name = ...not exists independent clauses (SQL) |
1101032 | quality-rule | Avoid exists and not exists independent clauses (SQL) | Documentation english | output = List all Artifacts which contain independent "exists" and "not exists" clause. ... | Updated | output = Associated to each violation, the following information is provided: - The numbe... |
1101032 | quality-rule | Avoid exists and not exists independent clauses (SQL) | Documentation english | total = The total procedure counts Artifacts with SQL code. | Updated | total = Number of Artifacts with SQL code. |
1101034 | quality-rule | DISTINCT should not be used in SQL SELECT statements | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
1101034 | quality-rule | DISTINCT should not be used in SQL SELECT statements | Documentation english | output = List all Artifacts which contain "DISTINCT", "DISTINCTROW", "UNIQUE" modifiers i... | Updated | output = Associated to each violation, the following information is provided: - The numbe... |
1101034 | quality-rule | DISTINCT should not be used in SQL SELECT statements | Documentation english | total = The total procedure counts Artifacts with SQL code. | Updated | total = Number of Artifacts with SQL code. |
1101036 | quality-rule | Use ANSI standard operators in SQL WHERE clauses | Technologies | [Visual Basic, PowerBuilder, Cobol, C++, C, C#, VB.NET, ASP.NET, JEE] | Updated | Removed: [ASP.NET] |
1101036 | quality-rule | Use ANSI standard operators in SQL WHERE clauses | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
1101036 | quality-rule | Use ANSI standard operators in SQL WHERE clauses | Documentation english | output = List all Artifacts which contain !=, !> and !< operators in SQL WHERE clauses. | Updated | output = Associated to each violation, the following information is provided: - The numbe... |
1101036 | quality-rule | Use ANSI standard operators in SQL WHERE clauses | Documentation english | total = The total procedure counts Artifacts with SQL code. | Updated | total = Number of Artifacts with SQL code. |
1101038 | quality-rule | Replace OR conditions testing equality on the same identifier in SQL WHERE clauses by an IN test condition | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
1101038 | quality-rule | Replace OR conditions testing equality on the same identifier in SQL WHERE clauses by an IN test condition | Documentation english | output = List all Artifacts which contain OR conditions testing equality on the same iden... | Updated | output = Associated to each violation, the following information is provided: - The numbe... |
1101038 | quality-rule | Replace OR conditions testing equality on the same identifier in SQL WHERE clauses by an IN test condition | Documentation english | total = The total procedure counts Artifacts with SQL code. | Updated | total = Number of Artifacts with SQL code. |
1101040 | quality-rule | Avoid empty catch blocks (SQL) | Documentation english | associatedValueName = This metric lists SQL Artifacts with empty catch blocks. | Updated | associatedValueName = Number of violation occurrences |
1101040 | quality-rule | Avoid empty catch blocks (SQL) | Documentation english | name = Avoid empty catch blocks | Updated | name = Avoid empty catch blocks (SQL) |
1101040 | quality-rule | Avoid empty catch blocks (SQL) | Documentation english | output = This report lists all SQL Artifacts with empty catch blocks. The following infor... | Updated | output = Associated to each violation, the following information is provided: - The numbe... |
1101040 | quality-rule | Avoid empty catch blocks (SQL) | Documentation english | total = The total procedure counts Artifacts with SQL code. | Updated | total = Number of Artifacts with SQL code. |
1101042 | quality-rule | Table naming convention - character set control (SQL) | Definition | Missing | Added | active = true, detached = false |
1101042 | quality-rule | Table naming convention - character set control (SQL) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | Missing contribution | Added | critical = false, weight = 1 |
1101044 | quality-rule | View naming convention - character set control (SQL) | Definition | Missing | Added | active = true, detached = false |
1101044 | quality-rule | View naming convention - character set control (SQL) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | Missing contribution | Added | critical = false, weight = 1 |
1101046 | quality-rule | Package naming convention - prefix control (SQL) | Definition | Missing | Added | active = false, detached = false |
1101046 | quality-rule | Package naming convention - prefix control (SQL) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | Missing contribution | Added | critical = false, weight = 5 |
1101048 | quality-rule | Package Function naming convention - prefix control (SQL) | Definition | Missing | Added | active = false, detached = false |
1101048 | quality-rule | Package Function naming convention - prefix control (SQL) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | Missing contribution | Added | critical = false, weight = 5 |
1101050 | quality-rule | Package Stored Procedure naming convention - prefix control (SQL) | Definition | Missing | Added | active = false, detached = false |
1101050 | quality-rule | Package Stored Procedure naming convention - prefix control (SQL) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | Missing contribution | Added | critical = false, weight = 5 |
1101052 | quality-rule | Use WHEN OTHERS in exception management (SQL) | Definition | Missing | Added | active = true, detached = false |
1101052 | quality-rule | Use WHEN OTHERS in exception management (SQL) | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | Missing contribution | Added | critical = true, weight = 8 |
1101054 | quality-rule | Never use WHEN OTHER THEN NULL | Definition | Missing | Added | active = true, detached = false |
1101054 | quality-rule | Never use WHEN OTHER THEN NULL | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | Missing contribution | Added | critical = true, weight = 8 |
1101056 | quality-rule | Avoid large Tables - too many columns (SQL) | Definition | Missing | Added | active = true, detached = false |
1101056 | quality-rule | Avoid large Tables - too many columns (SQL) | Quality Contribution to 'Volume - Number of Components' (61022) | Missing contribution | Added | critical = false, weight = 6 |
1101058 | quality-rule | Do not mix ANSI and non-ANSI JOIN syntax in the same query | Definition | Missing | Added | active = true, detached = false |
1101058 | quality-rule | Do not mix ANSI and non-ANSI JOIN syntax in the same query | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = false, weight = 4 |
1101060 | quality-rule | LIKE operator should not start with a wildcard character | Definition | Missing | Added | active = true, detached = false |
1101060 | quality-rule | LIKE operator should not start with a wildcard character | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = false, weight = 4 |
1101062 | quality-rule | Use at most one statement per line (SQL) | Definition | Missing | Added | active = true, detached = false |
1101062 | quality-rule | Use at most one statement per line (SQL) | Quality Contribution to 'Documentation - Style Conformity' (61006) | Missing contribution | Added | critical = false, weight = 1 |
1101064 | quality-rule | Avoid cascading Triggers (SQL) | Definition | Missing | Added | active = true, detached = false |
1101064 | quality-rule | Avoid cascading Triggers (SQL) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | Missing contribution | Added | critical = false, weight = 4 |
1101066 | quality-rule | Avoid improperly written triangular joins with XXL tables | Definition | Missing | Added | active = true, detached = false |
1101066 | quality-rule | Avoid improperly written triangular joins with XXL tables | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = false, weight = 4 |
1101068 | quality-rule | Avoid synonym with both private and public definition | Definition | Missing | Added | active = true, detached = false |
1101068 | quality-rule | Avoid synonym with both private and public definition | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = false, weight = 1 |
1101070 | quality-rule | Avoid explicit comparison with NULL | Definition | Missing | Added | active = true, detached = false |
1101070 | quality-rule | Avoid explicit comparison with NULL | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = false, weight = 4 |
1101072 | quality-rule | Tables should be aliased | Definition | Missing | Added | active = true, detached = false |
1101072 | quality-rule | Tables should be aliased | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | Missing contribution | Added | critical = false, weight = 4 |
1101074 | quality-rule | Tables aliases should not end with a numeric suffix | Definition | Missing | Added | active = true, detached = false |
1101074 | quality-rule | Tables aliases should not end with a numeric suffix | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | Missing contribution | Added | critical = false, weight = 4 |
1101076 | quality-rule | Column references should be qualified | Definition | Missing | Added | active = true, detached = false |
1101076 | quality-rule | Column references should be qualified | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | Missing contribution | Added | critical = false, weight = 4 |
1101078 | quality-rule | Prefer PRIVATE to PUBLIC synonym | Definition | Missing | Added | active = true, detached = false |
1101078 | quality-rule | Prefer PRIVATE to PUBLIC synonym | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = false, weight = 1 |
1101080 | quality-rule | Avoid orphaned synonyms | Definition | Missing | Added | active = true, detached = false |
1101080 | quality-rule | Avoid orphaned synonyms | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | Missing contribution | Added | critical = false, weight = 1 |
1101082 | quality-rule | Avoid looping chain of synonyms | Definition | Missing | Added | active = true, detached = false |
1101082 | quality-rule | Avoid looping chain of synonyms | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = false, weight = 1 |
1101084 | quality-rule | Avoid Cursors inside a loop (SQL) | Definition | Missing | Added | active = true, detached = false |
1101084 | quality-rule | Avoid Cursors inside a loop (SQL) | Quality Contribution to 'Efficiency - Expensive Calls in Loops' (66068) | Missing contribution | Added | critical = true, weight = 7 |
1101086 | quality-rule | VARCHAR2 and NVARCHAR2 should be used | Definition | Missing | Added | active = true, detached = false |
1101086 | quality-rule | VARCHAR2 and NVARCHAR2 should be used | Quality Contribution to 'Efficiency - Memory, Network and Disk Space Management' (61018) | Missing contribution | Added | critical = false, weight = 2 |
1101088 | quality-rule | LONG and LONG RAW datatypes should no longer be used | Definition | Missing | Added | active = true, detached = false |
1101088 | quality-rule | LONG and LONG RAW datatypes should no longer be used | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = false, weight = 8 |
AIP 8.3.15 - 8.3.16
This section lists the results of a comparison between a CAST AIP 8.3.15 Assessment Model and the CAST AIP 8.3.16 Assessment Model. You can download the original compare_8315_8316.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.15 Assessment Model | Change | CAST 8.3.16 Assessment Model |
5056 | quality-rule | Using SEARCH ALL only with sorted data | Documentation english | description = ... programs using the SEARCH statement without the ALL addition, with only one WHE... | Updated | description = ... programs containing SEARCH ALL statements not using the sort key of the table. |
5056 | quality-rule | Using SEARCH ALL only with sorted data | Documentation english | name = Avoid using SEARCH without the ALL addition | Updated | name = Using SEARCH ALL only with sorted data |
5056 | quality-rule | Using SEARCH ALL only with sorted data | Documentation english | output = This report lists all Cobol Programs that use SEARCH statements without the ALL ... | Updated | output = Associated to each COBOL Program with violations, the Quality Rule provides: - T... |
5056 | quality-rule | Using SEARCH ALL only with sorted data | Documentation english | rationale = A binary search is a very efficient search when you are dealing with a large tab... | Updated | rationale = To use the SEARCH ALL statement to search a table, the table must specify the AS... |
5056 | quality-rule | Using SEARCH ALL only with sorted data | Documentation english | reference = Sort the table data either in Ascending or Descending order and use a SEARCH AL... | Updated | reference = https://www.ibm.com/support/knowledgecenter/SS6SGM_4.1.1/com.ibm.cobol.aix.doc/P... |
5056 | quality-rule | Using SEARCH ALL only with sorted data | Documentation english | remediationSample = B-200-LOOP. ... ... processing not related to search ... ... SEA... | Updated | remediationSample = DATA DIVISION. WORKING-STORAGE SECTION. 01 VARIABLE OCCURS 83 ASCENDING KEY I... |
5056 | quality-rule | Using SEARCH ALL only with sorted data | Documentation english | sample = B-200-LOOP. ... ... processing not related to search ... ... SET... | Updated | sample = Case 1: Use incorrect key DATA DIVISION. WORKING-STORAGE SECTION. 01 VARIABLE ... |
7522 | quality-rule | Avoid using literals in assignments (hardcoded values) | Activation | active = true, detached = false | Updated | detached = true |
7522 | quality-rule | Avoid using literals in assignments (hardcoded values) | Quality Contribution to 'Architecture - OS and Platform Independence' (61004) | critical = false, weight = 7 | Removed | Missing contribution |
7524 | quality-rule | Avoid using BREAK or BREAK-POINT statement | Diagnosis | scopeID = 0, propertyID = 0 | Updated | scopeID = 3, propertyID = 140969 |
7524 | quality-rule | Avoid using BREAK or BREAK-POINT statement | Operation | localSiteDiagnose = DIAG_SCOPE_ABAPPPUB002 | Updated | localSiteDiagnose = null |
7524 | quality-rule | Avoid using BREAK or BREAK-POINT statement | Operation | localSiteCountTotal = DIAG_ABAP_ANA_ARTIFAC_TOTAL | Updated | localSiteCountTotal = null |
7528 | quality-rule | Never use the ON CHANGE OF statement | Diagnosis | scopeID = 0, propertyID = 0 | Updated | scopeID = 3, propertyID = 140970 |
7528 | quality-rule | Never use the ON CHANGE OF statement | Operation | localSiteDiagnose = DIAG_SCOPE_ABAPPPUB001 | Updated | localSiteDiagnose = null |
7528 | quality-rule | Never use the ON CHANGE OF statement | Operation | localSiteCountTotal = DIAG_ABAP_ANA_ARTIFAC_TOTAL | Updated | localSiteCountTotal = null |
7530 | quality-rule | Avoid "SELECT *" or "SELECT SINGLE *" queries | Diagnosis | scopeID = 0, propertyID = 0 | Updated | scopeID = 2, propertyID = 140973 |
7530 | quality-rule | Avoid "SELECT *" or "SELECT SINGLE *" queries | Operation | localSiteDiagnose = DIAG_SCOPE_ABAPSQLCPLEX006 | Updated | localSiteDiagnose = null |
7530 | quality-rule | Avoid "SELECT *" or "SELECT SINGLE *" queries | Operation | localSiteCountTotal = DIAG_ABAP_ANA_ARTIF_T_TOTAL | Updated | localSiteCountTotal = null |
7532 | quality-rule | Avoid nested SELECT ... ENDSELECT statements | Diagnosis | scopeID = 0, propertyID = 0 | Updated | scopeID = 2, propertyID = 140974 |
7532 | quality-rule | Avoid nested SELECT ... ENDSELECT statements | Operation | localSiteDiagnose = DIAG_SCOPE_ABAPEECL001 | Updated | localSiteDiagnose = null |
7532 | quality-rule | Avoid nested SELECT ... ENDSELECT statements | Operation | localSiteCountTotal = DIAG_ABAP_SQLARTIFACTS_TOTAL | Updated | localSiteCountTotal = null |
7536 | quality-rule | Avoid using AT Events in combination of LOOP AT .... WHERE constructs | Diagnosis | scopeID = 0, propertyID = 0 | Updated | scopeID = 8, propertyID = 140975 |
7536 | quality-rule | Avoid using AT Events in combination of LOOP AT .... WHERE constructs | Operation | localSiteDiagnose = DIAG_SCOPE_ABAPPPUB003 | Updated | localSiteDiagnose = null |
7536 | quality-rule | Avoid using AT Events in combination of LOOP AT .... WHERE constructs | Operation | localSiteCountTotal = DIAG_ABAP_ATLOOP_TOTAL | Updated | localSiteCountTotal = null |
7538 | quality-rule | Avoid using SELECT ... INTO CORRESPONDING FIELDS OF | Diagnosis | scopeID = 0, propertyID = 0 | Updated | scopeID = 2, propertyID = 140978 |
7538 | quality-rule | Avoid using SELECT ... INTO CORRESPONDING FIELDS OF | Operation | localSiteDiagnose = DIAG_SCOPE_ABAPESDP002 | Updated | localSiteDiagnose = null |
7538 | quality-rule | Avoid using SELECT ... INTO CORRESPONDING FIELDS OF | Operation | localSiteCountTotal = DIAG_ABAP_OSQLARTIFACTS_TOTAL | Updated | localSiteCountTotal = null |
7544 | quality-rule | Avoid using SELECT ... ENDSELECT statement | Diagnosis | scopeID = 0, propertyID = 0 | Updated | scopeID = 2, propertyID = 140979 |
7544 | quality-rule | Avoid using SELECT ... ENDSELECT statement | Operation | localSiteDiagnose = DIAG_SCOPE_ABAPESDP004 | Updated | localSiteDiagnose = null |
7544 | quality-rule | Avoid using SELECT ... ENDSELECT statement | Operation | localSiteCountTotal = DIAG_ABAP_OSQLARTIFACTS_TOTAL | Updated | localSiteCountTotal = null |
7592 | quality-rule | Avoid using "ORDER BY" in SELECTS | Diagnosis | scopeID = 0, propertyID = 0 | Updated | scopeID = 2, propertyID = 140980 |
7592 | quality-rule | Avoid using "ORDER BY" in SELECTS | Operation | localSiteDiagnose = DIAG_SCOPE_ABAPESQL007 | Updated | localSiteDiagnose = null |
7592 | quality-rule | Avoid using "ORDER BY" in SELECTS | Operation | localSiteCountTotal = DIAG_ABAP_ANA_ARTIF_T_TOTAL | Updated | localSiteCountTotal = null |
7594 | quality-rule | Avoid using "SELECT DISTINCT", use DELETE-ADJACENT | Diagnosis | scopeID = 0, propertyID = 0 | Updated | scopeID = 2, propertyID = 140981 |
7594 | quality-rule | Avoid using "SELECT DISTINCT", use DELETE-ADJACENT | Operation | localSiteDiagnose = DIAG_SCOPE_ABAPESQL008 | Updated | localSiteDiagnose = null |
7594 | quality-rule | Avoid using "SELECT DISTINCT", use DELETE-ADJACENT | Operation | localSiteCountTotal = DIAG_ABAP_ANA_ARTIF_T_TOTAL | Updated | localSiteCountTotal = null |
7672 | quality-rule | Avoid using EXIT statement in Include | Diagnosis | scopeID = 0, propertyID = 0 | Updated | scopeID = 9, propertyID = 140983 |
7672 | quality-rule | Avoid using EXIT statement in Include | Operation | localSiteDiagnose = DIAG_SCOPE_ABAPCACC001 | Updated | localSiteDiagnose = null |
7672 | quality-rule | Avoid using EXIT statement in Include | Operation | localSiteCountTotal = DIAG_ABAP_ANA_INCLUDE_TOTAL | Updated | localSiteCountTotal = null |
7740 | quality-rule | Avoid HTTP response splitting | Documentation english | description = Using CAST data-flow engine, this metric detects paths from user input methods t... | Updated | description = The application uses HTTP headers, but it does not correctly neutralizes CR and ... |
7740 | quality-rule | Avoid HTTP response splitting | Documentation english | name = Avoid cross-site scripting vulnerabilities | Updated | name = Avoid HTTP response splitting |
7740 | quality-rule | Avoid HTTP response splitting | Documentation english | rationale = The most dangerous web application vulnerability is known as cross-site scriptin... | Updated | rationale = CR and LF characters in an HTTP header may give attackers control of the remaini... |
7740 | quality-rule | Avoid HTTP response splitting | Documentation english | reference = CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site... | Updated | reference = CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Respon... |
7740 | quality-rule | Avoid HTTP response splitting | Documentation english | remediation = ...thorized sanitization methods. | Updated | remediation = ...thorized sanitization methods. To avoid the creation of XSS flaws, the Open Web... |
7740 | quality-rule | Avoid HTTP response splitting | Documentation english | remediationSample = Sample 1 <% String eid = request.getParameter("eid"); %> ... //include validatio... | Updated | remediationSample = Sample 1 // include validation code for rawInputData --> cleanData response.add... |
7740 | quality-rule | Avoid HTTP response splitting | Documentation english | sample = Sample 1 <% String eid = request.getParameter("eid"); %> ... Employee ID: <%= ei... | Updated | sample = Sample 1 response.addHeader(HEADER_NAME, rawInputData); Sample 2 String header ... |
7740 | quality-rule | Avoid HTTP response splitting | Documentation english | total = Number of methods calling user input methods | Updated | total = Number of potentially vulnerable methods |
7742 | quality-rule | Avoid SQL injection vulnerabilities | Documentation english | reference = ...php/Top_10_2007 CISQ rule: ASCSM-CWE-89. | Updated | reference = ...php/Top_10-2017_A1-Injection CISQ rule: ASCSM-CWE-89. |
7742 | quality-rule | Avoid SQL injection vulnerabilities | Documentation english | total = Number of methods calling user input methods | Updated | total = Number of potentially vulnerable methods |
7746 | quality-rule | Avoid LDAP injection vulnerabilities | Documentation english | reference = ...php/Top_10_2007 | Updated | reference = ...php/Top_10-2017_A1-Injection |
7746 | quality-rule | Avoid LDAP injection vulnerabilities | Documentation english | total = Number of methods calling user input methods | Updated | total = Number of potentially vulnerable methods |
7748 | quality-rule | Avoid OS command injection vulnerabilities | Documentation english | reference = ...2007 CISQ: ASCSM-CWE-078 | Updated | reference = ...2007 CISQ rule: ASCSM-CWE-078. |
7748 | quality-rule | Avoid OS command injection vulnerabilities | Documentation english | total = Number of methods calling user input methods | Updated | total = Number of potentially vulnerable methods |
7750 | quality-rule | Avoid XPath injection vulnerabilities | Documentation english | reference = ...php/Top_10_2007 | Updated | reference = ...php/Top_10-2017_A1-Injection |
7750 | quality-rule | Avoid XPath injection vulnerabilities | Documentation english | total = Number of methods calling user input methods | Updated | total = Number of potentially vulnerable methods |
7750 | quality-rule | Avoid XPath injection vulnerabilities | Documentation english | Missing | Added | remediationSample = XPath xPath = XPathFactory.newInstance().newXPath(); InputSource inputXml = new ... |
7750 | quality-rule | Avoid XPath injection vulnerabilities | Documentation english | Missing | Added | sample = XPath xPath = XPathFactory.newInstance().newXPath(); InputSource inputXml = new ... |
7752 | quality-rule | Avoid file path manipulation vulnerabilities | Documentation english | reference = CWE-73: External Control of File Name or Path https://cwe.mitre.org/data/definit... | Updated | reference = CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Trave... |
7752 | quality-rule | Avoid file path manipulation vulnerabilities | Documentation english | total = Number of methods calling user input methods | Updated | total = Number of potentially vulnerable methods |
7832 | quality-rule | Avoid unreferenced Classes | Technologies | [ABAP, Visual Basic, C++, C#, VB.NET, JEE, .NET (Legacy Analyzer)] | Updated | Removed: [C#, VB.NET, .NET (Legacy Analyzer)] |
7882 | quality-rule | Avoid using Native SQL | Diagnosis | scopeID = 3, propertyID = 137357 | Updated | propertyID = 140984 |
7908 | quality-rule | Avoid unreferenced Methods | Technologies | [ABAP, Visual Basic, C++, C#, VB.NET, JEE, .NET (Legacy Analyzer)] | Updated | Removed: [C#, VB.NET, .NET (Legacy Analyzer)] |
7912 | quality-rule | Avoid unreferenced Data Members | Technologies | [ABAP, C++, C, C#, VB.NET, JEE, .NET (Legacy Analyzer)] | Updated | Removed: [C#, VB.NET, .NET (Legacy Analyzer)] |
8044 | quality-rule | Avoid log forging vulnerabilities | Documentation english | reference = ....org/data/definitions/117.html | Updated | reference = ....org/data/definitions/117.html Open Web Application Security Project (OWASP) ht... |
8044 | quality-rule | Avoid log forging vulnerabilities | Documentation english | total = Number of methods calling user input methods | Updated | total = Number of potentially vulnerable methods |
8098 | quality-rule | Avoid uncontrolled format string | Documentation english | reference = ...134.html ASCSM 1.0, Automated Source Code Security Measure, Object Management G... | Updated | reference = ...134.html Open Web Application Security Project (OWASP) https://www.owasp.org/in... |
8098 | quality-rule | Avoid uncontrolled format string | Documentation english | total = Number of methods calling user input methods | Updated | total = Number of potentially vulnerable methods |
8222 | quality-rule | Avoid hard-coded credentials | Documentation english | reference = ....org/data/definitions/259.html | Updated | reference = ....org/data/definitions/259.html Open Web Application Security Project (OWASP) ht... |
8222 | quality-rule | Avoid hard-coded credentials | Documentation english | total = Number of methods containing credential parameter(s) | Updated | total = Number of potentially vulnerable methods |
8238 | quality-rule | Avoid mixing trusted and untrusted data in HTTP requests | Documentation english | reference = ....org/data/definitions/501.html | Updated | reference = ....org/data/definitions/501.html Open Web Application Security Project (OWASP) ht... |
8238 | quality-rule | Avoid mixing trusted and untrusted data in HTTP requests | Documentation english | total = Number of methods calling user input methods | Updated | total = Number of potentially vulnerable methods |
8240 | quality-rule | Sensitive cookie in HTTPS session without 'Secure' attribute | Documentation english | reference = ...614.html https://www.owasp.org/index.php/Top_10_2013-A6-Sensitive_Data_Exposure... | Updated | reference = ...614.html Open Web Application Security Project (OWASP) https://www.owasp.org/in... |
8240 | quality-rule | Sensitive cookie in HTTPS session without 'Secure' attribute | Documentation english | total = ...ber of methods adding a cookie without setting the 'secured' attribute | Updated | total = ...ber of methods adding a cookie |
8242 | quality-rule | Use of insufficiently random values | Documentation english | reference = ....org/data/definitions/330.html | Updated | reference = ....org/data/definitions/330.html Open Web Application Security Project (OWASP) ht... |
8242 | quality-rule | Use of insufficiently random values | Documentation english | total = Number of methods calling methods producing insufficiently random numbers | Updated | total = Number of potentially vulnerable methods |
8408 | quality-rule | Avoid reflected cross-site scripting (non persistent) | Documentation english | reference = ...php/Top_10_2007 CISQ rule: ASCSM-CWE-79. 2011 Top 25 - Insecure Interaction Bet... | Updated | reference = ...php/Top_10-2017_A7-Cross-Site_Scripting_(XSS) CISQ rule: ASCSM-CWE-79. |
8408 | quality-rule | Avoid reflected cross-site scripting (non persistent) | Documentation english | total = Number of methods calling user input methods | Updated | total = Number of potentially vulnerable methods |
8410 | quality-rule | Avoid cross-site scripting (persistent) | Documentation english | reference = ...php/Top_10_2007 CISQ rule: ASCSM-CWE-79. 2011 Top 25 - Insecure Interaction Bet... | Updated | reference = ...php/Top_10-2017_A7-Cross-Site_Scripting_(XSS) CISQ rule: ASCSM-CWE-79. |
8410 | quality-rule | Avoid cross-site scripting (persistent) | Documentation english | total = Number of methods calling a "read database" method | Updated | total = Number of potentially vulnerable methods |
8412 | quality-rule | "CX_ROOT" should not be used in TRY .. CATCH.. ENDTRY block | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | Missing contribution | Added | critical = true, weight = 7 |
8412 | quality-rule | "CX_ROOT" should not be used in TRY .. CATCH.. ENDTRY block | Quality Contribution to 'Programming Practices - Modularity and OO Encapsulation Conformity' (61020) | critical = true, weight = 7 | Removed | Missing contribution |
8414 | quality-rule | Avoid weak cryptographic algorithm | Documentation english | name = Avoid use of a broken or risky cryptographic algorithm | Updated | name = Avoid weak cryptographic algorithm |
8414 | quality-rule | Avoid weak cryptographic algorithm | Documentation english | reference = ...327.html A3-OWASP | Updated | reference = ...327.html Open Web Application Security Project (OWASP) https://www.owasp.org/i... |
8414 | quality-rule | Avoid weak cryptographic algorithm | Documentation english | total = Number of methods calling user input methods | Updated | total = Number of potentially vulnerable methods |
8416 | quality-rule | Avoid use of a reversible one-way hash | Documentation english | reference = ...328.html A3-OWASP | Updated | reference = ...328.html Open Web Application Security Project (OWASP) https://www.owasp.org/i... |
8416 | quality-rule | Avoid use of a reversible one-way hash | Documentation english | total = Number of methods calling user input methods | Updated | total = Number of potentially vulnerable methods |
8418 | quality-rule | Avoid NoSQL injection | Technologies | [C#, VB.NET] | Updated | Added: [JEE] |
8418 | quality-rule | Avoid NoSQL injection | Documentation english | name = Avoid NoSQL injection on MongoDB (C#) | Updated | name = Avoid NoSQL injection |
8418 | quality-rule | Avoid NoSQL injection | Documentation english | reference = ...e.org/data/definitions/89.html | Updated | reference = ...e.org/data/definitions/89.html Open Web Application Security Project (OWASP) h... |
8418 | quality-rule | Avoid NoSQL injection | Documentation english | total = Number of methods calling user input methods | Updated | total = Number of potentially vulnerable methods |
8420 | quality-rule | Avoid second order SQL injection | Documentation english | reference = ...php/Top_10_2007 CISQ rule: ASCSM-CWE-89. | Updated | reference = ...php/Top_10-2017_A1-Injection CISQ rule: ASCSM-CWE-89. |
8420 | quality-rule | Avoid second order SQL injection | Documentation english | total = Number of methods calling a "read database" method | Updated | total = Number of potentially vulnerable methods |
8424 | quality-rule | Avoid using hard-coded HMAC keys | Documentation english | reference = .../321.html A3-OWASP 2017 https://www.owasp.org/index.php/Top_10-2017_A3-Sensitive... | Updated | reference = .../321.html Open Web Application Security Project (OWASP) https://www.owasp.org/... |
8424 | quality-rule | Avoid using hard-coded HMAC keys | Documentation english | total = Number of methods containing HMAC key(s) | Updated | total = Number of potentially vulnerable methods |
8434 | quality-rule | Avoid process control | Documentation english | reference = ...php/Top_10_2007 CISQ: ASCSM-CWE-078 | Updated | reference = ...php/Top_10-2017_A1-Injection CISQ: ASCSM-CWE-078 |
8434 | quality-rule | Avoid process control | Documentation english | total = Number of methods calling user input methods | Updated | total = Number of potentially vulnerable methods |
8436 | quality-rule | Avoid thread injection vulnerabilities | Documentation english | reference = ...php/Top_10_2007 CISQ: ASCSM-CWE-078 | Updated | reference = ...php/Top_10-2017_A1-Injection CISQ: ASCSM-CWE-078 |
8436 | quality-rule | Avoid thread injection vulnerabilities | Documentation english | total = Number of methods calling user input methods | Updated | total = Number of potentially vulnerable methods |
8438 | quality-rule | Avoid code injection | Documentation english | reference = ...php/Top_10_2007 CISQ: ASCSM-CWE-078 | Updated | reference = ...php/Top_10-2017_A1-Injection CISQ: ASCSM-CWE-078 |
8438 | quality-rule | Avoid code injection | Documentation english | total = Number of methods calling user input methods | Updated | total = Number of potentially vulnerable methods |
8440 | quality-rule | Avoid reflection injection | Documentation english | reference = ...index.php/Top_10_2007 CISQ: ASCSM-CWE-470 | Updated | reference = ...index.php/Unsafe_use_of_Reflection https://www.owasp.org/index.php/Top_10-2017_A... |
8440 | quality-rule | Avoid reflection injection | Documentation english | total = Number of methods calling user input methods | Updated | total = Number of potentially vulnerable methods |
8442 | quality-rule | Avoid resource injection | Documentation english | reference = .../Top_10_2007 CISQ rule: ASCSM-CWE-99. | Updated | reference = .../Top_10_2013-A4-Insecure_Direct_Object_References CISQ rule: ASCSM-CWE-99. |
8442 | quality-rule | Avoid resource injection | Documentation english | total = Number of methods calling user input methods | Updated | total = Number of potentially vulnerable methods |
8444 | quality-rule | Avoid resource URL manipulation | Documentation english | reference = .../Top_10_2007 CISQ rule: ASCSM-CWE-99. | Updated | reference = .../Top_10_2013-A4-Insecure_Direct_Object_References CISQ rule: ASCSM-CWE-99. |
8444 | quality-rule | Avoid resource URL manipulation | Documentation english | total = Number of methods calling user input methods | Updated | total = Number of potentially vulnerable methods |
AIP 8.3.14 - 8.3.15
This section lists the results of a comparison between a CAST AIP 8.3.14 Assessment Model and the CAST AIP 8.3.15 Assessment Model. You can download the original compare_8314_8315.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.14 Assessment Model | Change | CAST 8.3.15 Assessment Model |
1058 | quality-rule | Avoid large Files - too many Lines of Code | Parameter #1 | name = Maximum line count, type = integer, description = Maximum line count | Updated | name = Maximum Line Count |
1060 | quality-rule | Avoid large Macros - too many Lines of Code | Parameter #1 | name = Maximum line count, type = integer, description = Maximum line count | Updated | name = Maximum Line Count |
2254 | quality-rule | Avoid large Page files (JEE) | Parameter #1 | name = Maximum Line Count, type = integer, description = Maximum Line Count | Updated | name = Maximum line count |
2258 | quality-rule | All image files should be in a specific directory | Parameter #2 | name = image_extensions, type = text-list, description = the list of authorized extension for images | Updated | name = Extensions for image files |
2266 | quality-rule | Avoid non standard file extensions (JEE) | Parameter #1 | name = Extensions, type = text-list, description = Standard file extensions | Updated | name = Standard file extensions |
3062 | quality-rule | Use of error handling page | Parameter #1 | name = Error handling page, type = text-list, description = Error handling page names | Updated | name = Error handling page names |
3070 | quality-rule | Avoid non standard file extensions (ASP) | Parameter #1 | name = Extensions for files, type = text-list, description = Extensions for files | Updated | name = Standard file extensions |
4602 | quality-rule | Avoid using Fields (non static final) from other Classes | Documentation english | Missing | Added | total = Number of non abstract Java artifacts |
4610 | quality-rule | Avoid using anonymous Classes | Parameter #1 | name = exclude_interfaces, type = text-list, description = Lits of Interfaces to exclude | Updated | name = Interfaces to exclude, description = List of Interfaces to exclude |
4612 | quality-rule | Avoid using native Methods (JNI) | Parameter #1 | name = Ignore Libraries, type = text-list, description = Native methods contained in the libraries will be ignored | Updated | name = Libraries to exclude |
6106 | quality-rule | User event naming convention - declare only | Parameter #1 | name = Prefix, type = text, description = User event ue naming convention | Updated | description = User event naming convention |
6128 | quality-rule | Avoid window with too high level of inheritance | Parameter #1 | name = MaxLevel, type = integer, description = Level | Updated | name = Maximum number of levels |
6130 | quality-rule | Avoid userobject with too high level of inheritance | Parameter #1 | name = MaxLevel, type = integer, description = Max inherit level for userobject | Updated | name = Maximum number of levels |
6134 | quality-rule | Avoid menu with too high level of inheritance | Parameter #1 | name = MAXLEVEL, type = integer, description = MAX INHERIT LEVEL FOR MENU | Updated | name = Maximum number of levels |
6142 | quality-rule | Avoid Windows with too many Methods | Parameter #1 | name = MaxMethod, type = integer, description = Max number of methods | Updated | name = Maximum number of methods |
6144 | quality-rule | Avoid Userobject with too many Methods | Parameter #1 | name = MaxMethod, type = integer, description = Max number of methods | Updated | name = Maximum number of methods |
7050 | quality-rule | Function naming convention | Parameter #1 | name = prefix_1, type = text-list, description = Function naming convention | Updated | name = Prefix #1 |
7050 | quality-rule | Function naming convention | Parameter #2 | name = prefix_2, type = text-list, description = Function naming convention | Updated | name = Prefix #2 |
7050 | quality-rule | Function naming convention | Parameter #3 | name = prefix_3, type = text-list, description = Function naming convention | Updated | name = Prefix #3 |
7050 | quality-rule | Function naming convention | Parameter #4 | name = prefix_4, type = text-list, description = Function naming convention | Updated | name = Prefix #4 |
7050 | quality-rule | Function naming convention | Parameter #5 | name = prefix_5, type = text-list, description = Function naming convention | Updated | name = Prefix #5 |
7050 | quality-rule | Function naming convention | Parameter #6 | name = prefix_6, type = text-list, description = Function naming convention | Updated | name = Prefix #6 |
7072 | quality-rule | Program naming convention | Parameter #1 | name = prefix, type = text-list, description = naming convention | Updated | name = Prefixes |
7074 | quality-rule | Include naming convention | Parameter #1 | name = prefix, type = text-list, description = naming convention | Updated | name = Prefixes |
7132 | quality-rule | Action Mappings should have few forwards | Parameter #1 | name = Max number of forward, type = integer, description = Number of forward | Updated | name = Maximum number of forwards |
7156 | quality-rule | Avoid Too Many Copy Pasted Artifacts | Parameter #1 | name = SIMILARITY, type = integer, description = This is a percentage. | Updated | name = Minimum % of Similarity |
7200 | quality-rule | Avoid String concatenation in loops (JEE) | Diagnosis | scopeID = 0, propertyID = 0 | Updated | scopeID = 1022002, propertyID = 140948 |
7200 | quality-rule | Avoid String concatenation in loops (JEE) | Documentation english | description = ...eported. Note that the JVM is optimizing code such as System.out.println("x:"+x... | Updated | description = ...eported. Note that the JVM is optimizing code such as System.out.println("x... |
7200 | quality-rule | Avoid String concatenation in loops (JEE) | Documentation english | output = ...in loops. It provides the following information: Method full name | Updated | output = ...in loops. It provides the following information: Method full name |
7200 | quality-rule | Avoid String concatenation in loops (JEE) | Documentation english | remediationSample = ..."hello"); for (int i = 0; i < 1500; i++) { result.append("hello"); // FIXED ... | Updated | remediationSample = ..."hello"); for (int i = 0; i < 1500; i++) { result.append("hello"); // FI... |
7200 | quality-rule | Avoid String concatenation in loops (JEE) | Documentation english | sample = ... "hello"; for (int i = 0; i < 1500; i++) { result += "hello"; // VIOLATION } | Updated | sample = ... "hello"; for (int i = 0; i < 1500; i++) { result += "hello"; // VIOLATI... |
7200 | quality-rule | Avoid String concatenation in loops (JEE) | Diagnosis | diagnosisValueType = no-value | Updated | diagnosisValueType = integer |
7200 | quality-rule | Avoid String concatenation in loops (JEE) | Operation | localSiteDiagnose = DIAG_SCOPE_JAVAEMEM002 | Updated | localSiteDiagnose = null |
7200 | quality-rule | Avoid String concatenation in loops (JEE) | Operation | localSiteCountTotal = DIAG_JAVA_NA_ARTIFACT_TOTAL | Updated | localSiteCountTotal = null |
7240 | quality-rule | Action Classes should only call Business Classes | Parameter #1 | name = name_package, type = text, description = Business package list | Updated | name = Business package names |
7244 | quality-rule | Avoid direct usage of EJB Entity from the client | Parameter #1 | name = name_package, type = text, description = list of package | Updated | name = Package names |
7246 | quality-rule | Avoid Packages with High Efferent Coupling (CE) | Parameter #1 | name = CE, type = integer, description = Value max | Updated | name = Efferent Coupling maximum value |
7248 | quality-rule | Avoid Packages with High Afferent Coupling (CA) | Parameter #1 | name = CA, type = integer, description = Value max | Updated | name = Afferent Coupling maximum value |
7260 | quality-rule | User Interface elements must not use directly the database | Parameter #1 | name = namespace, type = text-list, description = List of namespace | Updated | name = Namespaces |
7262 | quality-rule | Avoid Namespaces with High Efferent Coupling (CE) | Parameter #1 | name = CE, type = integer, description = CE value max | Updated | name = Efferent Coupling maximum value |
7264 | quality-rule | Avoid namespaces with High Afferent Coupling (CA) | Parameter #1 | name = CA, type = integer, description = CA max value | Updated | name = Afferent Coupling maximum value |
7300 | quality-rule | Avoid large Paragraphs - too many Lines of Code | Parameter #1 | name = nb_loc, type = integer, description = Threshold number of LoC | Updated | name = Maximum line count |
7384 | quality-rule | DELETED: Large Programs should be called dynamically | Parameter #1 | name = LOB, type = integer, description = Nb of code lines of the subprogram | Updated | name = Maximum number of Lines of Code of a subprogram |
7390 | quality-rule | Avoid having multiple artifacts inserting data on the same SQL Table | Parameter #1 | name = Maximum_Artifacts_Insert, type = integer, description = Retreives all tables having more than _Maximum_ number of Artifacts inserting | Updated | description = Retrieves all tables having more than _Maximum_ number of Artifacts inserting |
7392 | quality-rule | Avoid having multiple artifacts deleting data on the same SQL table | Parameter #1 | name = Maximum_Artifacts_Delete, type = integer, description = Retreives all tables having more than _Maximum_ number of Artifacts deleting | Updated | description = Retrieves all tables having more than _Maximum_ number of Artifacts deleting |
7394 | quality-rule | Avoid having multiple artifacts updating data on the same SQL Table | Parameter #1 | name = Maximum_Artifacts_Update, type = integer, description = Retreives all tables having more than _Maximum_ number of Artifacts updating | Updated | description = Retrieves all tables having more than _Maximum_ number of Artifacts updating |
7396 | quality-rule | DELETED: Subprograms called multiple times should be called statically | Parameter #1 | name = NbDynSubPgmCall, type = integer, description = Number of dynamic calls to the same subprogram | Updated | name = Maximum number of dynamic calls to the same subprogram |
7486 | quality-rule | Split universes of more than X MB | Parameter #1 | name = maxi_size, type = integer, description = Maximum size of universe in MB | Updated | name = Maximum size of universe in MB |
7514 | quality-rule | Avoid empty Includes | Parameter #1 | name = exception, type = text-list, description = Exception of include | Updated | name = Includes to ignore |
7530 | quality-rule | Avoid "SELECT *" or "SELECT SINGLE *" queries | Parameter #1 | name = table_excep, type = text-list, description = List of tables to exclude | Updated | name = Tables to exclude |
7642 | quality-rule | Avoid SQL queries on XXL tables not using the first column of a composite index in the WHERE clause | Parameter #1 | name = threshold, type = integer, description = tables are considered as XXL if the number of rows is greater than this value | Updated | name = Minimum number of rows to consider a table as XXL |
7652 | quality-rule | Avoid throwing an exception in a catch block without chaining it | Diagnosis | scopeID = 0, propertyID = 0 | Updated | scopeID = 1022003, propertyID = 140954 |
7652 | quality-rule | Avoid throwing an exception in a catch block without chaining it | Diagnosis | diagnosisValueType = no-value | Updated | diagnosisValueType = integer |
7652 | quality-rule | Avoid throwing an exception in a catch block without chaining it | Operation | localSiteDiagnose = DIAG_SCOPE_JAVAPPEE002 | Updated | localSiteDiagnose = null |
7652 | quality-rule | Avoid throwing an exception in a catch block without chaining it | Operation | localSiteCountTotal = DIAG_JAVA_CTORCATCH_TOTAL | Updated | localSiteCountTotal = null |
7658 | quality-rule | Avoid SQL queries on XXL Tables using Functions on indexed Columns in the WHERE clause | Parameter #1 | name = threshold, type = integer, description = tables are considered as XXL if the number of rows is greater than this value | Updated | name = Minimum number of rows to consider a table as XXL |
7660 | quality-rule | Never use SQL queries with a cartesian product on XXL Tables | Parameter #1 | name = threshold, type = integer, description = tables are considered as XXL if the number of rows is greater than this value | Updated | name = Minimum number of rows to consider a table as XXL |
7662 | quality-rule | Avoid SQL queries on XXL Tables with implicit conversions in the WHERE clause | Parameter #1 | name = threshold, type = integer, description = tables are considered as XXL if the number of rows is greater than this value | Updated | name = Minimum number of rows to consider a table as XXL |
7664 | quality-rule | Avoid using FOR ALL ENTRIES IN without emptiness check on XXL Tables | Parameter #1 | name = threshold, type = integer, description = tables are considered as XXL if the number of rows is greater than this value | Updated | name = Minimum number of rows to consider a table as XXL |
7666 | quality-rule | Avoid using SELECT ... ENDSELECT statement on XXL Tables | Parameter #1 | name = threshold, type = integer, description = tables are considered as XXL if the number of rows is greater than this value | Updated | name = Minimum number of rows to consider a table as XXL |
7676 | quality-rule | Avoid too many packages referencing Mainframe | Parameter #1 | name = maxpck, type = integer, description = Maximum number of packages referencing Mainframe | Updated | name = Maximum number of packages referencing Mainframe |
7678 | quality-rule | Avoid using specific logging implementation | Parameter #1 | name = logpck, type = text-list, description = logging implemention package | Updated | name = Logging implemention packages |
7682 | quality-rule | Avoid domain model depending on other Java API | Parameter #1 | name = exclude_packages, type = text-list, description = all packages to avoid | Updated | name = Packages to exclude |
7702 | quality-rule | Use a third party connection pool | Parameter #1 | name = pool_properties, type = text-list, description = list of other specific third party connection pool properties to check if defined | Updated | name = Specific third party connection pool properties to check |
7706 | quality-rule | Avoid table and column names that are too long (portability) | Diagnosis | scopeID = 0, propertyID = 0 | Updated | scopeID = 1022001, propertyID = 140927 |
7706 | quality-rule | Avoid table and column names that are too long (portability) | Parameter #1 | name = table_name_max_length, type = integer, description = maximum length authorized for the table name | Updated | name = Maximum length for the table names |
7706 | quality-rule | Avoid table and column names that are too long (portability) | Parameter #2 | name = column_name_max_length, type = integer, description = maximum length authorized for column name | Updated | name = Maximum length for the column names |
7706 | quality-rule | Avoid table and column names that are too long (portability) | Diagnosis | diagnosisValueType = no-value | Updated | diagnosisValueType = integer |
7706 | quality-rule | Avoid table and column names that are too long (portability) | Operation | localSiteDiagnose = DIAG_SCOPE_JEEAOPI002 | Updated | localSiteDiagnose = null |
7706 | quality-rule | Avoid table and column names that are too long (portability) | Operation | localSiteCountTotal = DIAG_JEE_ENTPRPS_TOTAL | Updated | localSiteCountTotal = null |
7720 | quality-rule | Avoid too many EJB bean | Parameter #1 | name = max_nb_ejb, type = integer, description = Maximum number of EJB authorized | Updated | name = Maximum number of EJB |
7730 | quality-rule | Use declarative transaction | Documentation english | remediationSample = ... try { \t userDAO.update(user); } catch (Exception up) { contex... | Updated | remediationSample = ... try { userDAO.update(user); } catch (Exception up) { con... |
7730 | quality-rule | Use declarative transaction | Documentation english | sample = ...violation \t ....... transaction.commit(); // committing: violation ... | Updated | sample = ...violation ....... transaction.commit(); // committing: violation ... |
7740 | quality-rule | Avoid cross-site scripting vulnerabilities | Documentation english | reference = ...ing') http://cwe.mitre.org/data/definitions/79.html Open Web Application Securi... | Updated | reference = ...ing') https://cwe.mitre.org/data/definitions/79.html Open Web Application Secur... |
7742 | quality-rule | Avoid SQL injection vulnerabilities | Documentation english | reference = CWE-89 : Failure to Preserve SQL Query Structure (aka 'SQL injection') http://cw... | Updated | reference = CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL... |
7746 | quality-rule | Avoid LDAP injection vulnerabilities | Documentation english | reference = CWE-90 : Improper Neutralization of Special Elements used in an LDAP Query ('LDA... | Updated | reference = CWE-90: Improper Neutralization of Special Elements used in an LDAP Query ('LDAP... |
7748 | quality-rule | Avoid OS command injection vulnerabilities | Documentation english | reference = ...ion') http://cwe.mitre.org/data/definitions/78.html Open Web Application Securi... | Updated | reference = ...ion') https://cwe.mitre.org/data/definitions/78.html Open Web Application Secur... |
7748 | quality-rule | Avoid OS command injection vulnerabilities | Documentation english | remediation = To avoid the creation of injection flaws, the Open Web Application Security Proj... | Updated | remediation = Assume all input is malicious. Avoid using inputs. If it is not possible, use a... |
7750 | quality-rule | Avoid XPath injection vulnerabilities | Documentation english | reference = ...Injection)http://cwe.mitre.org/data/definitions/91.html Open Web Application Se... | Updated | reference = ...Injection) https://cwe.mitre.org/data/definitions/91.html Open Web Application ... |
7752 | quality-rule | Avoid file path manipulation vulnerabilities | Documentation english | reference = CWE-73 : External Control of File Name or Path http://cwe.mitre.org/data/definit... | Updated | reference = CWE-73: External Control of File Name or Path https://cwe.mitre.org/data/definit... |
7752 | quality-rule | Avoid file path manipulation vulnerabilities | Documentation english | remediation = Validate all the user inputs. To avoid the creation of injection flaws, the Ope... | Updated | remediation = Assume all input is malicious. Avoid using inputs. If it is not possible, use a... |
7768 | quality-rule | Avoid Artifacts with High Depth of Code | Parameter #1 | name = Max Depth of Code, type = integer, description = Max Depth of Code per artifact | Updated | name = Maximum Depth of Code |
7770 | quality-rule | Avoid Artifacts with too many parameters | Parameter #1 | name = Maximum parameters, type = integer, description = Max parameters number | Updated | name = Maximum number of parameters |
7774 | quality-rule | Avoid Artifacts with High Integration Complexity | Parameter #1 | name = Maximum integration complexity, type = float, description = Max integration complexity per method | Updated | name = Maximum Integration Complexity |
7778 | quality-rule | Avoid Artifacts with High Fan-Out | Parameter #1 | name = Maximum High Fan-Out, type = integer, description = Max High Fan-Out per method | Updated | name = Maximum Fan-Out |
7786 | quality-rule | Avoid long Table or View names | Parameter #1 | name = Max length, type = integer, description = Maximum length for Table or View name | Updated | name = Maximum length |
7848 | quality-rule | Interface naming convention - prefix | Parameter #2 | name = Case sensitive, type = text, description = Name is Case sensitive | Updated | name = Name is case sensitive |
7856 | quality-rule | Avoid Tables with more than 20 columns on an OLTP system | Parameter #1 | name = Max nbr of columns, type = integer, description = Maximum number of columns in a table | Updated | name = Maximum number of columns in a table |
7904 | quality-rule | Avoid SQL queries on XXL tables that no index can support | Parameter #1 | name = threshold, type = integer, description = tables are considered as XXL if the number of rows is greater than this value | Updated | name = Minimum number of rows to consider a table as XXL |
7908 | quality-rule | Avoid unreferenced Methods | Parameter #1 | name = include_getter_setter, type = integer, description = Take in to account the getter and setter | Updated | name = Take into account the getter and setter, description = Take into account the getter and setter |
7912 | quality-rule | Avoid unreferenced Data Members | Parameter #1 | name = include_getter_setter, type = integer, description = Take in to account the getter and setter | Updated | name = Take into account the getter and setter, description = Take into account the getter and setter |
7944 | quality-rule | Avoid High Response for Classes | Parameter #1 | name = Maximum Response, type = float, description = Max Response per class | Updated | name = Maximum Response for a Class |
7956 | quality-rule | Avoid indirect exception handling inside loops | Parameter #1 | name = depth_level, type = integer, description = Depth level of a call path | Updated | name = Depth level of a call path |
8022 | quality-rule | Avoid hiding attributes | Parameter #1 | name = attribut name to exclude, type = text-list, description = attributs to ignore | Updated | name = Attribute names to exclude |
8022 | quality-rule | Avoid hiding attributes | Parameter #2 | name = type to exclude, type = text-list, description = type or sub-class to exclude | Updated | name = Types or sub-classes to exclude |
8036 | quality-rule | Avoid improperly written triangular joins with XXL tables in PL/SQL code | Parameter #1 | name = threshold, type = integer, description = tables are considered as XXL if the number of rows is greater than this value | Updated | name = Minimum number of rows to consider a table as XXL |
8044 | quality-rule | Avoid log forging vulnerabilities | Documentation english | reference = http://cwe.mitre.org/data/definitions/117.html | Updated | reference = CWE-117: Improper Output Neutralization for Logs https://cwe.mitre.org/data/defi... |
8098 | quality-rule | Avoid uncontrolled format string | Documentation english | reference = ASCSM 1.0, Automated Source Code Security Measure, Object Management Group. CWE... | Updated | reference = CWE-134: Use of Externally-Controlled Format String https://cwe.mitre.org/data/d... |
8110 | quality-rule | Use dedicated stored procedures when multiple data accesses are needed (ASCPEM-PRF-10) | Parameter #1 | name = threshold, type = integer, description = A method is considered to call too many SQL functions if the number of calls is greater than this value | Updated | name = Minimum number of rows to consider a table as XXL |
8214 | quality-rule | Expired or Released Resource should not be used | Documentation english | description = ...sion(...) \t. close: org.springframework.orm.hibernate4.SessionFactoryUtils.close... | Updated | description = ...sion(...) . close: org.springframework.orm.hibernate4.SessionFactoryUtils.cl... |
8214 | quality-rule | Expired or Released Resource should not be used | Documentation english | name = CWE-672: Expired or Released Resource should not be used | Updated | name = Expired or Released Resource should not be used |
8214 | quality-rule | Expired or Released Resource should not be used | Documentation english | sample = ...(); System.out.println("Connection closed........."); if(!connection... | Updated | sample = ...(); connection.prepareStatement("select * from ...."); } |
8222 | quality-rule | Avoid hard-coded credentials | Documentation english | reference = ...tials http://cwe.mitre.org/data/definitions/798.html | Updated | reference = ...tials https://cwe.mitre.org/data/definitions/798.html CWE-259: Use of Hard-code... |
8238 | quality-rule | Avoid mixing trusted and untrusted data in HTTP requests | Documentation english | reference = http://cwe.mitre.org/data/definitions/501.html | Updated | reference = CWE-501: Trust Boundary Violation https://cwe.mitre.org/data/definitions/501.htm... |
8240 | quality-rule | Sensitive cookie in HTTPS session without 'Secure' attribute | Documentation english | reference = https://cwe.mitre.org/data/definitions/614.html https://www.owasp.org/index.php... | Updated | reference = CWE-614: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute https://cw... |
8240 | quality-rule | Sensitive cookie in HTTPS session without 'Secure' attribute | Documentation english | remediation = ...kie should sent via HTTPS only | Updated | remediation = ...kie should sent via HTTPS only. |
8242 | quality-rule | Use of insufficiently random values | Documentation english | reference = ...0: Use of insufficiently random values http://cwe.mitre.org/data/definitions/330... | Updated | reference = ...0: Use of Insufficiently Random Values https://cwe.mitre.org/data/definitions/33... |
8408 | quality-rule | Avoid reflected cross-site scripting (non persistent) | Documentation english | reference = http://cwe.mitre.org/data/definitions/79.html CWE-79: Improper Neutralization o... | Updated | reference = CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site... |
8410 | quality-rule | Avoid cross-site scripting (persistent) | Documentation english | reference = http://cwe.mitre.org/data/definitions/79.html CWE-79: Improper Neutralization o... | Updated | reference = CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site... |
8410 | quality-rule | Avoid cross-site scripting (persistent) | Documentation english | remediation = ...diation is : Performing secure input handling in both client-side and server-sid... | Updated | remediation = ...diation is: performing secure input handling in both client-side and server-side... |
8414 | quality-rule | Avoid use of a broken or risky cryptographic algorithm | Documentation english | reference = http://cwe.mitre.org/data/definitions/327.html A3-OWASP | Updated | reference = CWE-327: Use of a Broken or Risky Cryptographic Algorithm https://cwe.mitre.org/... |
8416 | quality-rule | Avoid use of a reversible one-way hash | Documentation english | reference = CWE-328 http://cwe.mitre.org/data/definitions/328.html | Updated | reference = CWE-328: Reversible One-Way Hash https://cwe.mitre.org/data/definitions/328.html... |
8418 | quality-rule | Avoid NoSQL injection on MongoDB (C#) | Documentation english | reference = http://cwe.mitre.org/data/definitions/89.html | Updated | reference = CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL... |
8420 | quality-rule | Avoid second order SQL injection | Documentation english | reference = CWE-89 : Failure to Preserve SQL Query Structure (aka 'SQL injection') http://cw... | Updated | reference = CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL... |
8424 | quality-rule | Avoid using hard-coded HMAC keys | Documentation english | reference = A3-OWASP 2017 https://www.owasp.org/index.php/Top_10-2017_A3-Sensitive_Data_Expo... | Updated | reference = CWE-321: Use of Hard-coded Cryptographic Key https://cwe.mitre.org/data/definiti... |
8434 | quality-rule | Avoid process control | Definition | Missing | Added | active = true, detached = false |
8434 | quality-rule | Avoid process control | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8436 | quality-rule | Avoid thread injection vulnerabilities | Definition | Missing | Added | active = true, detached = false |
8436 | quality-rule | Avoid thread injection vulnerabilities | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8438 | quality-rule | Avoid code injection | Definition | Missing | Added | active = true, detached = false |
8438 | quality-rule | Avoid code injection | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8440 | quality-rule | Avoid reflection injection | Definition | Missing | Added | active = true, detached = false |
8440 | quality-rule | Avoid reflection injection | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8442 | quality-rule | Avoid resource injection | Definition | Missing | Added | active = true, detached = false |
8442 | quality-rule | Avoid resource injection | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8444 | quality-rule | Avoid resource URL manipulation | Definition | Missing | Added | active = true, detached = false |
8444 | quality-rule | Avoid resource URL manipulation | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
66067 | quality-measure | Copy Pasted Code (% of LOC) | Parameter #1 | name = SIMILARITY, type = float, description = This is a percentage. | Updated | name = Minimum % of Similarity |
AIP 8.3.13 - 8.3.14
This section lists the results of a comparison between a CAST AIP 8.3.13 Assessment Model and the CAST AIP 8.3.14 Assessment Model. You can download the original compare_8313_8314.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.13 Assessment Model | Change | CAST 8.3.14 Assessment Model |
4700 | quality-rule | DELETED: Avoid using 'Throwable.printStackTrace()' within a try catch block | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4700 | quality-rule | DELETED: Avoid using 'Throwable.printStackTrace()' within a try catch block | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | critical = false, weight = 6 | Removed | Missing contribution |
7244 | quality-rule | Avoid direct usage of EJB Entity from the client | Quality Contribution to 'Architecture - Multi-Layers and Data Access' (61001) | critical = false, weight = 3 | Removed | Missing contribution |
7364 | quality-rule | DELETED: Avoid multiple validation form with the same name | Activation | active = true, detached = false | Updated | active = false, detached = true |
7364 | quality-rule | DELETED: Avoid multiple validation form with the same name | Documentation english | name = Avoid multiple validation form with the same name | Updated | name = DELETED: Avoid multiple validation form with the same name |
7364 | quality-rule | Avoid multiple validation form with the same name | Quality Contribution to 'Secure Coding - Input Validation' (66062) | critical = false, weight = 9 | Removed | Missing contribution |
7436 | quality-rule | Prefer UNION ALL to UNION | Documentation english | output = ...ALL) occurences | Updated | output = ...ALL) occurrences |
7460 | quality-rule | DELETED:Avoid using untyped DataSet | Activation | active = true, detached = false | Updated | active = false, detached = true |
7460 | quality-rule | DELETED:Avoid using untyped DataSet | Documentation english | name = Avoid using untyped DataSet | Updated | name = DELETED:Avoid using untyped DataSet |
7460 | quality-rule | Avoid using untyped DataSet | Quality Contribution to 'Programming Practices - Structuredness' (61024) | critical = true, weight = 6 | Removed | Missing contribution |
7742 | quality-rule | Avoid SQL injection vulnerabilities | Documentation english | rationale = In web based applications, the validation of all user input is critical to avoid... | Updated | rationale = The software constructs all or part of an SQL command via user-controllable inpu... |
7746 | quality-rule | Avoid LDAP injection vulnerabilities | Documentation english | rationale = ...ses other unintended behavior. In web based applications, the validation of all... | Updated | rationale = ...ses other unintended behavior. |
7748 | quality-rule | Avoid OS command injection vulnerabilities | Documentation english | rationale = This could allow attackers to execute unexpected, dangerous commands directly on... | Updated | rationale = The software constructs all or part of an OS command using externally-influenced... |
7750 | quality-rule | Avoid XPath injection vulnerabilities | Documentation english | rationale = In web based applications, the validation of all user input is critical to avoid... | Updated | rationale = The software does not properly neutralize special elements that are used in XML,... |
7752 | quality-rule | Avoid file path manipulation vulnerabilities | Documentation english | rationale = This could allow an attacker to access or modify system files or other files tha... | Updated | rationale = The software does not properly neutralize special elements that are part of path... |
7952 | quality-rule | Avoid synonym with both private & PUBLIC Definition in PL/SQL context | Documentation english | associatedValueName = Associated Value | Removed | Missing |
8128 | quality-rule | DELETED: Avoid using UPDATE and DELETE without WHERE condition | Documentation english | name = Avoid using UPDATE and DELETE without WHERE condition | Updated | name = DELETED: Avoid using UPDATE and DELETE without WHERE condition |
8238 | quality-rule | Avoid mixing trusted and untrusted data in HTTP requests | Documentation english | name = Trust boundary violation | Updated | name = Avoid mixing trusted and untrusted data in HTTP requests |
8400 | quality-rule | Avoid having lock on this object | Activation | active = true, detached = true | Updated | detached = false |
8400 | quality-rule | Avoid having lock on this object | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | Missing contribution | Added | critical = false, weight = 5 |
8410 | quality-rule | Avoid cross-site scripting (persistent) | Documentation english | total = ...s calling user input methods | Updated | total = ...s calling a "read database" method |
8418 | quality-rule | Avoid NoSQL injection on MongoDB (C#) | Documentation english | rationale = In web based applications, the validation of all user input is critical to avoid... | Updated | rationale = The software constructs all or part of No-SQL command via user-controllable inpu... |
8418 | quality-rule | Avoid NoSQL injection on MongoDB (C#) | Quality Contribution to 'Secure Coding - Input Validation' (66062) | critical = false, weight = 9 | Updated | critical = true |
8420 | quality-rule | Avoid second order SQL injection | Documentation english | rationale = In web based applications, the validation of all user input is critical to avoid... | Updated | rationale = The software constructs all or part of an SQL command via user-controllable inpu... |
8420 | quality-rule | Avoid second order SQL injection | Documentation english | total = ...s calling user input methods | Updated | total = ...s calling a "read database" method |
8420 | quality-rule | Avoid second order SQL injection | Quality Contribution to 'Secure Coding - Input Validation' (66062) | critical = false, weight = 9 | Updated | critical = true |
AIP 8.3.12 - 8.3.13
This section lists the results of a comparison between a CAST AIP 8.3.12 Assessment Model and the CAST AIP 8.3.13 Assessment Model. You can download the original compare_8312_8313.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.12 Assessment Model | Change | CAST 8.3.13 Assessment Model |
8418 | quality-rule | Avoid NoSQL injection on MongoDB (C#) | Definition | Missing | Added | active = true, detached = false |
8420 | quality-rule | Avoid second order SQL injection | Definition | Missing | Added | active = true, detached = false |
8422 | quality-rule | Avoid Using COMMIT WORK or ROLLBACK WORK during update work process | Definition | Missing | Added | active = true, detached = false |
8424 | quality-rule | Avoid using hard-coded HMAC keys | Definition | Missing | Added | active = true, detached = false |
8426 | quality-rule | Avoid calling database commands directly using system functions as "C_DB_EXECUTE" and "C_DB_FUNCTION" | Definition | Missing | Added | active = true, detached = false |
8428 | quality-rule | Authorization check should be done before calling a transaction | Definition | Missing | Added | active = true, detached = false |
8430 | quality-rule | Avoid using hardcoded seed or no seed at all for random values generation | Definition | Missing | Added | active = true, detached = false |
8432 | quality-rule | Avoid Cross-Client Database Access using Open SQL statements with CLIENT SPECIFIED/USING CLIENT addition | Definition | Missing | Added | active = true, detached = false |
7740 | quality-rule | Avoid cross-site scripting vulnerabilities | Documentation english | description = ... CAST dataflow engine, this metric detects paths from user input methods to HTML... | Updated | description = ... CAST data-flow engine, this metric detects paths from user input methods to HTM... |
7742 | quality-rule | Avoid SQL injection vulnerabilities | Documentation english | description = ... CAST dataflow engine to detect a call path where input data from the user is se... | Updated | description = ... CAST data-flow engine to detect a call path where input data from the user is s... |
7742 | quality-rule | Avoid SQL injection vulnerabilities | Documentation english | rationale = ... from the Injection flaws. To avoid the creation of Injection flaws, the Open W... | Updated | rationale = ... from the injection flaws. To avoid the creation of injection flaws, the Open W... |
7742 | quality-rule | Avoid SQL injection vulnerabilities | Documentation english | reference = ...(aka 'SQL Injection') http://cwe.mitre.org/data/definitions/89.html Open Web Ap... | Updated | reference = ...(aka 'SQL injection') http://cwe.mitre.org/data/definitions/89.html Open Web Ap... |
7742 | quality-rule | Avoid SQL injection vulnerabilities | Documentation english | sample = ...ted user. ... string userName = ctx.getAuthenticatedUserName(); string query = "... | Updated | sample = ...ted user. ... string userName = ctx.getAuthenticatedUserName(); string query = ... |
7746 | quality-rule | Avoid LDAP injection vulnerabilities | Documentation english | description = ... CAST dataflow engine, this metric detects paths from user input methods down to... | Updated | description = ... CAST data-flow engine, this metric detects paths from user input methods down t... |
7746 | quality-rule | Avoid LDAP injection vulnerabilities | Documentation english | rationale = ... from the Injection flaws. To avoid the creation of Injection flaws, the Open W... | Updated | rationale = ... from the injection flaws. To avoid the creation of injection flaws, the Open W... |
7746 | quality-rule | Avoid LDAP injection vulnerabilities | Documentation english | reference = ...ry ('LDAP Injection') http://cwe.mitre.org/data/definitions/90.html Open Web Ap... | Updated | reference = ...ry ('LDAP injection') http://cwe.mitre.org/data/definitions/90.html Open Web Ap... |
7746 | quality-rule | Avoid LDAP injection vulnerabilities | Documentation english | remediation = Input Validation Assume all input is malicious. Use an "accept known good" inpu... | Updated | remediation = Input validation. Assume all input is malicious. Use an "accept known good" inp... |
7748 | quality-rule | Avoid OS command injection vulnerabilities | Documentation english | description = ... CAST dataflow engine, this metric detects paths from user input methods down to... | Updated | description = ... CAST data-flow engine, this metric detects paths from user input methods down t... |
7748 | quality-rule | Avoid OS command injection vulnerabilities | Documentation english | rationale = ... from the Injection flaws. The Common Weakness Enumeration defines Improper Inp... | Updated | rationale = ... from the injection flaws. The Common Weakness Enumeration defines Improper Inp... |
7748 | quality-rule | Avoid OS command injection vulnerabilities | Documentation english | remediation = ...eation of Injection flaws, the Open Web Application Security Project (OWASP) rec... | Updated | remediation = ...eation of injection flaws, the Open Web Application Security Project (OWASP) rec... |
7750 | quality-rule | Avoid XPath injection vulnerabilities | Documentation english | description = ... CAST dataflow engine, this metric detects execution paths from user input metho... | Updated | description = ... CAST data-flow engine, this metric detects execution paths from user input meth... |
7750 | quality-rule | Avoid XPath injection vulnerabilities | Documentation english | rationale = ...user input : "Use a standard input validation mechanism to validate all input da... | Updated | rationale = ...user input: "Use a standard input validation mechanism to validate all input dat... |
7752 | quality-rule | Avoid file path manipulation vulnerabilities | Documentation english | description = ... CAST dataflow engine, this metric detects execution paths from user input metho... | Updated | description = ... CAST data-flow engine, this metric detects execution paths from user input meth... |
7752 | quality-rule | Avoid file path manipulation vulnerabilities | Documentation english | rationale = ...as follows : "When software does not validate input properly, an attacker is ab... | Updated | rationale = ...as follows: "When software does not validate input properly, an attacker is abl... |
7752 | quality-rule | Avoid file path manipulation vulnerabilities | Documentation english | remediation = ...eation of Injection flaws, the Open Web Application Security Project (OWASP) rec... | Updated | remediation = ...eation of injection flaws, the Open Web Application Security Project (OWASP) rec... |
8028 | quality-rule | Avoid missing default in switch statements | Documentation english | associatedValueName = Function name | Updated | associatedValueName = Number of violation occurrences |
8028 | quality-rule | Avoid missing default in switch statements | Documentation english | output = ...d to each Function with violations, the Quality Rule provides: - Function name | Updated | output = ...d to each violation, the following information is provided: - The number of viol... |
8044 | quality-rule | Avoid log forging vulnerabilities | Documentation english | description = ... CAST dataflow engine to detect a call path where input data from the user is wr... | Updated | description = ... CAST data-flow engine to detect a call path where input data from the user is w... |
8044 | quality-rule | Avoid log forging vulnerabilities | Documentation english | name = Avoid Log forging vulnerabilities | Updated | name = Avoid log forging vulnerabilities |
8098 | quality-rule | Avoid uncontrolled format string | Documentation english | description = ... CAST dataflow engine, this metric detects execution paths from user input metho... | Updated | description = ... CAST data flow engine, this metric detects execution paths from user input meth... |
8222 | quality-rule | Avoid hard-coded credentials | Documentation english | associatedValueName = ... from hardcoded string down to the target method | Updated | associatedValueName = ... from hard-coded string down to the target method |
8222 | quality-rule | Avoid hard-coded credentials | Documentation english | description = ...ere a hardcoded credential is sent to a method used for its own inbound authenti... | Updated | description = ...ere a hard-coded credential is sent to a method used for its own inbound authent... |
8222 | quality-rule | Avoid hard-coded credentials | Documentation english | name = Avoid hardcoded credentials | Updated | name = Avoid hard-coded credentials |
8222 | quality-rule | Avoid hard-coded credentials | Documentation english | output = ...t one hardcoded credential parameter. It provides the following information : ... | Updated | output = ...t one hard-coded credential parameter. It provides the following information :... |
8222 | quality-rule | Avoid hard-coded credentials | Documentation english | rationale = ... have hardcoded credentials (username, password) in the application code or file... | Updated | rationale = ... have hard-coded credentials (such as a passwords) in the application code or fi... |
8222 | quality-rule | Avoid hard-coded credentials | Documentation english | remediation = ...mediations : - Outbound authentication : consider storing passwords and keys ou... | Updated | remediation = ...mediations: - Outbound authentication: consider storing passwords and keys outs... |
8222 | quality-rule | Avoid hard-coded credentials | Documentation english | Missing | Added | remediationSample = // Store passwords outside of the code in a storage protected from outsiders |
8222 | quality-rule | Avoid hard-coded credentials | Documentation english | Missing | Added | sample = Java: UsernamePasswordCredentials creds = new UsernamePasswordCredentials("myUse... |
8238 | quality-rule | Trust boundary violation | Documentation english | description = ...ructure or structured message. The list of user input methods can be customize... | Updated | description = ...ructure or structured message. |
8238 | quality-rule | Trust boundary violation | Documentation english | Missing | Added | remediationSample = // Never mix trusted and untrusted data |
8240 | quality-rule | Sensitive cookie in HTTPS session without 'Secure' attribute | Technologies | [JEE] | Updated | Added: [C#, VB.NET] |
8240 | quality-rule | Sensitive cookie in HTTPS session without 'Secure' attribute | Documentation english | associatedValueName = Call to javax.servlet.http.HttpServletResponse.addCookie passing a cookie withou... | Updated | associatedValueName = Call stack from the "setSecure" call to the "addCookie" target |
8240 | quality-rule | Sensitive cookie in HTTPS session without 'Secure' attribute | Documentation english | description = The Secure attribute for sensitive cookies in HTTPS sessions is not set, which c... | Updated | description = The 'Secure' attribute for sensitive cookies in HTTPS sessions is not set, which... |
8240 | quality-rule | Sensitive cookie in HTTPS session without 'Secure' attribute | Documentation english | total = ...f methods calling javax.servlet.http.HttpServletResponse.addCookie | Updated | total = ...f methods adding a cookie without setting the 'secured' attribute |
8408 | quality-rule | Avoid reflected cross-site scripting (non persistent) | Documentation english | description = ...lected XSS : The server reads data directly from the HTTP request and reflects i... | Updated | description = ...lected XSS: The server reads data directly from the HTTP request and reflects it... |
8408 | quality-rule | Avoid reflected cross-site scripting (non persistent) | Documentation english | name = Avoid Reflected Cross-site Scripting (Non Persistent) | Updated | name = Avoid reflected cross-site scripting (non persistent) |
8408 | quality-rule | Avoid reflected cross-site scripting (non persistent) | Documentation english | remediation = ...ce exposure to some variants." This metric ensures that the appropriate output ... | Updated | remediation = ...ce exposure to some variants." |
8410 | quality-rule | Avoid cross-site scripting (persistent) | Documentation english | name = Avoid Cross-Site Scripting (Persistent) | Updated | name = Avoid cross-site scripting (persistent) |
8412 | quality-rule | "CX_ROOT" should not be used in TRY .. CATCH.. ENDTRY block | Documentation english | Missing | Added | associatedValueName = Number of violation occurrences |
8412 | quality-rule | "CX_ROOT" should not be used in TRY .. CATCH.. ENDTRY block | Documentation english | Missing | Added | output = Associated to each violation, the following information is provided: - The numbe... |
8412 | quality-rule | "CX_ROOT" should not be used in TRY .. CATCH.. ENDTRY block | Documentation english | Missing | Added | total = Number of ABAP Artifacts |
8418 | quality-rule | Avoid NoSQL injection on MongoDB (C#) | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = false, weight = 9 |
8420 | quality-rule | Avoid second order SQL injection | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = false, weight = 9 |
8426 | quality-rule | Avoid calling database commands directly using system functions as "C_DB_EXECUTE" and "C_DB_FUNCTION" | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8428 | quality-rule | Authorization check should be done before calling a transaction | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8424 | quality-rule | Avoid using hard-coded HMAC keys | Quality Contribution to 'Secure Coding - Weak Security Features' (66064) | Missing contribution | Added | critical = true, weight = 9 |
8430 | quality-rule | Avoid using hardcoded seed or no seed at all for random values generation | Quality Contribution to 'Secure Coding - Weak Security Features' (66064) | Missing contribution | Added | critical = true, weight = 9 |
8432 | quality-rule | Avoid Cross-Client Database Access using Open SQL statements with CLIENT SPECIFIED/USING CLIENT addition | Quality Contribution to 'Secure Coding - Weak Security Features' (66064) | Missing contribution | Added | critical = true, weight = 9 |
8422 | quality-rule | Avoid Using COMMIT WORK or ROLLBACK WORK during update work process | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | Missing contribution | Added | critical = true, weight = 5 |
AIP 8.3.11 - 8.3.12
This section lists the results of a comparison between a CAST AIP 8.3.11 Assessment Model and the CAST AIP 8.3.12 Assessment Model. You can download the original compare_8311_8312.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.11 Assessment Model | Change | CAST 8.3.12 Assessment Model |
578 | quality-rule | Avoid Classes with multiple inheritance | Documentation english | output = ...violation patterns found in source code: - Parent class derivation | Updated | output = ...violation occurrences found in source code: - Parent class derivation |
584 | quality-rule | Avoid Classes with at least one virtual Function and without a virtual Destructor | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
584 | quality-rule | Avoid Classes with at least one virtual Function and without a virtual Destructor | Documentation english | output = ...violation patterns found in source code: - Virtual method | Updated | output = ...violation occurrences found in source code: - Virtual method |
586 | quality-rule | DELETED: Avoid inline Constructors and Destructors | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
586 | quality-rule | DELETED: Avoid inline Constructors and Destructors | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
588 | quality-rule | Avoid using Global Variables (C++) | Documentation english | description = ...+ code using global variables. | Updated | description = ...+ code using global variables. Constant are not taken into account in this rule. |
590 | quality-rule | Avoid using global objects in Constructors and Destructors | Documentation english | output = ...violation patterns found in source code: - global object used | Updated | output = ...violation occurrences found in source code: - global object used |
592 | quality-rule | Ensure you provide a user-defined copy constructor or disable copy when a class allocates memory in its constructor | Documentation english | output = ...violation patterns found in the source code: - object instanciation | Updated | output = ...violation occurrences found in the source code: - object instanciation |
620 | quality-rule | Avoid base Classes without virtual Destructors | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
620 | quality-rule | Avoid base Classes without virtual Destructors | Documentation english | output = ...violation patterns found in source code: - Class definition - Non-virtual de... | Updated | output = ...violation occurrences found in source code: - Class definition - Non-virtual... |
628 | quality-rule | Avoid invocation of virtual Methods of the declared Class in a Constructor or Destructor | Documentation english | output = ...violation patterns found in the source code: - Virtual member function call | Updated | output = ...violation occurrences found in the source code: - Virtual member function call |
630 | quality-rule | Avoid data members that are not private | Documentation english | output = ...violation patterns found in the source code: - class member declaration | Updated | output = ...violation occurrences found in the source code: - class member declaration |
678 | quality-rule | Never throw an exception from a Destructor | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
678 | quality-rule | Never throw an exception from a Destructor | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
1050 | quality-rule | Static Functions naming conventions - case control | Documentation english | total = Number C static functions | Updated | total = Number of C static functions |
1054 | quality-rule | Types naming conventions - suffix control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
1072 | quality-rule | Avoid using memory management Functions (free/malloc/realloc) | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
1072 | quality-rule | Avoid using memory management Functions (free/malloc/realloc) | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
1074 | quality-rule | Avoid using signals management Functions | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
1074 | quality-rule | Avoid using signals management Functions | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
1558 | quality-rule | Package naming convention - prefix control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
1558 | quality-rule | Package naming convention - prefix control | Documentation english | Missing | Added | total = Number of PLSQL Packages |
1560 | quality-rule | Package Function naming convention - prefix control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
1560 | quality-rule | Package Function naming convention - prefix control | Documentation english | Missing | Added | total = Number of PLSQL Package Functions |
1562 | quality-rule | Package Stored Procedure naming convention - prefix control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
1562 | quality-rule | Package Stored Procedure naming convention - prefix control | Documentation english | Missing | Added | total = Number of PLSQL Package Procedures |
1564 | quality-rule | Cursor naming convention - prefix control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
1564 | quality-rule | Cursor naming convention - prefix control | Documentation english | total = total is number of cursor defined into the schema | Updated | total = Number of cursors defined into the schema |
1574 | quality-rule | Use at most one statement per line | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of lines with more than 1 statement |
1574 | quality-rule | Use at most one statement per line | Documentation english | output = ...rmation: - Function / Procedure full name, - number of lines with more than 1... | Updated | output = ...rmation: - Function / Procedure full name, - Number of lines with more than 1 s... |
1574 | quality-rule | Use at most one statement per line | Documentation english | total = total is number of SQL procedures and functions that are stored in the schema | Updated | total = Number of SQL procedures and functions that are stored in the schema |
1576 | quality-rule | Use varchar2 instead of char and varchar | Documentation english | associatedValueName = Associated Value | Removed | Missing |
1576 | quality-rule | Use varchar2 instead of char and varchar | Documentation english | Missing | Added | total = Number of PL/SQL objects with parameters or columns |
1578 | quality-rule | Avoid using LONG & LONG RAW datatype for Table Columns | Documentation english | associatedValueName = Associated Value | Removed | Missing |
1578 | quality-rule | Avoid using LONG & LONG RAW datatype for Table Columns | Documentation english | Missing | Added | total = Number of PLSQL tables and views |
1580 | quality-rule | Avoid using execute immediate | Documentation english | associatedValueName = Associated Value | Removed | Missing |
1580 | quality-rule | Avoid using execute immediate | Documentation english | total = The total procedure counts all the PLSQL objects using execute immediate | Updated | total = Number of PLSQL objects using execute immediate |
1582 | quality-rule | Avoid large Tables - too many columns | Documentation english | total = total is the number of tables in the shema | Updated | total = Number of tables in the shema |
1596 | quality-rule | Avoid using "nullable" Columns except in the last position in a Table | Documentation english | Missing | Added | total = Number of PLSQL tables |
1598 | quality-rule | Avoid Rule HINT /*+ rule */ or --+ rule in PL/SQL code | Documentation english | associatedValueName = Associated Value | Removed | Missing |
1606 | quality-rule | Triggers should not directly modify tables, a procedure or function should be used instead | Documentation english | total = total is the number of schema triggers | Updated | total = Number of schema triggers |
1634 | quality-rule | Avoid unreferenced Tables | Documentation english | associatedValueName = Associated Value | Removed | Missing |
1634 | quality-rule | Avoid unreferenced Tables | Documentation english | total = total is number of schema tables | Updated | total = Number of schema tables |
2230 | quality-rule | Use of style sheets (JEE) | Documentation english | associatedValueName = Associated Value | Removed | Missing |
2230 | quality-rule | Use of style sheets (JEE) | Documentation english | total = Total number of pages | Updated | total = Number of pages |
2232 | quality-rule | Pages should use error handling page | Documentation english | associatedValueName = Associated Value | Removed | Missing |
2232 | quality-rule | Pages should use error handling page | Documentation english | total = The list of JSP files except the error pages + the web.xml | Updated | total = Number of JSP files except the error pages + the web.xml |
2236 | quality-rule | Avoid use of standard SQL API | Documentation english | total = the number of JSP pages | Updated | total = Number of JSP pages |
2238 | quality-rule | Avoid unreferenced JSPs and web client files | Documentation english | associatedValueName = Associated Value | Removed | Missing |
2238 | quality-rule | Avoid unreferenced JSPs and web client files | Documentation english | Missing | Added | total = Number of JSP, HTM, HTML pages |
2242 | quality-rule | Avoid direct definition of JavaScript Functions in a Web page (JEE) | Documentation english | total = The number of JavaScript Functions | Updated | total = Number of JavaScript functions |
2244 | quality-rule | Avoid undocumented Web Server Pages | Documentation english | associatedValueName = Associated Value | Removed | Missing |
2244 | quality-rule | Avoid undocumented Web Server Pages | Documentation english | Missing | Added | total = Number of JSP pages |
2248 | quality-rule | Avoid Web Server pages having a very low Comment/Code ratio | Documentation english | Missing | Added | total = Number of JSP pages |
2254 | quality-rule | Avoid large Page files (JEE) | Documentation english | Missing | Added | total = Number of JSP pages |
2258 | quality-rule | All image files should be in a specific directory | Documentation english | Missing | Added | total = Number of JPG files |
2260 | quality-rule | All script files should be in a specific directory | Documentation english | Missing | Added | total = Number of JS Scripts |
2262 | quality-rule | All stylesheet files should be in a specific directory | Documentation english | Missing | Added | total = Number of CSS pages |
2264 | quality-rule | All page files should be in a specific directory | Documentation english | Missing | Added | total = Number of JSP pages |
2266 | quality-rule | Avoid non standard file extensions (JEE) | Documentation english | associatedValueName = Associated Value | Removed | Missing |
2266 | quality-rule | Avoid non standard file extensions (JEE) | Documentation english | Missing | Added | total = Number of eFiles |
2278 | quality-rule | Check the use of "foreach" custom tag library | Documentation english | associatedValueName = Associated Value | Removed | Missing |
2278 | quality-rule | Check the use of "foreach" custom tag library | Documentation english | Missing | Added | total = Number of JavaScript eFunctions and JSP eFile |
2280 | quality-rule | Avoid using Document.all collection | Documentation english | associatedValueName = Associated Value | Removed | Missing |
2280 | quality-rule | Avoid using Document.all collection | Documentation english | Missing | Added | total = Number of objects belonging to files with extension given by parameter |
2282 | quality-rule | Avoid large Include Files | Documentation english | Missing | Added | total = Number of JSP pages |
2284 | quality-rule | Avoid large JSP Pages - too many Scriptlets | Documentation english | Missing | Added | total = Number of JSP pages |
2552 | quality-rule | Event naming convention - case control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
2552 | quality-rule | Event naming convention - case control | Documentation english | Missing | Added | total = Number of VB events |
2558 | quality-rule | Method/Sub naming convention - case control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
2558 | quality-rule | Method/Sub naming convention - case control | Documentation english | Missing | Added | total = Number of VB functions and methods |
2560 | quality-rule | Property naming convention - case control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
2560 | quality-rule | Property naming convention - case control | Documentation english | Missing | Added | total = Number of VB properties |
2562 | quality-rule | Avoid long Functions | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of lines of code |
2562 | quality-rule | Avoid long Functions | Documentation english | Missing | Added | total = Number of VB functions |
2564 | quality-rule | Use a single Error Handling Method | Documentation english | associatedValueName = Associated Value | Removed | Missing |
2572 | quality-rule | Avoid declaring VB Variables without typing them (Visual Basic) | Documentation english | associatedValueName = Associated Value | Removed | Missing |
2572 | quality-rule | Avoid declaring VB Variables without typing them (Visual Basic) | Documentation english | Missing | Added | total = Number of VB objects |
2574 | quality-rule | Avoid using Global Variables (Visual Basic) | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Global variable |
2574 | quality-rule | Avoid using Global Variables (Visual Basic) | Documentation english | Missing | Added | total = Number of Objects likely to use global variables |
2576 | quality-rule | Avoid Variables declared as Variants | Documentation english | associatedValueName = Associated Value | Removed | Missing |
2576 | quality-rule | Avoid Variables declared as Variants | Documentation english | Missing | Added | total = Number of VB objects |
2580 | quality-rule | Avoid use of Scripting.FileSystemObject | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Occurrence of Scripting.FileSystemObject |
2580 | quality-rule | Avoid use of Scripting.FileSystemObject | Documentation english | Missing | Added | total = Number of VB objects |
2582 | quality-rule | Use Option Explicit | Documentation english | associatedValueName = Associated Value | Removed | Missing |
2582 | quality-rule | Use Option Explicit | Documentation english | Missing | Added | total = Number of VB modules and forms |
2584 | quality-rule | Avoid using late binding | Documentation english | associatedValueName = Associated Value | Removed | Missing |
2584 | quality-rule | Avoid using late binding | Documentation english | Missing | Added | total = Number of VB functions, methods and events |
2586 | quality-rule | Utilization of "DoEvents" inside a loop | Documentation english | associatedValueName = Associated Value | Removed | Missing |
2586 | quality-rule | Utilization of "DoEvents" inside a loop | Documentation english | Missing | Added | total = Number of VB functions, methods and events |
2586 | quality-rule | Utilization of "DoEvents" inside a loop | Diagnosis | diagnosisValueType = integer | Updated | diagnosisValueType = no-value |
2588 | quality-rule | Avoid declaring Class Variables without declaring access Properties | Documentation english | associatedValueName = Associated Value | Removed | Missing |
2588 | quality-rule | Avoid declaring Class Variables without declaring access Properties | Documentation english | Missing | Added | total = Number of VB Class Variables |
2590 | quality-rule | Avoid using "On error Resume Next" in the Class event terminate | Documentation english | associatedValueName = Associated Value | Removed | Missing |
2590 | quality-rule | Avoid using "On error Resume Next" in the Class event terminate | Documentation english | Missing | Added | total = Number of sub 'Class_Terminate' |
2590 | quality-rule | Avoid using "On error Resume Next" in the Class event terminate | Diagnosis | diagnosisValueType = integer | Updated | diagnosisValueType = no-value |
2592 | quality-rule | Encapsulation compliance | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Module variable |
2592 | quality-rule | Encapsulation compliance | Documentation english | Missing | Added | total = Number of VB artifacts |
2620 | quality-rule | Avoid undocumented Modules | Documentation english | associatedValueName = Associated Value | Removed | Missing |
2620 | quality-rule | Avoid undocumented Modules | Documentation english | Missing | Added | total = Number of VB modules |
2622 | quality-rule | Avoid Modules with a very low comment/code ratio | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Comment/code ratio |
2622 | quality-rule | Avoid Modules with a very low comment/code ratio | Documentation english | Missing | Added | total = Number of VB modules |
2626 | quality-rule | Avoid unreferenced Modules | Documentation english | associatedValueName = Associated Value | Removed | Missing |
2626 | quality-rule | Avoid unreferenced Modules | Documentation english | Missing | Added | total = Number of VB modules |
3058 | quality-rule | Use of style sheets (ASP) | Documentation english | associatedValueName = Associated Value | Removed | Missing |
3060 | quality-rule | Pages with less than 3 levels of inclusion | Documentation english | Missing | Added | total = Number of pages |
3062 | quality-rule | Use of error handling page | Documentation english | associatedValueName = Associated Value | Removed | Missing |
3062 | quality-rule | Use of error handling page | Documentation english | Missing | Added | total = Number of ASP pages |
3064 | quality-rule | Avoid use of Session variables from Session_OnEnd | Documentation english | associatedValueName = Associated Value | Removed | Missing |
3064 | quality-rule | Avoid use of Session variables from Session_OnEnd | Documentation english | Missing | Added | total = Number of pages |
3066 | quality-rule | Use of Web Classes | Documentation english | associatedValueName = Associated Value | Removed | Missing |
3066 | quality-rule | Use of Web Classes | Documentation english | Missing | Added | total = Number of pages |
3070 | quality-rule | Avoid non standard file extensions (ASP) | Documentation english | associatedValueName = Associated Value | Removed | Missing |
3070 | quality-rule | Avoid non standard file extensions (ASP) | Documentation english | Missing | Added | total = Number of pages |
3072 | quality-rule | Consistent File full name and directory structure | Documentation english | associatedValueName = Associated Value | Removed | Missing |
3072 | quality-rule | Consistent File full name and directory structure | Documentation english | Missing | Added | total = Number of pages |
3074 | quality-rule | Index pages and global.asa must be located in the root directory | Documentation english | associatedValueName = Associated Value | Removed | Missing |
3074 | quality-rule | Index pages and global.asa must be located in the root directory | Documentation english | Missing | Added | total = Number of pages |
3076 | quality-rule | Avoid using more than one scripting language in one page | Documentation english | associatedValueName = Associated Value | Removed | Missing |
3076 | quality-rule | Avoid using more than one scripting language in one page | Documentation english | Missing | Added | total = Number of ASP pages |
3078 | quality-rule | Avoid unreferenced code | Documentation english | associatedValueName = Associated Value | Removed | Missing |
3078 | quality-rule | Avoid unreferenced code | Documentation english | Missing | Added | total = Number of pages |
3080 | quality-rule | Avoid undocumented Pages | Documentation english | associatedValueName = Associated Value | Removed | Missing |
3080 | quality-rule | Avoid undocumented Pages | Documentation english | Missing | Added | total = Number of pages |
3082 | quality-rule | Avoid ASP pages having a very low Comment/Code ratio | Documentation english | Missing | Added | total = Number of ASP pages |
3088 | quality-rule | Avoid large Page files (ASP) | Documentation english | Missing | Added | total = Number of ASP pages |
3102 | quality-rule | Avoid using Transactions in an ASP Page | Documentation english | associatedValueName = Associated Value | Removed | Missing |
3102 | quality-rule | Avoid using Transactions in an ASP Page | Documentation english | Missing | Added | total = Number of ASP pages |
3550 | quality-rule | Namespace naming convention - case control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
3550 | quality-rule | Namespace naming convention - case control | Documentation english | Missing | Added | total = Number of namespaces |
3554 | quality-rule | Interface naming convention - case and character set control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
3558 | quality-rule | Enumerations naming convention - case and character set control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
3558 | quality-rule | Enumerations naming convention - case and character set control | Documentation english | Missing | Added | total = Number of enumerations |
3560 | quality-rule | Enumeration Items naming convention - case and character set control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
3560 | quality-rule | Enumeration Items naming convention - case and character set control | Documentation english | Missing | Added | total = Number of enumeration items |
3562 | quality-rule | Private Fields naming convention - case and character set control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
3562 | quality-rule | Private Fields naming convention - case and character set control | Documentation english | Missing | Added | total = Number of private fields |
3564 | quality-rule | Public Fields naming convention - case and character set control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
3564 | quality-rule | Public Fields naming convention - case and character set control | Documentation english | Missing | Added | total = Number of public fields |
3566 | quality-rule | Methods naming convention - case and character set control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
3566 | quality-rule | Methods naming convention - case and character set control | Documentation english | Missing | Added | total = Number of methods |
3568 | quality-rule | Events naming convention - case and character set control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
3568 | quality-rule | Events naming convention - case and character set control | Documentation english | Missing | Added | total = Number of events |
3572 | quality-rule | Controls naming convention - prefix, case and character set control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
3574 | quality-rule | Properties naming convention - case and character set control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
3574 | quality-rule | Properties naming convention - case and character set control | Documentation english | Missing | Added | total = Number of properties |
3576 | quality-rule | Avoid declaring public Fields | Documentation english | associatedValueName = Associated Value | Removed | Missing |
3576 | quality-rule | Avoid declaring public Fields | Diagnosis | diagnosisValueType = integer | Updated | diagnosisValueType = no-value |
3578 | quality-rule | Avoid large Classes - too many Constructors (.NET) | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of Constructors |
3578 | quality-rule | Avoid large Classes - too many Constructors (.NET) | Documentation english | total = Total number of classes | Updated | total = Number of classes |
3580 | quality-rule | Avoid large Classes - too many Methods (.NET) | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of Methods |
3586 | quality-rule | Avoid large Methods - too many Lines of Code | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of lines of code |
3590 | quality-rule | Avoid Interface implementation on Structures | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Interface |
3610 | quality-rule | Avoid declaring VB Variables without typing them (.NET) | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
3610 | quality-rule | Avoid declaring VB Variables without typing them (.NET) | Documentation english | total = Total number of variable declaration. | Updated | total = Number of variable declarations |
3612 | quality-rule | Close SQL connection ASAP | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
3614 | quality-rule | Avoid using String.Empty for empty string tests | Documentation english | associatedValueName = Associated Value | Removed | Missing |
3616 | quality-rule | Data Access must be based on Stored Procedure Calls | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Accessed SQL object |
3626 | quality-rule | Avoid Interfaces with a very low comment/code ratio | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Comment/code ratio |
3626 | quality-rule | Avoid Interfaces with a very low comment/code ratio | Documentation english | Missing | Added | total = Number of interfaces |
3630 | quality-rule | Avoid having Classes implementing too many Interfaces | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of implementations |
3630 | quality-rule | Avoid having Classes implementing too many Interfaces | Documentation english | Missing | Added | total = Number of classes |
4056 | quality-rule | Avoid recursive Triggers | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4056 | quality-rule | Avoid recursive Triggers | Documentation english | Missing | Added | total = Number of triggers |
4056 | quality-rule | Avoid recursive Triggers | Diagnosis | diagnosisValueType = integer | Updated | diagnosisValueType = no-value |
4058 | quality-rule | Avoid queries using old style join convention instead of ANSI-Standard joins | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4058 | quality-rule | Avoid queries using old style join convention instead of ANSI-Standard joins | Documentation english | total = LINBERGH_PLUS | Updated | total = Number of objects that can contain SELECT |
4062 | quality-rule | Avoid Functions and Procedures doing an Insert, Update or Delete without managing a transaction | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4062 | quality-rule | Avoid Functions and Procedures doing an Insert, Update or Delete without managing a transaction | Documentation english | Missing | Added | total = Number of functions and procedures |
4064 | quality-rule | Avoid Procedures using an Insert, Update, Delete, Create Table or Select without including error management | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4066 | quality-rule | Avoid Stored Procedures not returning a status value | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4066 | quality-rule | Avoid Stored Procedures not returning a status value | Documentation english | Missing | Added | total = Number of stored procedures |
4070 | quality-rule | Avoid use of "truncate table" | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4076 | quality-rule | Avoid using temporary Objects | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4076 | quality-rule | Avoid using temporary Objects | Documentation english | Missing | Added | total = Number of objects that can contain SELECT |
4084 | quality-rule | Avoid nested Stored Procedures using temporary Tables | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4084 | quality-rule | Avoid nested Stored Procedures using temporary Tables | Documentation english | Missing | Added | total = Number of stored procedures |
4554 | quality-rule | Avoid large Classes - too many Methods (JEE) | Documentation english | total = Total number of Methods | Updated | total = Number of methods |
4556 | quality-rule | Avoid large Classes - too many Constructors (JEE) | Documentation english | Missing | Added | total = Number of Java classes |
4558 | quality-rule | Avoid large Classes - too many Fields | Documentation english | Missing | Added | total = Number of Java classes |
4560 | quality-rule | Avoid large Interfaces - too many Methods (JEE) | Documentation english | total = Total number of interfaces | Updated | total = Number of interfaces |
4566 | quality-rule | Avoid declaring Instance Variables without defined access type | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4566 | quality-rule | Avoid declaring Instance Variables without defined access type | Documentation english | Missing | Added | total = Number of Java attributes |
4568 | quality-rule | Avoid declaring Public Instance Variables | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4568 | quality-rule | Avoid declaring Public Instance Variables | Documentation english | Missing | Added | total = Number of Java attributes |
4570 | quality-rule | Avoid declaring Non Final Class Variables with Public or Package access type | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4570 | quality-rule | Avoid declaring Non Final Class Variables with Public or Package access type | Documentation english | Missing | Added | total = Number of Java attributes |
4572 | quality-rule | Avoid declaring Final Instance Variables that are not dynamically initialized | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4572 | quality-rule | Avoid declaring Final Instance Variables that are not dynamically initialized | Documentation english | Missing | Added | total = Number of Java attributes |
4574 | quality-rule | Avoid using deprecated objects | Documentation english | Missing | Added | total = Number of Java objects |
4576 | quality-rule | Provide accessors to Private Fields | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4578 | quality-rule | Good use of Interfaces with collections as Method return types | Documentation english | total = The total number of methods which return type implements or extend java.lang.Col... | Updated | total = Number of methods which return type implements or extend java.lang.Collection, j... |
4580 | quality-rule | Good use of Interfaces when instantiating a collection | Documentation english | total = The total number of fields whose type implements or extends java.lang.Collection... | Updated | total = Number of fields whose type implements or extends java.lang.Collection, java.lan... |
4592 | quality-rule | Avoid hiding static Methods | Diagnosis | scopeID = 0, propertyID = 0 | Updated | scopeID = 557, propertyID = 140910 |
4592 | quality-rule | Avoid hiding static Methods | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
4592 | quality-rule | Avoid hiding static Methods | Documentation english | description = ... allowed. This Quality Rule retrieves all static methods that are redefined in s... | Updated | description = ... allowed. This Quality Rule retrieves all static methods that are redefined in ... |
4592 | quality-rule | Avoid hiding static Methods | Documentation english | output = This report lists all hidden Static Methods. It provides the following informati... | Updated | output = Associated to each violation, the following information is provided: - The numbe... |
4592 | quality-rule | Avoid hiding static Methods | Documentation english | rationale = ... stability of the application. | Updated | rationale = ... stability of the application. Except for class derives from “javax.swing.plaf.... |
4592 | quality-rule | Avoid hiding static Methods | Documentation english | reference = http://faq.javaranch.com/view?OverridingVsHiding | Updated | reference = https://coderanch.com/wiki/659959/Overriding-Hiding https://coderanch.com/t/3800... |
4592 | quality-rule | Avoid hiding static Methods | Documentation english | remediation = ...eview the design of the Method | Updated | remediation = ...eview the design of the Method. Simply not override the static (class) methods. |
4592 | quality-rule | Avoid hiding static Methods | Documentation english | total = The total procedure counts the number of static methods. | Updated | total = Number of methods. |
4592 | quality-rule | Avoid hiding static Methods | Documentation english | Missing | Added | remediationSample = class Foo { public static void classMethod() { System.out.println("c... |
4592 | quality-rule | Avoid hiding static Methods | Documentation english | Missing | Added | sample = class Foo { public static void classMethod() { System.out.println("c... |
4592 | quality-rule | Avoid hiding static Methods | Diagnosis | diagnosisValueType = no-value | Updated | diagnosisValueType = integer |
4592 | quality-rule | Avoid hiding static Methods | Operation | localSiteDiagnose = DIAG_SCOPE_JAVABEST022 | Updated | localSiteDiagnose = null |
4592 | quality-rule | Avoid hiding static Methods | Operation | localSiteCountTotal = DIAG_JAVA_ANA_CLASS_MET_TOTAL | Updated | localSiteCountTotal = null |
4596 | quality-rule | Avoid using 'java.lang.System.getenv()' | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4596 | quality-rule | Avoid using 'java.lang.System.getenv()' | Documentation english | Missing | Added | total = Number of Java artifacts |
4598 | quality-rule | Avoid using 'java.lang.Runtime.exec()' | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4598 | quality-rule | Avoid using 'java.lang.Runtime.exec()' | Documentation english | Missing | Added | total = Number of Java artifacts |
4600 | quality-rule | Avoid using 'java.System.exit()' | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4600 | quality-rule | Avoid using 'java.System.exit()' | Documentation english | Missing | Added | total = Number of Java artifacts |
4604 | quality-rule | Avoid using 'java.lang.Error' | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4604 | quality-rule | Avoid using 'java.lang.Error' | Documentation english | Missing | Added | total = Number of Java objects |
4606 | quality-rule | Avoid using 'sun.*' Classes | Documentation english | Missing | Added | total = Number of Java objects |
4610 | quality-rule | Avoid using anonymous Classes | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4610 | quality-rule | Avoid using anonymous Classes | Documentation english | total = All classes | Updated | total = Number of classes |
4612 | quality-rule | Avoid using native Methods (JNI) | Documentation english | total = number of artifacts | Updated | total = Number of artifacts |
4614 | quality-rule | Proper overriding of 'clone()' | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4614 | quality-rule | Proper overriding of 'clone()' | Documentation english | Missing | Added | total = Number of Java methods |
4616 | quality-rule | Proper overriding of 'finalize()' | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4616 | quality-rule | Proper overriding of 'finalize()' | Documentation english | Missing | Added | total = Number of Java methods |
4618 | quality-rule | Avoid instantiating Boolean | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4618 | quality-rule | Avoid instantiating Boolean | Documentation english | Missing | Added | total = Number of Java artifacts |
4652 | quality-rule | Avoid direct Class inheritance from java.lang.Throwable | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4652 | quality-rule | Avoid direct Class inheritance from java.lang.Throwable | Documentation english | Missing | Added | total = Number of Java classes |
4656 | quality-rule | Avoid declaring throwing an exception and not throwing it | Documentation english | total = number of methods declaring throwing an exception in the signature except method... | Updated | total = Number of methods declaring throwing an exception in the signature except method... |
4666 | quality-rule | Classes and Interfaces must have JavaDoc Comments | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4666 | quality-rule | Classes and Interfaces must have JavaDoc Comments | Documentation english | total = classes and interfaces (generic or not) | Updated | total = Number of classes and interfaces (generic or not) |
4668 | quality-rule | Classes and Interfaces must have JavaDoc @author tag | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4668 | quality-rule | Classes and Interfaces must have JavaDoc @author tag | Documentation english | total = classes and interfaces (generic or not) | Updated | total = Number of classes and interfaces (generic or not) |
4670 | quality-rule | Methods must have JavaDoc comments | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4670 | quality-rule | Methods must have JavaDoc comments | Documentation english | total = methods | Updated | total = Number of methods |
4672 | quality-rule | Methods must have appropriate JavaDoc @param tags | Documentation english | total = method's parameters | Updated | total = Number of method's parameters |
4674 | quality-rule | Methods must have appropriate JavaDoc @return tags | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4674 | quality-rule | Methods must have appropriate JavaDoc @return tags | Documentation english | total = methods that return a value | Updated | total = Number of methods that return a value |
4676 | quality-rule | Methods must have appropriate JavaDoc @throws tags | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4676 | quality-rule | Methods must have appropriate JavaDoc @throws tags | Documentation english | total = methods that throw exceptions | Updated | total = Number of methods that throw exceptions |
4678 | quality-rule | Methods must have appropriate JavaDoc @exception tags | Documentation english | total = methods that throw exceptions | Updated | total = Number of methods that throw exceptions |
4680 | quality-rule | Fields must have JavaDoc Comments | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4680 | quality-rule | Fields must have JavaDoc Comments | Documentation english | total = java fields | Updated | total = Number of Java fields |
4694 | quality-rule | Avoid using 'System.gc' | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4696 | quality-rule | Avoid using 'System.err' and 'System.out' within a try catch block | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4698 | quality-rule | Avoid using 'System.err' and 'System.out' outside a try catch block | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4704 | quality-rule | Avoid using Vector | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4704 | quality-rule | Avoid using Vector | Documentation english | Missing | Added | total = Number of Java objects |
4706 | quality-rule | Avoid using Hashtable | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
4706 | quality-rule | Avoid using Hashtable | Documentation english | Missing | Added | total = Number of Java artifacts |
4708 | quality-rule | Avoid using Dynamic instantiation | Documentation english | total = All Java artifacts | Updated | total = Number of Java artifacts |
4712 | quality-rule | Avoid inheritance down the Package path | Documentation english | total = The number of classes | Updated | total = Number of classes |
4716 | quality-rule | Avoid Classes implementing too many Interfaces (JEE) | Documentation english | Missing | Added | total = Number of Java classes |
4718 | quality-rule | Package size control | Documentation english | Missing | Added | total = Number of Java packages |
4722 | quality-rule | Track Classes referencing Database objects | Documentation english | total = Java classes | Updated | total = Number of Java classes |
4730 | quality-rule | Package naming convention - case control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4730 | quality-rule | Package naming convention - case control | Documentation english | Missing | Added | total = Number of Java packages |
4732 | quality-rule | Interface naming convention - case control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4732 | quality-rule | Interface naming convention - case control | Documentation english | Missing | Added | total = Number of Java interfaces |
4734 | quality-rule | Class naming convention - case control (JEE) | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4734 | quality-rule | Class naming convention - case control (JEE) | Documentation english | Missing | Added | total = Number of Java classes |
4736 | quality-rule | Method naming convention - case control (JEE) | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4736 | quality-rule | Method naming convention - case control (JEE) | Documentation english | Missing | Added | total = Number of Java methods |
4738 | quality-rule | Constant naming convention - case control (JEE) | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4738 | quality-rule | Constant naming convention - case control (JEE) | Documentation english | total = static final fields | Updated | total = Number of static final fields |
4740 | quality-rule | Field naming convention - case control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
4740 | quality-rule | Field naming convention - case control | Documentation english | total = Java fields except static final fields | Updated | total = Number of Java fields except static final fields |
4744 | quality-rule | EJB Entity access through their local Interface | Documentation english | Missing | Added | total = Number of Methods accessing Java EJB Entity |
4746 | quality-rule | EJB Session access through their local Interface | Documentation english | Missing | Added | total = Number of Methods accessing Java EJB Session |
5050 | quality-rule | Avoid using HANDLE CONDITION | Documentation english | output = ...violation patterns found in the source code: - EXEC CICS HANDLE CONDITION comm... | Updated | output = ...violation occurrences found in the source code: - EXEC CICS HANDLE CONDITION c... |
5052 | quality-rule | Avoid using IGNORE CONDITION | Documentation english | output = ...violation patterns found in the source code: - EXEC CICS IGNORE CONDITION comm... | Updated | output = ...violation occurrences found in the source code: - EXEC CICS IGNORE CONDITION c... |
5054 | quality-rule | Avoid using HANDLE ABEND | Documentation english | output = ...violation patterns found in the source code: - EXEC CICS HANDLE ABEND statemen... | Updated | output = ...violation occurrences found in the source code: - EXEC CICS HANDLE ABEND state... |
5056 | quality-rule | Avoid using SEARCH without the ALL addition | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
5056 | quality-rule | Avoid using SEARCH without the ALL addition | Documentation english | output = ...violation patterns found in source code: - SEARCH statement - Internal table def... | Updated | output = ...violation occurrences found in source code: - SEARCH statement - Internal table ... |
5058 | quality-rule | Avoid using SORT | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
5058 | quality-rule | Avoid using SORT | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
5060 | quality-rule | Avoid using MERGE | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
5060 | quality-rule | Avoid using MERGE | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
5062 | quality-rule | Avoid using ALTER | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
5062 | quality-rule | Avoid using ALTER | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
5064 | quality-rule | Program naming convention - prefix control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
5066 | quality-rule | Avoid using PERFORM ... THROUGH | THRU | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
5066 | quality-rule | Avoid using PERFORM ... THROUGH | THRU | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
5068 | quality-rule | Avoid STOP RUN (use GOBACK instead) | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
5068 | quality-rule | Avoid STOP RUN (use GOBACK instead) | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
5070 | quality-rule | Section naming convention - prefix control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
5072 | quality-rule | Avoid DISPLAY ... UPON CONSOLE | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
5072 | quality-rule | Avoid DISPLAY ... UPON CONSOLE | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
5074 | quality-rule | Paragraph naming convention - prefix control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
5080 | quality-rule | Avoid Procedure Paragraphs that contains no statements | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
5080 | quality-rule | Avoid Procedure Paragraphs that contains no statements | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
5082 | quality-rule | Avoid Procedure Sections that contain no Paragraph | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
5082 | quality-rule | Avoid Procedure Sections that contain no Paragraph | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
5086 | quality-rule | Avoid using Sections in the PROCEDURE DIVISION (use Paragraphs only) | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
5086 | quality-rule | Avoid using Sections in the PROCEDURE DIVISION (use Paragraphs only) | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
5090 | quality-rule | Avoid using NEXT SENTENCE | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
5090 | quality-rule | Avoid using NEXT SENTENCE | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
5092 | quality-rule | Include a WHEN OTHER clause when using EVALUATE | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
5092 | quality-rule | Include a WHEN OTHER clause when using EVALUATE | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
5094 | quality-rule | Avoid using MOVE CORRESPONDING ... TO ... | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
5094 | quality-rule | Avoid using MOVE CORRESPONDING ... TO ... | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
5112 | quality-rule | Avoid undocumented Sections (COBOL) | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
5112 | quality-rule | Avoid undocumented Sections (COBOL) | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
5114 | quality-rule | Avoid undocumented Programs (COBOL) | Documentation english | associatedValueName = Associated Value | Removed | Missing |
5116 | quality-rule | Avoid undocumented Paragraphs | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
5116 | quality-rule | Avoid undocumented Paragraphs | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
5144 | quality-rule | Avoid using GOTO statement (COBOL) | Documentation english | output = ...violation patterns found in the source code: - GO TO statement | Updated | output = ...violation occurrences found in the source code: - GO TO statement |
5550 | quality-rule | Avoid having joins with more than 4 Tables | Documentation english | associatedValueName = Associated Value | Removed | Missing |
5550 | quality-rule | Avoid having joins with more than 4 Tables | Documentation english | Missing | Added | total = Number of objects using tables |
5550 | quality-rule | Avoid having joins with more than 4 Tables | Diagnosis | diagnosisValueType = integer | Updated | diagnosisValueType = no-value |
5554 | quality-rule | Avoid having SQL code in Triggers named "pre-record" | Documentation english | Missing | Added | total = Number of triggers named 'pre-record' |
5558 | quality-rule | Based Data Blocks naming convention - represented table | Documentation english | associatedValueName = Associated Value | Removed | Missing |
5558 | quality-rule | Based Data Blocks naming convention - represented table | Documentation english | Missing | Added | total = Number of based forms datablocks |
5560 | quality-rule | Based Data Block Items naming convention - represented column | Documentation english | associatedValueName = Associated Value | Removed | Missing |
5560 | quality-rule | Based Data Block Items naming convention - represented column | Documentation english | Missing | Added | total = Number of based forms datablock items |
5562 | quality-rule | Not Based Data Blocks naming convention - prefix control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
5564 | quality-rule | Not Based Data Block Items naming convention - prefix control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
5566 | quality-rule | Use of call_form built-in Function from a centralized location | Documentation english | associatedValueName = Associated Value | Removed | Missing |
5572 | quality-rule | Avoid objects without COMMENT property | Documentation english | associatedValueName = Associated Value | Removed | Missing |
5572 | quality-rule | Avoid objects without COMMENT property | Documentation english | total = All Forms artefact with properties | Updated | total = Number of form artifacts with properties |
6050 | quality-rule | Datawindow naming convention | Documentation english | associatedValueName = Associated Value | Removed | Missing |
6050 | quality-rule | Datawindow naming convention | Documentation english | Missing | Added | total = Number of Datawindows |
6052 | quality-rule | Global function naming convention | Documentation english | associatedValueName = Associated Value | Removed | Missing |
6052 | quality-rule | Global function naming convention | Documentation english | Missing | Added | total = Number of Functions |
6054 | quality-rule | Menu naming convention | Documentation english | associatedValueName = Associated Value | Removed | Missing |
6054 | quality-rule | Menu naming convention | Documentation english | Missing | Added | total = Number of Menus |
6056 | quality-rule | Structure naming convention | Documentation english | associatedValueName = Associated Value | Removed | Missing |
6056 | quality-rule | Structure naming convention | Documentation english | Missing | Added | total = Number of Structures |
6062 | quality-rule | Window naming convention | Documentation english | associatedValueName = Associated Value | Removed | Missing |
6062 | quality-rule | Window naming convention | Documentation english | Missing | Added | total = Number of Windows |
6066 | quality-rule | Global variable naming convention | Documentation english | associatedValueName = Associated Value | Removed | Missing |
6066 | quality-rule | Global variable naming convention | Documentation english | Missing | Added | total = Number of Global Variables |
6068 | quality-rule | Instance variable naming convention | Documentation english | associatedValueName = Associated Value | Removed | Missing |
6068 | quality-rule | Instance variable naming convention | Documentation english | Missing | Added | total = Number of Instance Variables |
6070 | quality-rule | User event naming convention | Documentation english | associatedValueName = Associated Value | Removed | Missing |
6070 | quality-rule | User event naming convention | Documentation english | Missing | Added | total = Number of User Events |
6072 | quality-rule | Method naming convention | Documentation english | associatedValueName = Associated Value | Removed | Missing |
6072 | quality-rule | Method naming convention | Documentation english | Missing | Added | total = Number of Methods |
6076 | quality-rule | Avoid Datawindows that does not access a database data | Documentation english | associatedValueName = Associated Value | Removed | Missing |
6076 | quality-rule | Avoid Datawindows that does not access a database data | Documentation english | Missing | Added | total = Number of Datawindows |
6078 | quality-rule | Avoid Datawindows accessing Database Procedures or Functions | Documentation english | Missing | Added | total = Number of Datawindows |
6082 | quality-rule | Avoid PB Function/Event/Method accessing Database Procedures or Functions | Documentation english | Missing | Added | total = Number of functions, events, methods |
6084 | quality-rule | Avoid having unreferenced code | Documentation english | associatedValueName = Associated Value | Removed | Missing |
6084 | quality-rule | Avoid having unreferenced code | Documentation english | Missing | Added | total = Number of Objects referencing code |
6102 | quality-rule | Avoid undocumented Events | Documentation english | associatedValueName = Associated Value | Removed | Missing |
6102 | quality-rule | Avoid undocumented Events | Documentation english | Missing | Added | total = Number of Events |
6104 | quality-rule | Avoid events with a very low comment/code ratio | Documentation english | Missing | Added | total = Number of Events |
6106 | quality-rule | User event naming convention - declare only | Documentation english | associatedValueName = Associated Value | Removed | Missing |
6106 | quality-rule | User event naming convention - declare only | Documentation english | Missing | Added | total = Number of User Events Declaration |
6110 | quality-rule | Controls must inherit from a userobject | Documentation english | Missing | Added | total = Number of Controls |
6112 | quality-rule | Avoid using global variables | Documentation english | Missing | Added | total = Number of objects likely to use global variables |
6114 | quality-rule | Avoid using global functions | Documentation english | associatedValueName = Associated Value | Removed | Missing |
6114 | quality-rule | Avoid using global functions | Documentation english | Missing | Added | total = Number of objects likely to use global functions |
6124 | quality-rule | Datawindows accessing database must be based on procedure | Documentation english | Missing | Added | total = Number of Datawindows accessing database |
6126 | quality-rule | Avoid using dynamic SQL in scripts | Documentation english | Missing | Added | total = Number of function, event, method |
6128 | quality-rule | Avoid window with too high level of inheritance | Documentation english | Missing | Added | total = Number of Windows |
6130 | quality-rule | Avoid userobject with too high level of inheritance | Documentation english | Missing | Added | total = Number of User Objects |
6132 | quality-rule | Avoid overriding event | Documentation english | associatedValueName = Associated Value | Removed | Missing |
6132 | quality-rule | Avoid overriding event | Documentation english | Missing | Added | total = Number of User Events Extend or Override |
6134 | quality-rule | Avoid menu with too high level of inheritance | Documentation english | Missing | Added | total = Number of Menus |
6142 | quality-rule | Avoid Windows with too many Methods | Documentation english | Missing | Added | total = Number of Windows |
6144 | quality-rule | Avoid Userobject with too many Methods | Documentation english | Missing | Added | total = Number of User Objects |
6150 | quality-rule | Avoid Menus, UserObjects and Windows that have no inheritance relations with other objects | Documentation english | Missing | Added | total = Number of menu, user objects and windows |
6162 | quality-rule | Avoid Artifacts with High integration complexity | Documentation english | Missing | Added | total = Number of PB artifacts |
6184 | quality-rule | Avoid Artifacts with Subqueries (Power Builder) | Documentation english | Missing | Added | total = Number of PB artifacts accessing SQL objects |
6194 | quality-rule | Avoid Artifacts with lines of more than 80 characters | Documentation english | Missing | Added | total = Number of PB artifacts |
7050 | quality-rule | Function naming convention | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7060 | quality-rule | Avoid undocumented Programs (ABAP) | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7062 | quality-rule | Avoid undocumented Includes | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7072 | quality-rule | Program naming convention | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7074 | quality-rule | Include naming convention | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7076 | quality-rule | Avoid Programs/Includes with too many Forms | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of Forms |
7088 | quality-rule | Processing Screen Naming Convention | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7088 | quality-rule | Processing Screen Naming Convention | Documentation english | Missing | Added | total = Number of ABAP processing screens |
7124 | quality-rule | DELETED: Functional Evolvability | Documentation english | total = The number of modules of the application. | Updated | total = Number of modules of the application |
7126 | quality-rule | Avoid Artifacts with high Commented-out Code Lines/Code Lines ratio | Documentation english | total = The total procedure counts the number of Artifacts. | Updated | total = Number of artifacts |
7130 | quality-rule | Avoid Artifacts with High Depth of Nested Subqueries | Documentation english | reference = http://it-cisq.org/ CISQ: ASCPEM-PRF-04 | Updated | reference = https://it-cisq.org/ CISQ: ASCPEM-PRF-04 |
7130 | quality-rule | Avoid Artifacts with High Depth of Nested Subqueries | Documentation english | total = The total procedure counts the number of SQL Artifacts. | Updated | total = Number of SQL artifacts |
7132 | quality-rule | Action Mappings should have few forwards | Documentation english | total = total of action mapping | Updated | total = Number of action mapping |
7134 | quality-rule | Avoid having local forward with same name as global forward | Documentation english | Missing | Added | total = Number of Local Forwards |
7136 | quality-rule | Each method in an Action Class should have a small complexity | Documentation english | total = The number of methods of classes and parent classes that are referenced as an ac... | Updated | total = Number of methods of classes and parent classes that are referenced as an action... |
7138 | quality-rule | Action Classes should only be called by Action Mappings tag (for Struts 1.x) or Action tag (for Struts 2.x) | Documentation english | total = number of methods or objects that call struts actions classes | Updated | total = Number of methods or objects that call struts actions classes |
7140 | quality-rule | Action Artifacts should not directly call a JSP page | Documentation english | total = The total number of artifacts of classes and parent classes that are referenced ... | Updated | total = Number of artifacts of classes and parent classes that are referenced as an acti... |
7142 | quality-rule | Action Classes should have only one public method | Documentation english | total = All action classes, except those inheriting from dispatchaction | Updated | total = Number of action classes, except those inheriting from dispatchaction |
7148 | quality-rule | JSP pages should always be accessed through their tiles definition | Documentation english | total = The total is the total of JSP pages. When the tiles technology is not used (no o... | Updated | total = Number of JSP pages, when the tiles technology is used (object of type "Tiles C... |
7152 | quality-rule | Avoid Fields in Servlet Classes that are not final static | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7154 | quality-rule | Avoid Fields in Action Classes that are not final static | Documentation english | Missing | Added | total = Number of Action Classes |
7156 | quality-rule | Avoid Too Many Copy Pasted Artifacts | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7156 | quality-rule | Avoid Too Many Copy Pasted Artifacts | Documentation english | total = Artifacts larger than 10 lines of code ( default value of the CODELINE parameter... | Updated | total = Number of artifacts larger than 10 lines of code ( default value of the CODELINE... |
7188 | quality-rule | Private fields must have JavaDoc Comments | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7188 | quality-rule | Private fields must have JavaDoc Comments | Documentation english | total = private java fields | Updated | total = Number of private Java fields |
7190 | quality-rule | Validator form validate() Method must call super.validate() | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7190 | quality-rule | Validator form validate() Method must call super.validate() | Documentation english | total = Non abstract methods that override the validate method (at any depth in the inhe... | Updated | total = Number of non abstract methods that override the validate method (at any depth i... |
7192 | quality-rule | Form Bean must extend Validator Class | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7192 | quality-rule | Form Bean must extend Validator Class | Documentation english | Missing | Added | total = Number of Java classes in the Struts application |
7194 | quality-rule | Avoid large number of String concatenation (.NET) | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of times the '+=' operator or Concat is called |
7194 | quality-rule | Avoid large number of String concatenation (.NET) | Documentation english | total = Total number of artifacts with code | Updated | total = Number of artifacts |
7196 | quality-rule | Avoid large number of String concatenation (JEE) | Documentation english | Missing | Added | total = Number of non abstract Java artifacts |
7198 | quality-rule | Avoid String concatenation in loops (.NET) | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7198 | quality-rule | Avoid String concatenation in loops (.NET) | Documentation english | total = Total number of artifacts with code | Updated | total = Number of artifacts |
7200 | quality-rule | Avoid String concatenation in loops (JEE) | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7200 | quality-rule | Avoid String concatenation in loops (JEE) | Documentation english | Missing | Added | total = Number of non abstract Java artifacts |
7202 | quality-rule | Check usage of '==' and '!=' on objects | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7202 | quality-rule | Check usage of '==' and '!=' on objects | Documentation english | Missing | Added | total = Number of non abstract Java Methods and Constructors |
7204 | quality-rule | Avoid method invocation in a loop termination expression | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7204 | quality-rule | Avoid method invocation in a loop termination expression | Documentation english | total = All methods having at least one loop | Updated | total = Number of methods having at least one loop |
7206 | quality-rule | Avoid the use of InstanceOf inside loops | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7206 | quality-rule | Avoid the use of InstanceOf inside loops | Documentation english | total = The total is the total number of methods | Updated | total = Number of methods |
7208 | quality-rule | Avoid the use of is inside loops | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7212 | quality-rule | Avoid instantiations inside loops (.NET) | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7216 | quality-rule | DELETED: Avoid using exception handling inside loops (.NET) | Documentation english | name = Avoid using exception handling inside loops (.NET) | Updated | name = DELETED: Avoid using exception handling inside loops (.NET) |
7216 | quality-rule | DELETED: Avoid using exception handling inside loops (.NET) | Documentation english | total = Total number of methods and constructors | Updated | total = Number of methods and constructors |
7218 | quality-rule | Avoid OPEN/CLOSE inside loops | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7218 | quality-rule | Avoid OPEN/CLOSE inside loops | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
7220 | quality-rule | Avoid Unused Imports | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
7220 | quality-rule | Avoid Unused Imports | Documentation english | Missing | Added | total = Number of Java files and Web files |
7234 | quality-rule | EVALUATE statements must be closed by END-EVALUATE | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7234 | quality-rule | EVALUATE statements must be closed by END-EVALUATE | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
7236 | quality-rule | Avoid recursive calls with PERFORM statements | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7236 | quality-rule | Avoid recursive calls with PERFORM statements | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
7238 | quality-rule | Avoid calls between JSP Pages | Documentation english | Missing | Added | total = Number of JSP pages |
7240 | quality-rule | Action Classes should only call Business Classes | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7240 | quality-rule | Action Classes should only call Business Classes | Documentation english | Missing | Added | total = Number of Action Classes |
7242 | quality-rule | Avoid implementing Action Classes inheriting directly from Struts Action | Documentation english | total = The number of action classes (inherit from org.apache.struts.action.Action) | Updated | total = Number of action classes (inherit from org.apache.struts.action.Action) |
7244 | quality-rule | Avoid direct usage of EJB Entity from the client | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7244 | quality-rule | Avoid direct usage of EJB Entity from the client | Documentation english | total = The ratio is the sum of client methods that call directly an Entity Bean divided... | Updated | total = Number of direct and indirect call from the client to Entity Beans |
7246 | quality-rule | Avoid Packages with High Efferent Coupling (CE) | Documentation english | Missing | Added | total = Number of Java classes and interfaces |
7248 | quality-rule | Avoid Packages with High Afferent Coupling (CA) | Documentation english | Missing | Added | total = Number of Java classes and interfaces |
7250 | quality-rule | Avoid String initialization with String object (created using the 'new' keyword) | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
7250 | quality-rule | Avoid String initialization with String object (created using the 'new' keyword) | Documentation english | Missing | Added | total = Number of Java artifacts |
7252 | quality-rule | Call 'super.finalize ()' in the "finally" block of 'finalize ()' methods | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7252 | quality-rule | Call 'super.finalize ()' in the "finally" block of 'finalize ()' methods | Documentation english | Missing | Added | total = Number of finalize methods |
7254 | quality-rule | Declare as Static all methods not using instance members (JEE) | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7254 | quality-rule | Declare as Static all methods not using instance members (JEE) | Documentation english | total = The number of non static methods. | Updated | total = Number of non static methods |
7256 | quality-rule | Provide a private default Constructor for utility Classes (JEE) | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7258 | quality-rule | DataReader must be called using CommandBehavior.CloseConnection enumeration | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7258 | quality-rule | DataReader must be called using CommandBehavior.CloseConnection enumeration | Diagnosis | diagnosisValueType = integer | Updated | diagnosisValueType = no-value |
7260 | quality-rule | User Interface elements must not use directly the database | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Database object |
7260 | quality-rule | User Interface elements must not use directly the database | Documentation english | total = All artifacts | Updated | total = Number of artifacts |
7262 | quality-rule | Avoid Namespaces with High Efferent Coupling (CE) | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Efferent Coupling |
7262 | quality-rule | Avoid Namespaces with High Efferent Coupling (CE) | Documentation english | Missing | Added | total = Number of namespaces |
7264 | quality-rule | Avoid namespaces with High Afferent Coupling (CA) | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Afferent Coupling |
7264 | quality-rule | Avoid namespaces with High Afferent Coupling (CA) | Documentation english | Missing | Added | total = Number of namespaces |
7266 | quality-rule | Call 'base.Dispose()' or 'MyBase.Finalize()' in the "finally" block of 'Dispose(bool)' methods | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7266 | quality-rule | Call 'base.Dispose()' or 'MyBase.Finalize()' in the "finally" block of 'Dispose(bool)' methods | Documentation english | total = The Total procedure must count only Dispose(bool) methods defined in classes whi... | Updated | total = Number of Dispose(bool) methods defined in classes which implement the IDisposab... |
7268 | quality-rule | Dispose() methods should call GC.SuppressFinalize | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7268 | quality-rule | Dispose() methods should call GC.SuppressFinalize | Documentation english | total = The Total procedure counts only the Dispose() methods without parameters and def... | Updated | total = Number of Dispose() methods without parameters and defined in classes which impl... |
7270 | quality-rule | Declare as Static all methods not using instance members (.NET) | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7270 | quality-rule | Declare as Static all methods not using instance members (.NET) | Documentation english | total = Total number of methods | Updated | total = Number of methods |
7272 | quality-rule | Provide a private default Constructor for utility Classes (.NET) | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7274 | quality-rule | Avoid GOTO jumps out of PERFORM range | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7274 | quality-rule | Avoid GOTO jumps out of PERFORM range | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
7288 | quality-rule | Avoid cyclic calls with PERFORM statements | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7288 | quality-rule | Avoid cyclic calls with PERFORM statements | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
7290 | quality-rule | Avoid unreferenced Sections and Paragraphs | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7290 | quality-rule | Avoid unreferenced Sections and Paragraphs | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
7294 | quality-rule | Avoid cyclical calls and inheritances between namespaces content | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Cyclically called / inherited namespace full name |
7296 | quality-rule | Never define static variables in header files | Documentation english | output = ...violation patterns found in the source code: - static variable | Updated | output = ...violation occurrences found in the source code: - static variable |
7298 | quality-rule | A Class that has pointer data members must provide a copy Constructor | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7298 | quality-rule | A Class that has pointer data members must provide a copy Constructor | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
7302 | quality-rule | Avoid using Pointers | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7302 | quality-rule | Avoid using Pointers | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
7304 | quality-rule | IF statements must be closed by END-IF | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7304 | quality-rule | IF statements must be closed by END-IF | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
7306 | quality-rule | Avoid declaring Inner Classes | Documentation english | Missing | Added | total = Number of Java classes |
7308 | quality-rule | Avoid using Inner Classes | Documentation english | Missing | Added | total = Number of Java artifacts |
7340 | quality-rule | Avoid Classes with Destructor not explicitly virtual whenever one of its base Class has a virtual Destructor | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
7340 | quality-rule | Avoid Classes with Destructor not explicitly virtual whenever one of its base Class has a virtual Destructor | Documentation english | output = ...violation patterns found in source code: - Derived-class non-virtual destructo... | Updated | output = ...violation occurrences found in source code: - Derived-class non-virtual destru... |
7342 | quality-rule | Avoid functions overriding virtual functions without having the 'virtual' keyword | Documentation english | output = ...violation patterns found in the source code: - Non-virtual method - Virtual ... | Updated | output = ...violation occurrences found in the source code: - Non-virtual method - Virtu... |
7344 | quality-rule | Avoid "SELECT *" queries | Documentation english | total = The total procedure counts the number of Client-Server Artifacts using Tables or... | Updated | total = Number of Client-Server artifacts using tables or views |
7346 | quality-rule | Avoid redundant indexes | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Redundant index |
7346 | quality-rule | Avoid redundant indexes | Documentation english | total = Total number of tables | Updated | total = Number of tables |
7348 | quality-rule | Avoid too many Indexes on one Table | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of indexes of the table |
7348 | quality-rule | Avoid too many Indexes on one Table | Documentation english | total = Total number of tables | Updated | total = Number of tables |
7350 | quality-rule | Avoid Tables having Indexes with a too large Index definition | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Size of index |
7350 | quality-rule | Avoid Tables having Indexes with a too large Index definition | Documentation english | total = The total procedure counts the number of tables. | Updated | total = Number of tables |
7352 | quality-rule | Avoid calling properties that clone values in loops | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
7352 | quality-rule | Avoid calling properties that clone values in loops | Documentation english | total = This counts all artifacts that can contain code (e.g. methods in classes but not... | Updated | total = Number of methods in classes but not in interfaces |
7358 | quality-rule | Avoid call to AcceptChanges in a loop | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7358 | quality-rule | Avoid call to AcceptChanges in a loop | Documentation english | total = All .Net Artifacts doing a call to AcceptChanges | Updated | total = Number of .Net artifacts doing a call to AcceptChanges |
7360 | quality-rule | DELETED:7360 Avoid hiding Static Methods | Documentation english | total = The total procedure counts the number of static methods. | Updated | total = Number of static methods |
7362 | quality-rule | Avoid action mappings validator turned off | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7362 | quality-rule | Avoid action mappings validator turned off | Documentation english | total = The number of action mapping or 0 if no object of type "Struts Configuration Fil... | Updated | total = Number of action mapping or 0 if no object of type "Struts Configuration File" i... |
7364 | quality-rule | Avoid multiple validation form with the same name | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7364 | quality-rule | Avoid multiple validation form with the same name | Documentation english | total = The total number of distinct validation forms names or 0 if no object of type "V... | Updated | total = Number of distinct validation forms names or 0 if no object of type "Validation ... |
7366 | quality-rule | File descriptor block must be defined with 0 record | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7366 | quality-rule | File descriptor block must be defined with 0 record | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
7368 | quality-rule | When using binary data items (COMP), then use the SYNCHRONIZED clause | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7368 | quality-rule | When using binary data items (COMP), then use the SYNCHRONIZED clause | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
7370 | quality-rule | Avoid using inline PERFORM with too many lines of code | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7370 | quality-rule | Avoid using inline PERFORM with too many lines of code | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
7372 | quality-rule | Enable Struts Validator plugin | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7372 | quality-rule | Enable Struts Validator plugin | Documentation english | total = the total is equal to the number of struts configuration file if object of type ... | Updated | total = Number of struts configuration file when object of type "Struts Configuration Fi... |
7378 | quality-rule | Avoid include JavaScript Files | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7378 | quality-rule | Avoid include JavaScript Files | Documentation english | total = number of JSP files that refer to JavaScript Files | Updated | total = Number of JSP files that refer to JavaScript files |
7380 | quality-rule | Avoid unused validation form | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7380 | quality-rule | Avoid unused validation form | Documentation english | total = total of validation form or 0 if no object of type "Validation Configuration Fil... | Updated | total = Number of validation forms when object of type "Validation Configuration File" i... |
7382 | quality-rule | Avoid Validator field without Form Field | Documentation english | total = total of form validated or 0 if no object of type "Validation Configuration Fil... | Updated | total = Number of forms validated when object of type "Validation Configuration File" is... |
7384 | quality-rule | DELETED: Large Programs should be called dynamically | Documentation english | output = ...violation patterns found in source code: - CALL statement | Updated | output = ...violation occurrences found in source code: - CALL statement |
7386 | quality-rule | Avoid Tables without a clustered Index | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
7388 | quality-rule | Avoid artifacts having recursive calls | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7388 | quality-rule | Avoid artifacts having recursive calls | Documentation english | total = The total procedure counts the number of executable artifacts (all Artifacts exc... | Updated | total = Number of executable artifacts (all artifacts excepts tables, views, jsp, asp, ... |
7390 | quality-rule | Avoid having multiple artifacts inserting data on the same SQL Table | Documentation english | name = ... multiple Artifacts inserting data on the same SQL Table | Updated | name = ... multiple artifacts inserting data on the same SQL Table |
7390 | quality-rule | Avoid having multiple artifacts inserting data on the same SQL Table | Documentation english | total = The total procedure counts the number of tables. | Updated | total = Number of tables |
7390 | quality-rule | Avoid having multiple artifacts inserting data on the same SQL Table | Documentation english | Missing | Added | remediationSample = import java.sql.*; // less than X classes update the same table public class T... |
7390 | quality-rule | Avoid having multiple artifacts inserting data on the same SQL Table | Documentation english | Missing | Added | sample = import java.sql.*; public class TestUpdate1 { public static void main(java.l... |
7392 | quality-rule | Avoid having multiple artifacts deleting data on the same SQL table | Documentation english | total = The total procedure counts the number of tables. | Updated | total = Number of tables |
7392 | quality-rule | Avoid having multiple artifacts deleting data on the same SQL table | Documentation english | Missing | Added | remediationSample = import java.sql.*; // less than X classes update the same table public class T... |
7392 | quality-rule | Avoid having multiple artifacts deleting data on the same SQL table | Documentation english | Missing | Added | sample = import java.sql.*; public class TestUpdate1 { public static void main(java.l... |
7394 | quality-rule | Avoid having multiple artifacts updating data on the same SQL Table | Documentation english | name = ... multiple Artifacts updating data on the same SQL Table | Updated | name = ... multiple artifacts updating data on the same SQL Table |
7394 | quality-rule | Avoid having multiple artifacts updating data on the same SQL Table | Documentation english | total = The total procedure counts the number of tables. | Updated | total = Number of tables |
7394 | quality-rule | Avoid having multiple artifacts updating data on the same SQL Table | Documentation english | Missing | Added | remediationSample = import java.sql.*; // less than X classes update the same table public class T... |
7394 | quality-rule | Avoid having multiple artifacts updating data on the same SQL Table | Documentation english | Missing | Added | sample = import java.sql.*; public class TestUpdate1 { public static void main(java.l... |
7396 | quality-rule | DELETED: Subprograms called multiple times should be called statically | Documentation english | output = ...violation patterns found in source code: - "CALL <variable_name>" statements r... | Updated | output = ...violation occurrences found in source code: - "CALL <variable_name>" statement... |
7404 | quality-rule | Avoid unreferenced views | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7404 | quality-rule | Avoid unreferenced views | Documentation english | total = total is number of views stored in the schema | Updated | total = Number of views stored in the schema |
7416 | quality-rule | Avoid Form Field without Validator | Documentation english | total = The number of all form fields or Java setter methods, when defined with struts o... | Updated | total = Number of form fields or Java setter methods, when defined with struts or 0 if n... |
7418 | quality-rule | Avoid SQL queries using functions on indexed columns in the WHERE clause | Documentation english | total = The total procedure counts the number of Client-Server Artifacts using Tables. | Updated | total = Number of Client-Server artifacts using tables |
7420 | quality-rule | Avoid SQL queries with implicit conversions in the WHERE clause | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Name of the column (first column involved in a type conversion) |
7420 | quality-rule | Avoid SQL queries with implicit conversions in the WHERE clause | Documentation english | total = The total procedure counts the number of SQL Artifacts using Tables. | Updated | total = Number of SQL artifacts using tables |
7424 | quality-rule | Avoid using SQL queries inside a loop | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7424 | quality-rule | Avoid using SQL queries inside a loop | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
7428 | quality-rule | Avoid SQL queries not using the first column of a composite index in the WHERE clause | Documentation english | total = The total procedure counts the number of client-server artifacts using tables th... | Updated | total = Number of client-server artifacts using tables that contain a query using column... |
7434 | quality-rule | Avoid classes overriding only equals() or only hashCode() | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7434 | quality-rule | Avoid classes overriding only equals() or only hashCode() | Documentation english | total = all classes that override equals() or (not exclusive) hashCode() | Updated | total = Number of classes that override equals() or (not exclusive) hashCode() |
7436 | quality-rule | Prefer UNION ALL to UNION | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = The number of UNION (without ALL) occurrences |
7436 | quality-rule | Prefer UNION ALL to UNION | Documentation english | total = The total procedure counts the number of Client-Server Artifacts with a SQL quer... | Updated | total = Number of Client-Server artifacts with a SQL query that contains a UNION or UNIO... |
7438 | quality-rule | Avoid non thread safe singleton | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7438 | quality-rule | Avoid non thread safe singleton | Documentation english | total = the total procedure counts all singleton classes (as defined in the definition) | Updated | total = Number of singleton classes (as defined in the definition) |
7440 | quality-rule | Suspicious similar method names or signatures in an inheritance tree | Documentation english | total = All methods that fails and all methods that override a method from a superclass | Updated | total = Number of methods that fails and methods that override a method from a superclas... |
7444 | quality-rule | Serialize session objects | Documentation english | total = The number of objects in the session scope | Updated | total = Number of objects in the session scope |
7446 | quality-rule | Avoid double checked locking | Diagnosis | diagnosisValueType = no-value | Updated | diagnosisValueType = integer |
7458 | quality-rule | Avoid large Interfaces - too many Methods (.NET) | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of methods |
7458 | quality-rule | Avoid large Interfaces - too many Methods (.NET) | Documentation english | total = Total number of interfaces | Updated | total = Number of interfaces |
7460 | quality-rule | Avoid using untyped DataSet | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7466 | quality-rule | Avoid changing DataSource member before ValueMember/DisplayMember | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7468 | quality-rule | Disable constraints before merging DataSet | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7470 | quality-rule | Avoid doing select on Datatable in loop | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7474 | quality-rule | Use BeginUpdate/EndUpdate when using Items.Add method in loop | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7476 | quality-rule | Turn off "Multiple SQL statements for each measure" | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7476 | quality-rule | Turn off "Multiple SQL statements for each measure" | Documentation english | total = Count of universes | Updated | total = Number of universes |
7480 | quality-rule | Use aggregate awareness for indicators | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7480 | quality-rule | Use aggregate awareness for indicators | Documentation english | total = Count of indicators | Updated | total = Number of indicators |
7482 | quality-rule | Do not use Cartesian products in Universe properties | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7482 | quality-rule | Do not use Cartesian products in Universe properties | Documentation english | total = Count of universes | Updated | total = Number of universes |
7484 | quality-rule | Objects in Universe using inexistent Table/Column | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7486 | quality-rule | Split universes of more than X MB | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7486 | quality-rule | Split universes of more than X MB | Documentation english | total = All universes | Updated | total = Number of universes |
7488 | quality-rule | Use lazy fetching for collection | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7488 | quality-rule | Use lazy fetching for collection | Documentation english | total = number of Hibernate Entity Property or JPA Entity Property of type collection | Updated | total = Number of Hibernate entity properties or JPA entity properties of type collectio... |
7490 | quality-rule | Avoid UPDATE trigger firing when not necessary | Documentation english | total = The number of Hibernate XML Class associated to a table managed by a trigger | Updated | total = Number of Hibernate XML classes associated to a table managed by a trigger |
7494 | quality-rule | Persistent class method's equals() and hashCode() must access its fields through getter methods | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7496 | quality-rule | Use table-per-subclass strategy when subclasses have many properties | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7496 | quality-rule | Use table-per-subclass strategy when subclasses have many properties | Documentation english | total = The number of hibernate and/or JPA entities that are subclassed (subclass or joi... | Updated | total = Number of hibernate and/or JPA entities that are subclassed (subclass or joined-... |
7498 | quality-rule | Collection must be the same between getter and setter | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7498 | quality-rule | Collection must be the same between getter and setter | Documentation english | total = The total is the total number of hibernate or JPA persistent fields setters and ... | Updated | total = Number of hibernate or JPA persistent fields setters and getters that have a Col... |
7500 | quality-rule | Use table-per-class-hierarchy when subclasses have few properties | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7500 | quality-rule | Use table-per-class-hierarchy when subclasses have few properties | Documentation english | total = The number of hibernate and/or JPA entities that are subclassed (subclass or joi... | Updated | total = Number of hibernate and/or JPA entities that are subclassed (subclass or joined-... |
7502 | quality-rule | Never use array to map a collection | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7502 | quality-rule | Never use array to map a collection | Documentation english | total = The total will be the number of Hibernate Entities that map a collection that co... | Updated | total = Number of Hibernate entities that map a collection that could be: array, map, li... |
7504 | quality-rule | Persistent classes should Implement hashCode() and equals() | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7504 | quality-rule | Persistent classes should Implement hashCode() and equals() | Documentation english | total = The number of persistent classes (through Hibernate or JPA) | Updated | total = Number of persistent classes (through Hibernate or JPA) |
7506 | quality-rule | Define equals() and hashCode() for component | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7506 | quality-rule | Define equals() and hashCode() for component | Documentation english | total = Total classes associated to a component (component and composite-element or @Emb... | Updated | total = Number of classes associated to a component (component and composite-element or ... |
7508 | quality-rule | Collection-typed attributes getter must be defined with the correct interface | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7508 | quality-rule | Collection-typed attributes getter must be defined with the correct interface | Documentation english | total = Total getters associated to persistent collection-typed attributes | Updated | total = Number of getters associated to persistent collection-typed attributes |
7510 | quality-rule | Use only Hibernate API to access to the database | Documentation english | total = The total number of artifacts that violate this rule plus the artifacts that ref... | Updated | total = Number of artifacts that violate this rule plus the artifacts that reference net... |
7512 | quality-rule | Avoid empty Functions, Forms and Modules | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7514 | quality-rule | Avoid empty Includes | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7516 | quality-rule | Avoid empty Programs | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7518 | quality-rule | Avoid missing WHEN OTHERS in CASE statements | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7518 | quality-rule | Avoid missing WHEN OTHERS in CASE statements | Documentation english | output = ...violation patterns | Updated | output = ...violation occurrences |
7520 | quality-rule | Avoid unchecked return code (SY-SUBRC) after OPEN SQL or READ statement | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7520 | quality-rule | Avoid unchecked return code (SY-SUBRC) after OPEN SQL or READ statement | Documentation english | output = ...violation patterns | Updated | output = ...violation occurrences |
7522 | quality-rule | Avoid using literals in assignments (hardcoded values) | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7522 | quality-rule | Avoid using literals in assignments (hardcoded values) | Documentation english | output = ...violation patterns | Updated | output = ...violation occurrences |
7526 | quality-rule | Avoid using hardcoded paths | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7526 | quality-rule | Avoid using hardcoded paths | Documentation english | output = ...violation patterns | Updated | output = ...violation occurrences |
7528 | quality-rule | Never use the ON CHANGE OF statement | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7528 | quality-rule | Never use the ON CHANGE OF statement | Documentation english | output = ...violation patterns | Updated | output = ...violation occurrences |
7532 | quality-rule | Avoid nested SELECT ... ENDSELECT statements | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7532 | quality-rule | Avoid nested SELECT ... ENDSELECT statements | Documentation english | output = ...violation patterns | Updated | output = ...violation occurrences |
7534 | quality-rule | Avoid READ TABLE without BINARY SEARCH | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7534 | quality-rule | Avoid READ TABLE without BINARY SEARCH | Documentation english | output = ...violation patterns | Updated | output = ...violation occurrences |
7536 | quality-rule | Avoid using AT Events in combination of LOOP AT .... WHERE constructs | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7536 | quality-rule | Avoid using AT Events in combination of LOOP AT .... WHERE constructs | Documentation english | output = ...violation patterns | Updated | output = ...violation occurrences |
7538 | quality-rule | Avoid using SELECT ... INTO CORRESPONDING FIELDS OF | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7538 | quality-rule | Avoid using SELECT ... INTO CORRESPONDING FIELDS OF | Documentation english | output = ...violation patterns | Updated | output = ...violation occurrences |
7542 | quality-rule | Avoid using FOR ALL ENTRIES IN without emptiness check | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7542 | quality-rule | Avoid using FOR ALL ENTRIES IN without emptiness check | Documentation english | output = ...violation patterns | Updated | output = ...violation occurrences |
7544 | quality-rule | Avoid using SELECT ... ENDSELECT statement | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7544 | quality-rule | Avoid using SELECT ... ENDSELECT statement | Documentation english | output = ...violation patterns | Updated | output = ...violation occurrences |
7548 | quality-rule | Never use incompatible statements with the CICS environment | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
7548 | quality-rule | Never use incompatible statements with the CICS environment | Documentation english | output = ...violation patterns found in source code: - Incompatible Cobol statement | Updated | output = ...violation occurrences found in source code: - Incompatible Cobol statement |
7550 | quality-rule | Avoid using nested programs | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7550 | quality-rule | Avoid using nested programs | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
7552 | quality-rule | Avoid incoherent file accesses in Cobol programs and DISP clauses in JCL | Documentation english | output = ...violation patterns found in source code: - The OPEN statement (in the Cobol ... | Updated | output = ...violation occurrences found in source code: - The OPEN statement (in the Cob... |
7556 | quality-rule | Avoid instanceof in Methods that override or implement Object.equals(), Comparable.compareTo() | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7558 | quality-rule | Avoid accessing data by using the position and length | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7558 | quality-rule | Avoid accessing data by using the position and length | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
7562 | quality-rule | Avoid static Field of type collection | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7568 | quality-rule | Avoid undocumented User-exits | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7598 | quality-rule | Class naming convention | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7602 | quality-rule | Transaction naming convention | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7634 | quality-rule | Avoid select-before-update when the Table is not associated to an UPDATE Trigger | Documentation english | total = The number of Hibernate XML Entities that have the select-before-update property | Updated | total = Number of Hibernate XML Entities that have the select-before-update property |
7636 | quality-rule | Use version instead of timestamp | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7636 | quality-rule | Use version instead of timestamp | Documentation english | total = The total is the number of hibernate entity that use version or timestamp proper... | Updated | total = Number of Hibernate entities that use version or timestamp property |
7638 | quality-rule | Avoid using DriverManager | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7638 | quality-rule | Avoid using DriverManager | Documentation english | total = The number of methods that reference java.sql.Connection class | Updated | total = Number of methods that reference java.sql.Connection class |
7640 | quality-rule | Avoid catch blocks with assertion | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7640 | quality-rule | Avoid catch blocks with assertion | Documentation english | total = Methods and constructors that have code (not abstracts or from interfaces) conta... | Updated | total = Number of methods and constructors that have code (not abstracts or from interfa... |
7642 | quality-rule | Avoid SQL queries on XXL tables not using the first column of a composite index in the WHERE clause | Documentation english | total = The total procedure counts the number of client-server artifacts using tables or... | Updated | total = Number of client-server artifacts using tables or views that contain a query usi... |
7644 | quality-rule | Avoid executing multiple OPEN statements | Documentation english | output = ...violation patterns found in source code: - OPEN statement | Updated | output = ...violation occurrences found in source code: - OPEN statement |
7648 | quality-rule | Avoid calling finalize() | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7648 | quality-rule | Avoid calling finalize() | Documentation english | total = number of call to finalize methods | Updated | total = Number of calls to finalize methods |
7650 | quality-rule | All types of a serializable Class must be serializable | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7650 | quality-rule | All types of a serializable Class must be serializable | Documentation english | total = number of non-static, non-transient and not primitive fields of classes that imp... | Updated | total = Number of non-static, non-transient and not primitive fields of classes that imp... |
7652 | quality-rule | Avoid throwing an exception in a catch block without chaining it | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7652 | quality-rule | Avoid throwing an exception in a catch block without chaining it | Documentation english | total = The number of methods that throw an exception (a class that inherits from Throwa... | Updated | total = Number of methods that throw an exception (a class that inherits from Throwable)... |
7654 | quality-rule | Avoid database tables associated to more than one Entity | Documentation english | total = The total is the number of Entity | Updated | total = Number of entities |
7658 | quality-rule | Avoid SQL queries on XXL Tables using Functions on indexed Columns in the WHERE clause | Documentation english | total = The total procedure counts the number of Client-Server Artifacts using XXL Table... | Updated | total = Number of Client-Server artifacts using XXL Tables or views based on XXL tables |
7660 | quality-rule | Never use SQL queries with a cartesian product on XXL Tables | Documentation english | total = The total procedure counts the number of Client-Server Artifacts using XXL Table... | Updated | total = Number of Client-Server artifacts using XXL Tables or views based on XXL tables |
7662 | quality-rule | Avoid SQL queries on XXL Tables with implicit conversions in the WHERE clause | Documentation english | total = The total procedure counts the number of SQL Artifacts using XXL Tables or views... | Updated | total = Number of SQL artifacts using XXL Tables or views based on XXL tables |
7668 | quality-rule | Avoid using incorrect XML parsing model | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7668 | quality-rule | Avoid using incorrect XML parsing model | Documentation english | total = The number of methods that reference javax.xml.parsers.SAXParser and javax.xml.p... | Updated | total = Number of methods that reference javax.xml.parsers.SAXParser and javax.xml.parse... |
7670 | quality-rule | Avoid accessing SAP standard Tables in modification from custom code | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7670 | quality-rule | Avoid accessing SAP standard Tables in modification from custom code | Documentation english | output = ...violation patterns | Updated | output = ...violation occurrences |
7672 | quality-rule | Avoid using EXIT statement in Include | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7672 | quality-rule | Avoid using EXIT statement in Include | Documentation english | output = ...violation patterns | Updated | output = ...violation occurrences |
7676 | quality-rule | Avoid too many packages referencing Mainframe | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7676 | quality-rule | Avoid too many packages referencing Mainframe | Documentation english | total = The number of package | Updated | total = Number of packages |
7678 | quality-rule | Avoid using specific logging implementation | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7678 | quality-rule | Avoid using specific logging implementation | Documentation english | total = total of artifacts and fields that use org.apache.log4j, org.apache.commons.logg... | Updated | total = Number of artifacts and fields that use org.apache.log4j, org.apache.commons.log... |
7680 | quality-rule | Declare as Final all classes that will not be sub-classed | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7682 | quality-rule | Avoid domain model depending on other Java API | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7682 | quality-rule | Avoid domain model depending on other Java API | Documentation english | total = The number of persistent classes's artifacts | Updated | total = Number of persistent classes's artifacts |
7688 | quality-rule | Never truncate data in MOVE statements | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7688 | quality-rule | Never truncate data in MOVE statements | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
7690 | quality-rule | Avoid unchecked return code (SQLCODE) after EXEC SQL query | Documentation english | output = ...violation patterns found in source code: - EXEC SQL query that is not followe... | Updated | output = ...violation occurrences found in source code: - EXEC SQL query that is not foll... |
7692 | quality-rule | Each opened file must be closed | Documentation english | output = ...violation patterns found in source code: - FD clause associated to the file ... | Updated | output = ...violation occurrences found in source code: - FD clause associated to the fi... |
7694 | quality-rule | Avoid calling the same paragraph with PERFORM and GO TO statements | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7694 | quality-rule | Avoid calling the same paragraph with PERFORM and GO TO statements | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
7696 | quality-rule | A Copybook should not include other Copybooks | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7696 | quality-rule | A Copybook should not include other Copybooks | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
7698 | quality-rule | Files should be declared with a FILE-STATUS | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7698 | quality-rule | Files should be declared with a FILE-STATUS | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
7700 | quality-rule | Use only Struts HTTP Servlet | Documentation english | total = The total is the total number of Servlet that inherit from javax.servlet.http.Ht... | Updated | total = Number of Servlets that inherit from javax.servlet.http.HttpServlet when org.apa... |
7702 | quality-rule | Use a third party connection pool | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7702 | quality-rule | Use a third party connection pool | Documentation english | total = Total of Hibernate Configuration File (including hibernate.properties). If it do... | Updated | total = Number of Hibernate configuration fields (including hibernate.properties) |
7704 | quality-rule | Avoid static Fields that are not final | Documentation english | total = number of enterprise bean (session, message and entity) | Updated | total = Number of enterprise beans (session, message and entity) |
7706 | quality-rule | Avoid table and column names that are too long (portability) | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7706 | quality-rule | Avoid table and column names that are too long (portability) | Documentation english | total = The total number of Persistent Entities and Properties | Updated | total = Number of persistent entities and properties |
7708 | quality-rule | Avoid using session.setFlushMode(FlushMode.COMMIT, FlushMode.NEVER or FlushMode.MANUAL) | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7708 | quality-rule | Avoid using session.setFlushMode(FlushMode.COMMIT, FlushMode.NEVER or FlushMode.MANUAL) | Documentation english | total = The number of methods that reference org.hibernate.Session.setFlushMode or net.s... | Updated | total = Number of methods that reference org.hibernate.Session.setFlushMode or net.sf.hi... |
7710 | quality-rule | Avoid non serializable Entities | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7710 | quality-rule | Avoid non serializable Entities | Documentation english | total = the number of entities | Updated | total = Number of entities |
7712 | quality-rule | Avoid public/protected setter for the generated identifier field | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7714 | quality-rule | Do not use auto-wiring | Diagnosis | scopeID = 0, propertyID = 0 | Updated | scopeID = 529, propertyID = 140919 |
7714 | quality-rule | Do not use auto-wiring | Documentation english | reference = http://www.onjava.com/pub/a/onjava/2006/01/25/spring-xml-configuration-best-prac... | Updated | reference = https://blog.marcnuri.com/field-injection-is-not-recommended/ https://howtodoinj... |
7714 | quality-rule | Do not use auto-wiring | Documentation english | remediationSample = ...yBean"/> // FIXED ... </beans> | Updated | remediationSample = ...yBean"/> // FIXED ... </beans> @Service public class ModuleManagementService { ... |
7714 | quality-rule | Do not use auto-wiring | Documentation english | sample = ...n"/> // VIOLATION ... </beans> | Updated | sample = ...n"/> // VIOLATION ... </beans> import org.springframework.stereotype.Componen... |
7714 | quality-rule | Do not use auto-wiring | Documentation english | total = The total number of Spring bean, 0 if Spring is not used | Updated | total = Number of Spring bean |
7714 | quality-rule | Do not use auto-wiring | Diagnosis | diagnosisValueType = no-value | Updated | diagnosisValueType = integer |
7714 | quality-rule | Do not use auto-wiring | Operation | localSiteDiagnose = DIAG_SCOPE_JEEARUSE004 | Updated | localSiteDiagnose = null |
7714 | quality-rule | Do not use auto-wiring | Operation | localSiteCountTotal = DIAG_JEE_SPRINGBEAN_TOTAL | Updated | localSiteCountTotal = null |
7716 | quality-rule | Avoid defining singleton or factory when using Spring | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7716 | quality-rule | Avoid defining singleton or factory when using Spring | Documentation english | total = The total will be the total of JAVA singleton, factory and Spring beans, 0 if Sp... | Updated | total = Number of Java singleton, factory and Spring beans when Spring is used |
7718 | quality-rule | Sections and paragraphs should be located after the first statement calling them | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7718 | quality-rule | Sections and paragraphs should be located after the first statement calling them | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
7722 | quality-rule | Avoid using references to the id in the persistent class's method equals() | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7724 | quality-rule | Overriden equals() Methods in persistent Subclasses should only reference properties from the persistent base Class | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7724 | quality-rule | Overriden equals() Methods in persistent Subclasses should only reference properties from the persistent base Class | Documentation english | total = The total is the number of persistent subclasses (subclass or joined-subclass) t... | Updated | total = Number of persistent subclasses (subclass or joined-subclass) that override the ... |
7726 | quality-rule | Avoid Action artifacts that call packages that reference database | Documentation english | total = The total number of artifacts of classes and parent classes that are referenced ... | Updated | total = Number of artifacts of classes and parent classes that are referenced as an acti... |
7728 | quality-rule | Avoid thread creation for application running on application server | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7728 | quality-rule | Avoid thread creation for application running on application server | Documentation english | total = The number of Java methods and Constructors when ejb-jar.xml or web.xml are pres... | Updated | total = Number of Java methods and constructors when ejb-jar.xml or web.xml are present ... |
7730 | quality-rule | Use declarative transaction | Diagnosis | scopeID = 0, propertyID = 0 | Updated | scopeID = 531, propertyID = 140920 |
7730 | quality-rule | Use declarative transaction | Documentation english | description = When EJB Session and/or Message Driven Beans exist, this Quality Rule reports al... | Updated | description = The Bean Provider can choose between using programmatic transaction demarcation ... |
7730 | quality-rule | Use declarative transaction | Documentation english | total = The number of Java Methods and Constructors when EJB Session and/or EJB Message ... | Updated | total = Number of Java Methods and Constructors (including generic methods and generic c... |
7730 | quality-rule | Use declarative transaction | Documentation english | Missing | Added | remediationSample = use container-managed transaction demarcation (@Transactional Annotation or Conf... |
7730 | quality-rule | Use declarative transaction | Documentation english | Missing | Added | sample = programmatic transaction demarcation: sample 1: @Stateless @TransactionManagemen... |
7730 | quality-rule | Use declarative transaction | Diagnosis | diagnosisValueType = no-value | Updated | diagnosisValueType = integer |
7730 | quality-rule | Use declarative transaction | Operation | localSiteDiagnose = DIAG_SCOPE_JAVAPPUB004 | Updated | localSiteDiagnose = null |
7730 | quality-rule | Use declarative transaction | Operation | localSiteCountTotal = DIAG_JEE_METBEAN_TOTAL | Updated | localSiteCountTotal = null |
7732 | quality-rule | Avoid non validated inputs | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7732 | quality-rule | Avoid non validated inputs | Documentation english | total = The total number of input field, 0 if JSF is not used | Updated | total = Number of input field, 0 if JSF is not used |
7734 | quality-rule | Avoid to use Log.debug() without calling Log.isDebugEnabled() | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7734 | quality-rule | Avoid to use Log.debug() without calling Log.isDebugEnabled() | Documentation english | total = the number of methods that call debug() methods (i.e: org.apache.log4j.Category.... | Updated | total = Number of methods that call debug() methods (i.e: org.apache.log4j.Category.debu... |
7740 | quality-rule | Avoid cross-site scripting vulnerabilities | Documentation english | description = ...ripting injection flaws (XSS). The list of user input methods can be customized... | Updated | description = ...ripting injection flaws (XSS). |
7740 | quality-rule | Avoid cross-site scripting vulnerabilities | Documentation english | name = ...scripting DOM vulnerabilities | Updated | name = ...scripting vulnerabilities |
7740 | quality-rule | Avoid cross-site scripting vulnerabilities | Documentation english | output = ...nerability : It provides the following information: - The full name of the meth... | Updated | output = ...nerability: It provides the following information: - The full name of the metho... |
7740 | quality-rule | Avoid cross-site scripting vulnerabilities | Documentation english | rationale = ...vulnerabilty is known as cross-site scripting (XSS). It is caused by malicious s... | Updated | rationale = ...vulnerability is known as cross-site scripting (XSS). It is caused by malicious ... |
7740 | quality-rule | Avoid cross-site scripting vulnerabilities | Documentation english | remediation = Code the appropriate sanitization methods as close as possible to the user input... | Updated | remediation = Use authorized sanitization methods. |
7740 | quality-rule | Avoid cross-site scripting vulnerabilities | Documentation english | total = The number of methods calling user input methods | Updated | total = Number of methods calling user input methods |
7740 | quality-rule | Avoid cross-site scripting vulnerabilities | Documentation english | Missing | Added | remediationSample = Sample 1 <% String eid = request.getParameter("eid"); %> ... //include validatio... |
7740 | quality-rule | Avoid cross-site scripting vulnerabilities | Documentation english | Missing | Added | sample = Sample 1 <% String eid = request.getParameter("eid"); %> ... Employee ID: <%= ei... |
7742 | quality-rule | Avoid SQL injection vulnerabilities | Documentation english | description = ...r validation and sanitization. The list of user input methods, SQL execution me... | Updated | description = ...r validation and sanitization. |
7742 | quality-rule | Avoid SQL injection vulnerabilities | Documentation english | rationale = ...lidation ( CWE-20 ) as follows : "When software does not validate input properl... | Updated | rationale = ...lidation (CWE-20) as follows: "When software does not validate input properly, ... |
7742 | quality-rule | Avoid SQL injection vulnerabilities | Documentation english | remediation = Code the appropriate input validation as close as possible to the user input cal... | Updated | remediation = Use authorized sanitization methods. |
7742 | quality-rule | Avoid SQL injection vulnerabilities | Documentation english | total = The number of methods calling user input methods | Updated | total = Number of methods calling user input methods |
7742 | quality-rule | Avoid SQL injection vulnerabilities | Documentation english | Missing | Added | remediationSample = ... string userName = ctx.getAuthenticatedUserName(); // validate the user input... |
7742 | quality-rule | Avoid SQL injection vulnerabilities | Documentation english | Missing | Added | sample = The following code dynamically constructs and executes a SQL query that searches... |
7746 | quality-rule | Avoid LDAP injection vulnerabilities | Documentation english | description = ...on flaws ( LDAP : Lightweight Directory Access Protocol ). The list of user inp... | Updated | description = ...on flaws (LDAP: Lightweight Directory Access Protocol). |
7746 | quality-rule | Avoid LDAP injection vulnerabilities | Documentation english | rationale = In web based applications, the validation of all user input is critical to avoid... | Updated | rationale = An attacker could include input that changes the LDAP query which allows uninten... |
7746 | quality-rule | Avoid LDAP injection vulnerabilities | Documentation english | total = The number of methods calling user input methods | Updated | total = Number of methods calling user input methods |
7746 | quality-rule | Avoid LDAP injection vulnerabilities | Documentation english | Missing | Added | remediation = Input Validation Assume all input is malicious. Use an "accept known good" inpu... |
7746 | quality-rule | Avoid LDAP injection vulnerabilities | Documentation english | Missing | Added | remediationSample = context = new InitialDirContext(env); //The code below constructs an LDAP query ... |
7746 | quality-rule | Avoid LDAP injection vulnerabilities | Documentation english | Missing | Added | sample = context = new InitialDirContext(env); String searchFilter = "StreetAddress=" + a... |
7748 | quality-rule | Avoid OS command injection vulnerabilities | Documentation english | description = Using CAST dataflow engine, this metric detects paths from user input methods do... | Updated | description = The software constructs all or part of an OS command using externally-influenced... |
7748 | quality-rule | Avoid OS command injection vulnerabilities | Documentation english | rationale = In web based applications, the validation of all user input is critical to avoid... | Updated | rationale = This could allow attackers to execute unexpected, dangerous commands directly on... |
7748 | quality-rule | Avoid OS command injection vulnerabilities | Documentation english | total = The number of methods calling user input methods | Updated | total = Number of methods calling user input methods |
7748 | quality-rule | Avoid OS command injection vulnerabilities | Documentation english | Missing | Added | remediation = To avoid the creation of Injection flaws, the Open Web Application Security Proj... |
7748 | quality-rule | Avoid OS command injection vulnerabilities | Documentation english | Missing | Added | remediationSample = Sample 1: public String coordinateTransformLatLonToUTM(String coordinates) { Str... |
7748 | quality-rule | Avoid OS command injection vulnerabilities | Documentation english | Missing | Added | sample = Sample 1: public String coordinateTransformLatLonToUTM(String coordinates) { Str... |
7750 | quality-rule | Avoid XPath injection vulnerabilities | Documentation english | description = Using CAST dataflow engine, this metric detects execution paths from user input ... | Updated | description = The software does not properly neutralize special elements that are used in XML,... |
7750 | quality-rule | Avoid XPath injection vulnerabilities | Documentation english | rationale = ... or arbitrary code execution." This rule ensures that the appropriate input val... | Updated | rationale = ... or arbitrary code execution." |
7750 | quality-rule | Avoid XPath injection vulnerabilities | Documentation english | total = The number of methods calling user input methods | Updated | total = Number of methods calling user input methods |
7750 | quality-rule | Avoid XPath injection vulnerabilities | Documentation english | Missing | Added | remediation = Use authorized sanitization methods. |
7752 | quality-rule | Avoid file path manipulation vulnerabilities | Documentation english | description = ...rating System injection flaws. The list of user input methods can be customiz... | Updated | description = ...rating System injection flaws. |
7752 | quality-rule | Avoid file path manipulation vulnerabilities | Documentation english | rationale = In web based applications, the validation of all user input is critical to avoid... | Updated | rationale = This could allow an attacker to access or modify system files or other files tha... |
7752 | quality-rule | Avoid file path manipulation vulnerabilities | Documentation english | remediation = Validate all the user inputs. | Updated | remediation = Validate all the user inputs. To avoid the creation of Injection flaws, the Ope... |
7752 | quality-rule | Avoid file path manipulation vulnerabilities | Documentation english | total = The number of methods calling user input methods | Updated | total = Number of methods calling user input methods |
7752 | quality-rule | Avoid file path manipulation vulnerabilities | Documentation english | Missing | Added | remediationSample = fis = new FileInputStream(cfg.getProperty("sub")+".txt"); //code a validate func... |
7752 | quality-rule | Avoid file path manipulation vulnerabilities | Documentation english | Missing | Added | sample = The following code uses input from a configuration file to determine which file ... |
7754 | quality-rule | Avoid using COMPUTE statement for elementary arithmetic operation | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7754 | quality-rule | Avoid using COMPUTE statement for elementary arithmetic operation | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
7756 | quality-rule | Avoid using READ statement without AT END clause or INVALID KEY clause | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7756 | quality-rule | Avoid using READ statement without AT END clause or INVALID KEY clause | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
7760 | quality-rule | Avoid triggers, functions and procedures with a very low comment/code ratio | Documentation english | Missing | Added | total = Number of SQL procedures, triggers |
7762 | quality-rule | Avoid undocumented Triggers, Functions and Procedures | Documentation english | Missing | Added | total = Number of SQL procedures, triggers |
7766 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Cyclomatic Complexity |
7768 | quality-rule | Avoid Artifacts with High Depth of Code | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Depth of Code |
7770 | quality-rule | Avoid Artifacts with too many parameters | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of parameters |
7770 | quality-rule | Avoid Artifacts with too many parameters | Documentation english | total = number of artifacts that have at least 1 parameter | Updated | total = Number of artifacts that have at least 1 parameter |
7772 | quality-rule | Avoid Artifacts with High Essential Complexity | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Essential Complexity |
7774 | quality-rule | Avoid Artifacts with High Integration Complexity | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Integration Complexity |
7774 | quality-rule | Avoid Artifacts with High Integration Complexity | Documentation english | Missing | Added | total = Number of non abstract artifacts |
7776 | quality-rule | Avoid Artifacts with High Fan-In | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Fan-In |
7778 | quality-rule | Avoid Artifacts with High Fan-Out | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Fan-Out |
7780 | quality-rule | Avoid Classes with a very low comment/code ratio | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Comment/code ratio |
7780 | quality-rule | Avoid Classes with a very low comment/code ratio | Documentation english | total = Total number of classes | Updated | total = Number of classes |
7782 | quality-rule | Avoid empty finally blocks | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7782 | quality-rule | Avoid empty finally blocks | Documentation english | total = This counts all Artifacts. | Updated | total = Number of artifacts |
7784 | quality-rule | Avoid Artifacts with lines longer than X characters | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of characters of the longest line |
7784 | quality-rule | Avoid Artifacts with lines longer than X characters | Documentation english | total = Total number of artifacts | Updated | total = Number of artifacts |
7788 | quality-rule | Avoid empty catch blocks | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of empty catch blocks |
7788 | quality-rule | Avoid empty catch blocks | Documentation english | total = This counts all artifacts. | Updated | total = Number of artifacts |
7790 | quality-rule | Avoid Cursors inside a loop | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7790 | quality-rule | Avoid Cursors inside a loop | Documentation english | total = The total procedure counts Artifacts that can contain cursors (all SQL Artifacts... | Updated | total = Number of artifacts that can contain cursors (all SQL Artifacts except tables an... |
7792 | quality-rule | Avoid Classes with a High Number Of Children | Documentation english | Missing | Added | total = Number of classes |
7794 | quality-rule | Avoid Classes with a High Public Data Ratio | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Public Data Ratio |
7794 | quality-rule | Avoid Classes with a High Public Data Ratio | Documentation english | Missing | Added | total = Number of classes |
7796 | quality-rule | Avoid Classes with a High Lack of Cohesion - variant | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Lack of Cohesion in Methods |
7798 | quality-rule | Avoid Classes with a High Lack of Cohesion | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Lack of Cohesion in Methods |
7800 | quality-rule | Avoid Classes with High Coupling Between Objects | Documentation english | Missing | Added | total = Number of classes |
7802 | quality-rule | Avoid Classes with a High Depth of Inheritance Tree | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Depth of Inheritance Tree |
7802 | quality-rule | Avoid Classes with a High Depth of Inheritance Tree | Documentation english | reference = http://it-cisq.org/ CISQ : ASCMM-MNT-17 A Metrics Suite for Object Oriented Des... | Updated | reference = https://it-cisq.org/ CISQ : ASCMM-MNT-17 A Metrics Suite for Object Oriented De... |
7802 | quality-rule | Avoid Classes with a High Depth of Inheritance Tree | Documentation english | total = number of classes and interfaces | Updated | total = Number of classes and interfaces |
7804 | quality-rule | Avoid Classes with High Weighted Methods per Class | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Weighted Methods per Class |
7804 | quality-rule | Avoid Classes with High Weighted Methods per Class | Documentation english | Missing | Added | total = Number of classes |
7806 | quality-rule | Avoid Artifacts with Group By | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of Group by |
7808 | quality-rule | Avoid Artifacts with SQL statement including subqueries | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of Subqueries |
7808 | quality-rule | Avoid Artifacts with SQL statement including subqueries | Documentation english | Missing | Added | total = Number of artifacts accessing SQL objects |
7810 | quality-rule | Avoid Artifacts with a Complex SELECT Clause | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7810 | quality-rule | Avoid Artifacts with a Complex SELECT Clause | Diagnosis | diagnosisValueType = integer | Updated | diagnosisValueType = no-value |
7812 | quality-rule | Class naming convention - case and character set control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7812 | quality-rule | Class naming convention - case and character set control | Documentation english | Missing | Added | total = Number of classes |
7814 | quality-rule | Avoid Tables not using referential integrity | Documentation english | total = total is number of tables | Updated | total = Number of tables |
7816 | quality-rule | Avoid using GOTO statement | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of GOTO statements |
7816 | quality-rule | Avoid using GOTO statement | Documentation english | Missing | Added | total = Number of objects with code or contains DDL or client artifacts |
7818 | quality-rule | Avoid Functions having a very low Comment/Code ratio | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Comment/code ratio |
7818 | quality-rule | Avoid Functions having a very low Comment/Code ratio | Documentation english | Missing | Added | total = Number of Inventory Functions |
7820 | quality-rule | Never use SQL queries with a cartesian product | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7820 | quality-rule | Never use SQL queries with a cartesian product | Documentation english | total = The total procedure counts the number of Artifacts using Tables. | Updated | total = Number of artifacts using Tables |
7822 | quality-rule | Avoid Artifacts with queries on more than 4 Tables | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7824 | quality-rule | The exception Exception should never been thrown. Always Subclass Exception and throw the subclassed Classes. | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7824 | quality-rule | The exception Exception should never been thrown. Always Subclass Exception and throw the subclassed Classes. | Documentation english | total = This counts all Artifacts. | Updated | total = Number of artifacts |
7826 | quality-rule | Forms naming convention - prefix control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7826 | quality-rule | Forms naming convention - prefix control | Documentation english | total = Total number of Forms. | Updated | total = Number of forms |
7828 | quality-rule | Avoid Artifacts with High RAW SQL Complexity | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Raw complexity |
7830 | quality-rule | Avoid unreferenced Interfaces | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7830 | quality-rule | Avoid unreferenced Interfaces | Documentation english | total = Total number of interfaces | Updated | total = Number of interfaces |
7832 | quality-rule | Avoid unreferenced Classes | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7834 | quality-rule | Avoid undocumented Interfaces | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7836 | quality-rule | Avoid undocumented Functions | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7838 | quality-rule | Avoid undocumented Methods | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7840 | quality-rule | Trigger naming convention - prefix control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7840 | quality-rule | Trigger naming convention - prefix control | Documentation english | Missing | Added | total = Number of Triggers |
7842 | quality-rule | Avoid large Artifacts - too many Lines of Code | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of lines of code |
7844 | quality-rule | Avoid undocumented Classes | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7846 | quality-rule | Avoid Methods with a very low comment/code ratio | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Comment/code ratio |
7848 | quality-rule | Interface naming convention - prefix | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7850 | quality-rule | Avoid raising an exception in a Web Dynpro Supply Function or in a Method called by a Supply Function | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7852 | quality-rule | Database view naming convention - prefix control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7854 | quality-rule | Database table naming convention - prefix control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7856 | quality-rule | Avoid Tables with more than 20 columns on an OLTP system | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of columns |
7856 | quality-rule | Avoid Tables with more than 20 columns on an OLTP system | Documentation english | Missing | Added | total = Number of DB tables |
7858 | quality-rule | Avoid passing parameter by value | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7858 | quality-rule | Avoid passing parameter by value | Documentation english | output = ...violation patterns | Updated | output = ...violation occurrences |
7860 | quality-rule | Avoid unreferenced Functions | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7862 | quality-rule | Avoid catching an exception of type Exception, RuntimeException, or Throwable | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7862 | quality-rule | Avoid catching an exception of type Exception, RuntimeException, or Throwable | Documentation english | total = This rule counts all Methods. | Updated | total = Number of methods |
7866 | quality-rule | Avoid SELECT ... BYPASSING BUFFER | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7866 | quality-rule | Avoid SELECT ... BYPASSING BUFFER | Documentation english | output = ...violation patterns | Updated | output = ...violation occurrences |
7868 | quality-rule | Avoid Open SQL queries in loops | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7868 | quality-rule | Avoid Open SQL queries in loops | Documentation english | output = ...violation patterns | Updated | output = ...violation occurrences |
7870 | quality-rule | Avoid using the NOT LIKE operator in WHERE clauses | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7870 | quality-rule | Avoid using the NOT LIKE operator in WHERE clauses | Documentation english | output = ...violation patterns | Updated | output = ...violation occurrences |
7872 | quality-rule | Avoid using IS [NOT] NULL in WHERE condition | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7872 | quality-rule | Avoid using IS [NOT] NULL in WHERE condition | Documentation english | output = ...violation patterns | Updated | output = ...violation occurrences |
7874 | quality-rule | Avoid using dynamic queries | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7874 | quality-rule | Avoid using dynamic queries | Documentation english | output = ...violation patterns | Updated | output = ...violation occurrences |
7876 | quality-rule | Avoid using SELECT ... FOR UPDATE | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7876 | quality-rule | Avoid using SELECT ... FOR UPDATE | Documentation english | output = ...violation patterns | Updated | output = ...violation occurrences |
7878 | quality-rule | Avoid Open SQL SELECT queries without WHERE condition | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7878 | quality-rule | Avoid Open SQL SELECT queries without WHERE condition | Documentation english | output = ...violation patterns | Updated | output = ...violation occurrences |
7880 | quality-rule | Avoid nested loops | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7880 | quality-rule | Avoid nested loops | Documentation english | output = ...violation patterns | Updated | output = ...violation occurrences |
7882 | quality-rule | Avoid using Native SQL | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7882 | quality-rule | Avoid using Native SQL | Documentation english | output = ...violation patterns | Updated | output = ...violation occurrences |
7884 | quality-rule | Avoid disabling source code inspection | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7884 | quality-rule | Avoid disabling source code inspection | Documentation english | output = ...violation patterns | Updated | output = ...violation occurrences |
7886 | quality-rule | Avoid using SYSTEM-CALL | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7886 | quality-rule | Avoid using SYSTEM-CALL | Documentation english | output = ...violation patterns | Updated | output = ...violation occurrences |
7888 | quality-rule | Web Dynpro - Never use direct calls to routine via "me->", use "wd_This->" instead | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7888 | quality-rule | Web Dynpro - Never use direct calls to routine via "me->", use "wd_This->" instead | Documentation english | output = ...violation patterns | Updated | output = ...violation occurrences |
7890 | quality-rule | Web Dynpro - Never use INCLUDE statement | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7890 | quality-rule | Web Dynpro - Never use INCLUDE statement | Documentation english | output = ...violation patterns | Updated | output = ...violation occurrences |
7892 | quality-rule | Web Dynpro - Avoid changing the program flow | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7892 | quality-rule | Web Dynpro - Avoid changing the program flow | Documentation english | output = ...violation patterns | Updated | output = ...violation occurrences |
7894 | quality-rule | Avoid using LOOP INTO, use LOOP ASSIGNING instead | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7894 | quality-rule | Avoid using LOOP INTO, use LOOP ASSIGNING instead | Documentation english | output = ...violation patterns | Updated | output = ...violation occurrences |
7898 | quality-rule | SQL Function naming convention - prefix control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7900 | quality-rule | Stored Procedure naming convention - prefix control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7900 | quality-rule | Stored Procedure naming convention - prefix control | Documentation english | Missing | Added | total = Number of database Procedures |
7902 | quality-rule | Avoid SQL queries that no index can support | Documentation english | reference = http://it-cisq.org/ CISQ: ASCPEM-PRF-05 Enhancing the Quality of ABAP Developme... | Updated | reference = https://it-cisq.org/ CISQ: ASCPEM-PRF-05 Enhancing the Quality of ABAP Developm... |
7904 | quality-rule | Avoid SQL queries on XXL tables that no index can support | Documentation english | total = The total procedure counts the number of SQL Artifacts using XXL Tables or views... | Updated | total = Number of SQL artifacts using XXL Tables or views based on XXL tables |
7906 | quality-rule | Avoid testing specific values for SY-UNAME | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7906 | quality-rule | Avoid testing specific values for SY-UNAME | Documentation english | output = ...violation patterns | Updated | output = ...violation occurrences |
7908 | quality-rule | Avoid unreferenced Methods | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7910 | quality-rule | Never exit a finally block with a return, break, continue, or throw | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7910 | quality-rule | Never exit a finally block with a return, break, continue, or throw | Documentation english | total = All methods that have a finally block | Updated | total = Number of methods that have a finally block |
7912 | quality-rule | Avoid unreferenced Data Members | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7914 | quality-rule | Avoid direct access to Database Tables | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Accessed Table |
7914 | quality-rule | Avoid direct access to Database Tables | Documentation english | reference = http://it-cisq.org/ CISQ rule: ASCPEM-PRF-9. | Updated | reference = https://it-cisq.org/ CISQ rule: ASCPEM-PRF-9. |
7916 | quality-rule | Avoid direct use of Database objects (JSP/ASP) | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Database object |
7916 | quality-rule | Avoid direct use of Database objects (JSP/ASP) | Documentation english | Missing | Added | total = Number of ASP pages |
7918 | quality-rule | Exceptions naming convention -suffix control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7920 | quality-rule | Exceptions naming convention - case and character set control | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7922 | quality-rule | Avoid usage of 'std::find_first_of' | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7922 | quality-rule | Avoid usage of 'std::find_first_of' | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
7924 | quality-rule | Avoid defining Functions with 'struct' or 'class' parameters passed by value | Documentation english | output = ...violation patterns found in the source code: - function or method | Updated | output = ...violation occurrences found in the source code: - function or method |
7926 | quality-rule | Abstract Classes should be non copy-assignable | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7926 | quality-rule | Abstract Classes should be non copy-assignable | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
7928 | quality-rule | Avoid using static_cast on class/struct pointers | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7928 | quality-rule | Avoid using static_cast on class/struct pointers | Documentation english | output = ...violation patterns | Updated | output = ...violation occurrences |
7930 | quality-rule | Avoid redeclaring and overriding Methods with different default parameter values | Documentation english | output = ...violation patterns found in the source code: - Overridden method | Updated | output = ...violation occurrences found in the source code: - Overridden method |
7932 | quality-rule | Avoid Constructors not supplying an initial value for all non-static data members | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7932 | quality-rule | Avoid Constructors not supplying an initial value for all non-static data members | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
7934 | quality-rule | Avoid Superclass (or Interface) knowing Subclass (or Interface) | Documentation english | reference = http://it-cisq.org/ CISQ rule: ASCRM-RLB-14. | Updated | reference = https://it-cisq.org/ CISQ rule: ASCRM-RLB-14. |
7934 | quality-rule | Avoid Superclass (or Interface) knowing Subclass (or Interface) | Documentation english | total = The number of classes and interfaces | Updated | total = Number of classes and interfaces |
7936 | quality-rule | Avoid using finalize() | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7936 | quality-rule | Avoid using finalize() | Documentation english | total = number of classes | Updated | total = Number of classes |
7938 | quality-rule | Override all overloads of a base Class virtual Method | Documentation english | output = ...violation patterns found in the source code: - Parent class method which must ... | Updated | output = ...violation occurrences found in the source code: - Parent class method which mu... |
7940 | quality-rule | Avoid Stateful Beans not removed | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7940 | quality-rule | Avoid Stateful Beans not removed | Documentation english | total = classes that define a variable whose type is a remote or local business interfac... | Updated | total = Number of classes that define a variable whose type is a remote or local busines... |
7942 | quality-rule | Avoid EJBs using 'synchronized' qualifier, 'wait', 'notify' and 'notifyAll' Methods | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7942 | quality-rule | Avoid EJBs using 'synchronized' qualifier, 'wait', 'notify' and 'notifyAll' Methods | Documentation english | total = the number of EJB artifacts | Updated | total = Number of EJB artifacts |
7944 | quality-rule | Avoid High Response for Classes | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Response For Class |
7944 | quality-rule | Avoid High Response for Classes | Documentation english | Missing | Added | total = Number of classes |
7948 | quality-rule | Do not mix Ansi joins syntax with Oracle proprietary joins syntax in the same query | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
7950 | quality-rule | Avoid definition of synonym as PUBLIC in PL/SQL context | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7950 | quality-rule | Avoid definition of synonym as PUBLIC in PL/SQL context | Documentation english | total = The total procedure counts the number of synonyms that is part of the analyzed s... | Updated | total = Number of synonyms that is part of the analyzed source code |
7950 | quality-rule | Avoid definition of synonym as PUBLIC in PL/SQL context | Diagnosis | diagnosisValueType = integer | Updated | diagnosisValueType = no-value |
7952 | quality-rule | Avoid synonym with both private & PUBLIC Definition in PL/SQL context | Documentation english | total = The total procedure counts the number of synonyms that are part of the analyzed ... | Updated | total = Number of synonyms that are part of the analyzed source code |
7952 | quality-rule | Avoid synonym with both private & PUBLIC Definition in PL/SQL context | Diagnosis | diagnosisValueType = integer | Updated | diagnosisValueType = no-value |
7954 | quality-rule | Avoid indirect String concatenation inside loops | Documentation english | total = All methods calling at least one method inside a loop | Updated | total = Number of methods calling at least one method inside a loop |
7956 | quality-rule | Avoid indirect exception handling inside loops | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7958 | quality-rule | Avoid orphaned synonyms in PL/SQL context | Documentation english | associatedValueName = Associated Value | Removed | Missing |
7958 | quality-rule | Avoid orphaned synonyms in PL/SQL context | Documentation english | total = The total procedure counts the number of synonyms that is part of the analyzed s... | Updated | total = Number of synonyms that is part of the analyzed source code |
7958 | quality-rule | Avoid orphaned synonyms in PL/SQL context | Diagnosis | diagnosisValueType = integer | Updated | diagnosisValueType = no-value |
7960 | quality-rule | Avoid looping chain of synonyms in PL/SQL context | Documentation english | total = The total procedure counts the number of synonyms that is part of the analyzed s... | Updated | total = Number of synonyms that is part of the analyzed source code |
7962 | quality-rule | Avoid direct or indirect remote calls inside a loop | Documentation english | total = All methods calling at least one method inside a loop | Updated | total = Number of methods calling at least one method inside a loop |
7964 | quality-rule | Avoid directly instantiating a Class used as a managed bean | Documentation english | total = The number of methods or jsp files that reference a managed bean java interface | Updated | total = Number of methods or jsp files that reference a managed bean java interface |
7966 | quality-rule | Avoid includes in Header Files | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = File included by header file |
7966 | quality-rule | Avoid includes in Header Files | Documentation english | Missing | Added | total = Number of C/C++ included files |
7968 | quality-rule | Never use strcat() function (C/C++) | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7968 | quality-rule | Never use strcat() function (C/C++) | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
7970 | quality-rule | Never use strcpy() function (C/C++) | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7970 | quality-rule | Never use strcpy() function (C/C++) | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
7974 | quality-rule | Never use scanf() function | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7974 | quality-rule | Never use scanf() function | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
7976 | quality-rule | Never use gets() function | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7976 | quality-rule | Never use gets() function | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
7978 | quality-rule | Avoid using the scanf() function family | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7978 | quality-rule | Avoid using the scanf() function family | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
7980 | quality-rule | Avoid using strtrns() function | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7980 | quality-rule | Avoid using strtrns() function | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
7982 | quality-rule | Avoid using strlen() function family | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7982 | quality-rule | Avoid using strlen() function family | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
7984 | quality-rule | Avoid using strecpy() function | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7984 | quality-rule | Avoid using strecpy() function | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
7986 | quality-rule | Avoid using streadd() function | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7986 | quality-rule | Avoid using streadd() function | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
7988 | quality-rule | Avoid using snprintf() function family | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7988 | quality-rule | Avoid using snprintf() function family | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
7990 | quality-rule | Avoid using realpath() function | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7990 | quality-rule | Avoid using realpath() function | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
7992 | quality-rule | Avoid using getpass() function | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7992 | quality-rule | Avoid using getpass() function | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
7994 | quality-rule | Avoid using getopt() function | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7994 | quality-rule | Avoid using getopt() function | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
7996 | quality-rule | Provide a private default Constructor for utility Classes or use free Functions in a Namespace | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7996 | quality-rule | Provide a private default Constructor for utility Classes or use free Functions in a Namespace | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
7998 | quality-rule | Avoid local variables that are not initialized at declaration time | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
7998 | quality-rule | Avoid local variables that are not initialized at declaration time | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
8000 | quality-rule | Avoid 'catch-all' statement | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8000 | quality-rule | Avoid 'catch-all' statement | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
8002 | quality-rule | Never perform C-style cast between incompatible Class pointers | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8002 | quality-rule | Never perform C-style cast between incompatible Class pointers | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
8004 | quality-rule | Avoid using 'delete this' | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8004 | quality-rule | Avoid using 'delete this' | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
8006 | quality-rule | Avoid Classes with a copy Constructor and the default Destructor or assignment operator | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8006 | quality-rule | Avoid Classes with a copy Constructor and the default Destructor or assignment operator | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
8008 | quality-rule | Avoid data members that are never read | Documentation english | associatedValueName = Associated Value | Removed | Missing |
8008 | quality-rule | Avoid data members that are never read | Documentation english | total = All data members of classes or structs | Updated | total = Number of data members of classes or structs |
8010 | quality-rule | Do not overload the ampersand, comma, logical AND or logical OR operators | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
8010 | quality-rule | Do not overload the ampersand, comma, logical AND or logical OR operators | Documentation english | output = ...violation patterns found in the source code: - Operator | Updated | output = ...violation occurrences found in the source code: - Operator |
8012 | quality-rule | Avoid unchecked return code (SY-SUBRC) after opening and reading dataset | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8012 | quality-rule | Avoid unchecked return code (SY-SUBRC) after opening and reading dataset | Documentation english | output = ...violation patterns | Updated | output = ...violation occurrences |
8014 | quality-rule | Avoid unchecked return code (SY-SUBRC) after AUTHORITY-CHECK | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8014 | quality-rule | Avoid unchecked return code (SY-SUBRC) after AUTHORITY-CHECK | Documentation english | output = ...violation patterns | Updated | output = ...violation occurrences |
8016 | quality-rule | Avoid unsecured EJB remote method | Documentation english | associatedValueName = Associated Value | Removed | Missing |
8016 | quality-rule | Avoid unsecured EJB remote method | Documentation english | total = The number of EJB remote methods (i.e methods of the remote interface and its pa... | Updated | total = Number of EJB remote methods (i.e methods of the remote interface and its parent... |
8024 | quality-rule | Avoid Classes with a non-empty Destructor and the default assignment operator or copy Constructor | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8024 | quality-rule | Avoid Classes with a non-empty Destructor and the default assignment operator or copy Constructor | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
8026 | quality-rule | Avoid Classes with an assignment operator and the default Destructor or copy constructor | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8026 | quality-rule | Avoid Classes with an assignment operator and the default Destructor or copy constructor | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
8030 | quality-rule | Check alphanumeric data before moving it into numeric data | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8030 | quality-rule | Check alphanumeric data before moving it into numeric data | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
8032 | quality-rule | Avoid using a break statement in 'for' loops | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8032 | quality-rule | Avoid using a break statement in 'for' loops | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
8034 | quality-rule | Variables defined in Working-Storage section must be initialized before to be read | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8034 | quality-rule | Variables defined in Working-Storage section must be initialized before to be read | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
8038 | quality-rule | Avoid Struts 2 Validator field not referencing a java class field | Documentation english | associatedValueName = Associated Value | Removed | Missing |
8038 | quality-rule | Avoid Struts 2 Validator field not referencing a java class field | Documentation english | total = total of Validator Form Field | Updated | total = Number of Validator Form Fields |
8040 | quality-rule | Avoid Struts 2 Action Fields without Validation | Documentation english | associatedValueName = Associated Value | Removed | Missing |
8040 | quality-rule | Avoid Struts 2 Action Fields without Validation | Documentation english | reference = http://www.owasp.org/index.php/2004_Updates_OWASP_Top_Ten_Project | Updated | reference = https://www.owasp.org/index.php/Improper_Data_Validation#Struts:_Erroneous_valid... |
8040 | quality-rule | Avoid Struts 2 Action Fields without Validation | Documentation english | total = The number of all action class (and parent) fields | Updated | total = Number of actions class (and parent) fields |
8042 | quality-rule | Struts 2 Validation: Avoid unused validation form | Documentation english | associatedValueName = Associated Value | Removed | Missing |
8042 | quality-rule | Struts 2 Validation: Avoid unused validation form | Documentation english | total = total of validation form file | Updated | total = Number of validation form files |
8044 | quality-rule | Avoid Log forging vulnerabilities | Documentation english | description = ...ior validation & sanitization. The list of user input methods, Log writing and ... | Updated | description = ...ior validation & sanitization. |
8044 | quality-rule | Avoid Log forging vulnerabilities | Documentation english | remediation = Code the appropriate input validation as close as possible to the user input cal... | Updated | remediation = Use authorized sanitization methods. |
8044 | quality-rule | Avoid Log forging vulnerabilities | Documentation english | total = The number of methods calling user input methods | Updated | total = Number of methods calling user input methods |
8044 | quality-rule | Avoid Log forging vulnerabilities | Documentation english | Missing | Added | remediationSample = String val = request.getParameter("value"); try { int value = Integer.parseI... |
8044 | quality-rule | Avoid Log forging vulnerabilities | Documentation english | Missing | Added | sample = String val = request.getParameter("value"); try { int value = Integer.parseI... |
8046 | quality-rule | Do not return non-const handles to Class data from const member Functions | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
8046 | quality-rule | Do not return non-const handles to Class data from const member Functions | Documentation english | output = ...violation patterns found in the source code: - non-const class data return | Updated | output = ...violation occurrences found in the source code: - non-const class data return |
8048 | quality-rule | Invoke 'delete' with the same form as the matching 'new' | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8048 | quality-rule | Invoke 'delete' with the same form as the matching 'new' | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
8050 | quality-rule | Do not hide declarations in other scopes | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8050 | quality-rule | Do not hide declarations in other scopes | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
8052 | quality-rule | Avoid setting a pointer to the address of a local variable defined in a lower scope | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8052 | quality-rule | Avoid setting a pointer to the address of a local variable defined in a lower scope | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
8054 | quality-rule | Avoid calling blocking functions with an infinite timeout | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8054 | quality-rule | Avoid calling blocking functions with an infinite timeout | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
8056 | quality-rule | Method override fails due to mismatch of const/volatile qualifiers | Documentation english | output = ...violation patterns found in source code: - overridden method - overriding me... | Updated | output = ...violation occurrences found in source code: - overridden method - overriding... |
8058 | quality-rule | A pointer to a derived Class shall only be cast implicitly to a pointer to base Class | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8058 | quality-rule | A pointer to a derived Class shall only be cast implicitly to a pointer to base Class | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
8060 | quality-rule | A pointer to a base Class shall only be cast to a pointer to a derived Class by means of 'dynamic_cast' | Documentation english | output = ...violation patterns found in source code: - pointer cast - source class - t... | Updated | output = ...violation occurrences found in source code: - pointer cast - source class ... |
8062 | quality-rule | An unconditional 'throw', 'return' or 'break' shall terminate every non-empty switch-clause | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8062 | quality-rule | An unconditional 'throw', 'return' or 'break' shall terminate every non-empty switch-clause | Documentation english | output = ...violation patterns found in source code: - case clause | Updated | output = ...violation occurrences found in source code: - case clause |
8064 | quality-rule | Assignment operator should assign all non-static members of the target object | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
8064 | quality-rule | Assignment operator should assign all non-static members of the target object | Documentation english | output = ...violation patterns found in source code: - assignment operator - missing sta... | Updated | output = ...violation occurrences found in source code: - assignment operator - missing ... |
8066 | quality-rule | Avoid using 'using namespace' or 'using' declarations in header files | Documentation english | output = ...violation patterns found in source code: - "Using namespace" statement | Updated | output = ...violation occurrences found in source code: - "Using namespace" statement |
8068 | quality-rule | Do not return a dereferenced pointer allocated inside the function | Documentation english | output = ...violation patterns found in source code: - pointer dynamic allocation | Updated | output = ...violation occurrences found in source code: - pointer dynamic allocation |
8070 | quality-rule | Do not alter a control variable in the body of a 'for' statement | Documentation english | output = ...violation patterns found in source code: - control variable alteration | Updated | output = ...violation occurrences found in source code: - control variable alteration |
8072 | quality-rule | Never define collection of 'std::auto_ptr' | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8072 | quality-rule | Never define collection of 'std::auto_ptr' | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
8074 | quality-rule | Avoid using 'class' or 'struct' parameters with variadic Functions | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8074 | quality-rule | Avoid using 'class' or 'struct' parameters with variadic Functions | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
8076 | quality-rule | Avoid using 'new[]', prefer 'std::vector' or 'std::array' | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8076 | quality-rule | Avoid using 'new[]', prefer 'std::vector' or 'std::array' | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in source code: - ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in source code... |
8078 | quality-rule | Casting from pointer to base Class to pointer to derived Class should be done through 'dynamic_cast' or 'static_cast' | Documentation english | output = ...violation patterns found in source code: - pointer cast - source class - t... | Updated | output = ...violation occurrences found in source code: - pointer cast - source class ... |
8082 | quality-rule | Avoid Tables without Primary Key | Documentation english | associatedValueName = Associated Value | Removed | Missing |
8082 | quality-rule | Avoid Tables without Primary Key | Documentation english | total = Tables and materialized views of the scoped container (schema or database depend... | Updated | total = Number of tables and materialized views of the scoped container (schema or datab... |
8086 | quality-rule | Avoid types that own disposable fields and are not disposable | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
8088 | quality-rule | Avoid override artifacts not having link demands identical to base | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
8090 | quality-rule | Avoid using NaN to test the result of an expression | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
8092 | quality-rule | Avoid Objects having exposed pointers allowed to access unmanaged memory | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
8094 | quality-rule | Avoid locking of Objects with weak identities | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
8096 | quality-rule | Avoid testing floating point numbers for equality | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
8096 | quality-rule | Avoid testing floating point numbers for equality | Documentation english | total = All artifacts that reference a float | Updated | total = Number of artifacts that reference a float |
8098 | quality-rule | Avoid uncontrolled format string | Documentation english | description = ...controlled format string flaw. The list of user input methods can be customized... | Updated | description = ...controlled format string flaw. |
8098 | quality-rule | Avoid uncontrolled format string | Documentation english | total = The number of methods calling user input methods | Updated | total = Number of methods calling user input methods |
8098 | quality-rule | Avoid uncontrolled format string | Documentation english | Missing | Added | remediation = Use authorized sanitization methods. |
8098 | quality-rule | Avoid uncontrolled format string | Documentation english | Missing | Added | remediationSample = Review all inputs. Don't use inputs in formatters. |
8100 | quality-rule | Blocking synchronous calls should have associated timeouts | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
8102 | quality-rule | Avoid hardcoded network resource names (JEE) | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
8106 | quality-rule | Avoid empty IF-ENDIF blocks | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
8108 | quality-rule | Close the outermost stream ASAP | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
8108 | quality-rule | Close the outermost stream ASAP | Documentation english | reference = http://it-cisq.org/ CISQ: ASCSM-CWE-772, ASCRM-CWE-772 CWE: CWE-772 | Updated | reference = https://it-cisq.org/ CISQ: ASCSM-CWE-772, ASCRM-CWE-772 CWE: CWE-772 |
8108 | quality-rule | Close the outermost stream ASAP | Documentation english | total = All the methods that open a stream in the body | Updated | total = Number of methods that open a stream in the body |
8110 | quality-rule | Use dedicated stored procedures when multiple data accesses are needed (ASCPEM-PRF-10) | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8110 | quality-rule | Use dedicated stored procedures when multiple data accesses are needed (ASCPEM-PRF-10) | Documentation english | output = ...violation patterns found in source code: - SQL access | Updated | output = ...violation occurrences found in source code: - SQL access |
8110 | quality-rule | Use dedicated stored procedures when multiple data accesses are needed (ASCPEM-PRF-10) | Documentation english | reference = http://it-cisq.org/ ASCPEM 1.0, Automated Source Code Performance Efficiency Mea... | Updated | reference = https://it-cisq.org/ ASCPEM 1.0, Automated Source Code Performance Efficiency Me... |
8112 | quality-rule | Avoid improper processing of the execution status of data handling operations | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8112 | quality-rule | Avoid improper processing of the execution status of data handling operations | Documentation english | output = ...violation patterns found in source code: - SQL access | Updated | output = ...violation occurrences found in source code: - SQL access |
8114 | quality-rule | Avoid numerical data corruption during incompatible mutation (ABAP) | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8114 | quality-rule | Avoid numerical data corruption during incompatible mutation (ABAP) | Documentation english | output = ...violation patterns found in source code: - Type cast operation | Updated | output = ...violation occurrences found in source code: - Type cast operation |
8116 | quality-rule | Avoid calling system function (CALL 'cfunc') | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8116 | quality-rule | Avoid calling system function (CALL 'cfunc') | Documentation english | output = ...violation patterns found in source code: - CALL 'cfunc' | Updated | output = ...violation occurrences found in source code: - CALL 'cfunc' |
8118 | quality-rule | Avoid using the RFC_ABAP_INSTALL_AND_RUN function | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8118 | quality-rule | Avoid using the RFC_ABAP_INSTALL_AND_RUN function | Documentation english | output = ...violation patterns found in source code: - CALL FUNCTION "RFC_ABAP_INSTALL_AN... | Updated | output = ...violation occurrences found in source code: - CALL FUNCTION "RFC_ABAP_INSTALL... |
8120 | quality-rule | Avoid using CALL FUNCTION without error handling | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8120 | quality-rule | Avoid using CALL FUNCTION without error handling | Documentation english | output = ...violation patterns found in source code: - CALL FUNCTION without error handli... | Updated | output = ...violation occurrences found in source code: - CALL FUNCTION without error han... |
8122 | quality-rule | Avoid using CALL METHOD without error handling | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8122 | quality-rule | Avoid using CALL METHOD without error handling | Documentation english | output = ...violation patterns found in source code: - CALL METHOD without error handling | Updated | output = ...violation occurrences found in source code: - CALL METHOD without error handl... |
8124 | quality-rule | Do not use function module DB_EXISTS_INDEX (HANA) | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8124 | quality-rule | Do not use function module DB_EXISTS_INDEX (HANA) | Documentation english | output = ...violation patterns found in source code: - CALL FUNCTION "DB_EXISTS_INDEX" | Updated | output = ...violation occurrences found in source code: - CALL FUNCTION "DB_EXISTS_INDEX" |
8126 | quality-rule | Avoid using empty SELECT ... ENDSELECT loop | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8126 | quality-rule | Avoid using empty SELECT ... ENDSELECT loop | Documentation english | output = ...violation patterns found in source code | Updated | output = ...violation occurrences found in source code |
8128 | quality-rule | Avoid using UPDATE and DELETE without WHERE condition | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8128 | quality-rule | Avoid using UPDATE and DELETE without WHERE condition | Documentation english | output = ...violation patterns found in source code | Updated | output = ...violation occurrences found in source code |
8130 | quality-rule | Avoid using database hints | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8130 | quality-rule | Avoid using database hints | Documentation english | output = ...violation patterns found in source code | Updated | output = ...violation occurrences found in source code |
8132 | quality-rule | Avoid using CHECK, EXIT,or RETURN in SELECT ... ENDSELECT loops | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8132 | quality-rule | Avoid using CHECK, EXIT,or RETURN in SELECT ... ENDSELECT loops | Documentation english | output = ...violation patterns found in source code | Updated | output = ...violation occurrences found in source code |
8134 | quality-rule | Avoid unsorted data after SELECT queries | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8134 | quality-rule | Avoid unsorted data after SELECT queries | Documentation english | output = ...violation patterns found in source code | Updated | output = ...violation occurrences found in source code |
8136 | quality-rule | Beans with normal scope must be proxyable to avoid runtime errors | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8140 | quality-rule | Subscripts and iterators must be defined with BINARY usage | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8140 | quality-rule | Subscripts and iterators must be defined with BINARY usage | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code: ... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source ... |
8142 | quality-rule | Prefer using indexes instead of subscripts | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8142 | quality-rule | Prefer using indexes instead of subscripts | Documentation english | output = ...violation patterns found in source code: - Access done using a subscript - Int... | Updated | output = ...violation occurrences found in source code: - Access done using a subscript - ... |
8144 | quality-rule | Avoid using INITIALIZE statement on data structures | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8144 | quality-rule | Avoid using INITIALIZE statement on data structures | Documentation english | output = ...violation patterns found in source code: - INITIALIZE statement | Updated | output = ...violation occurrences found in source code: - INITIALIZE statement |
8146 | quality-rule | Avoid calling programs statically | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8146 | quality-rule | Avoid calling programs statically | Documentation english | output = ...violation patterns - Bookmarks for violation patterns found in the source code:... | Updated | output = ...violation occurrences - Bookmarks for violation occurrences found in the source... |
8148 | quality-rule | Avoid artifacts having Incorrect Type Conversion or Cast | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
8148 | quality-rule | Avoid artifacts having Incorrect Type Conversion or Cast | Documentation english | total = All methods | Updated | total = Number of methods |
8150 | quality-rule | Avoid using Parse for primitive types and used instead TryParse | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
8150 | quality-rule | Avoid using Parse for primitive types and used instead TryParse | Documentation english | total = The total procedure counts the number artifacts Parse methods within a try catch... | Updated | total = Number of artifacts Parse methods within a try catch block |
8152 | quality-rule | Avoid having transaction with the Thread.Sleep method in a loop | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
8152 | quality-rule | Avoid having transaction with the Thread.Sleep method in a loop | Documentation english | total = The rule counts the number of artifacts. | Updated | total = Number of artifacts |
8154 | quality-rule | Avoid using GC.Collect() | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
8154 | quality-rule | Avoid using GC.Collect() | Documentation english | total = All the artifacts using GC.Collect() | Updated | total = Number of artifacts using GC.Collect() |
8156 | quality-rule | Persistent classes should implement GetHashCode() and Equals() | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
8156 | quality-rule | Persistent classes should implement GetHashCode() and Equals() | Documentation english | total = The number of persistent classes | Updated | total = Number of persistent classes |
8158 | quality-rule | Runtime Resource Management Control Element in a Component Built to Run on Application Servers | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
8158 | quality-rule | Runtime Resource Management Control Element in a Component Built to Run on Application Servers | Documentation english | total = The number of artifacts | Updated | total = Number of artifacts |
8160 | quality-rule | Check PCB status code after DLI queries | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8160 | quality-rule | Check PCB status code after DLI queries | Documentation english | output = ...violation patterns found in source code: - CBLTDLI call - Data structure assoc... | Updated | output = ...violation occurrences found in source code: - CBLTDLI call - Data structure as... |
8162 | quality-rule | CICS return code should be checked | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8162 | quality-rule | CICS return code should be checked | Documentation english | output = ...violation patterns found in source code: - CICS macro | Updated | output = ...violation occurrences found in source code: - CICS macro |
8216 | quality-rule | CWE-681: Avoid numerical data corruption during incompatible mutation | Diagnosis | diagnosisValueType = no-value | Updated | diagnosisValueType = integer |
8218 | quality-rule | Content type should be checked when receiving a HTTP Post | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
8220 | quality-rule | Avoid using deprecated method, constructor, field, type or package | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
8222 | quality-rule | Avoid hardcoded credentials | Documentation english | description = This Quality Rule uses the CAST AIP dataflow engine to detect a call path where ... | Updated | description = This rule will detect a call path where a hardcoded credential is sent to a meth... |
8222 | quality-rule | Avoid hardcoded credentials | Documentation english | name = Use of hard-coded credentials | Updated | name = Avoid hardcoded credentials |
8222 | quality-rule | Avoid hardcoded credentials | Documentation english | total = The number of methods containing credential parameter(s). | Updated | total = Number of methods containing credential parameter(s) |
8236 | quality-rule | Avoid using hard-coded values | Documentation english | associatedValueName = ...violation patterns | Updated | associatedValueName = ...violation occurrences |
8236 | quality-rule | Avoid using hard-coded values | Documentation english | output = ...violation patterns found in source code: - Alphanumeric literal | Updated | output = ...violation occurrences found in source code: - Alphanumeric literal |
8238 | quality-rule | Trust boundary violation | Documentation english | total = The number of methods calling user input methods | Updated | total = Number of methods calling user input methods |
8240 | quality-rule | Sensitive cookie in HTTPS session without 'Secure' attribute | Documentation english | total = Methods calling javax.servlet.http.HttpServletResponse.addCookie. | Updated | total = Number of methods calling javax.servlet.http.HttpServletResponse.addCookie |
8242 | quality-rule | Use of insufficiently random values | Documentation english | total = The number of methods calling methods producing insufficiently random numbers | Updated | total = Number of methods calling methods producing insufficiently random numbers |
8402 | quality-rule | All types of a serializable class must be serializable | Documentation english | associatedValueName = Single Value | Updated | associatedValueName = Number of violation occurrences |
8402 | quality-rule | All types of a serializable class must be serializable | Documentation english | total = number of non-static, non-transient and not primitive fields of classes that imp... | Updated | total = Number of non-static, non-transient and not primitive fields of classes that imp... |
8408 | quality-rule | Avoid Reflected Cross-site Scripting (Non Persistent) | Definition | Missing | Added | active = true, detached = false |
8408 | quality-rule | Avoid Reflected Cross-site Scripting (Non Persistent) | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8410 | quality-rule | Avoid Cross-Site Scripting (Persistent) | Definition | Missing | Added | active = true, detached = false |
8410 | quality-rule | Avoid Cross-Site Scripting (Persistent) | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8414 | quality-rule | Avoid use of a broken or risky cryptographic algorithm | Definition | Missing | Added | active = true, detached = false |
8414 | quality-rule | Avoid use of a broken or risky cryptographic algorithm | Quality Contribution to 'Secure Coding - Weak Security Features' (66064) | Missing contribution | Added | critical = true, weight = 9 |
8416 | quality-rule | Avoid use of a reversible one-way hash | Definition | Missing | Added | active = true, detached = false |
8416 | quality-rule | Avoid use of a reversible one-way hash | Quality Contribution to 'Secure Coding - Weak Security Features' (66064) | Missing contribution | Added | critical = true, weight = 9 |
AIP 8.3.10 - 8.3.11
This section lists the results of a comparison between a CAST AIP 8.3.10 Assessment Model and the CAST AIP 8.3.11 Assessment Model. You can download the original compare_8310_8311.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.10 Assessment Model | Change | CAST 8.3.11 Assessment Model |
8412 | quality-rule | "CX_ROOT" should not be used in TRY .. CATCH.. ENDTRY block | Definition | Missing | Added | active = true, detached = false |
550 | quality-rule | Class naming convention - case control (C++) | Documentation english | name = ...ming convention - case control | Updated | name = ...ming convention - case control (C++) |
552 | quality-rule | Method naming convention - case control (C++) | Documentation english | name = ...ming convention - case control | Updated | name = ...ming convention - case control (C++) |
554 | quality-rule | Constant naming convention - case control (C++) | Documentation english | name = ...ming convention - case control | Updated | name = ...ming convention - case control (C++) |
566 | quality-rule | Avoid large Classes - too many Methods (C++) | Documentation english | name = ...rge Classes - too many Methods | Updated | name = ...rge Classes - too many Methods (C++) |
568 | quality-rule | Avoid large Classes - too many Data Members (C++) | Documentation english | name = ...lasses - too many Data Members | Updated | name = ...lasses - too many Data Members (C++) |
570 | quality-rule | Avoid large Interfaces - too many Methods (C++) | Documentation english | name = ... Interfaces - too many Methods | Updated | name = ... Interfaces - too many Methods (C++) |
576 | quality-rule | Avoid large Classes - too many Constructors (C++) | Documentation english | name = ...lasses - too many Constructors | Updated | name = ...lasses - too many Constructors (C++) |
586 | quality-rule | DELETED: Avoid inline Constructors and Destructors | Documentation english | name = Avoid inline Constructors and Destructors | Updated | name = DELETED: Avoid inline Constructors and Destructors |
588 | quality-rule | Avoid using Global Variables (C++) | Documentation english | name = Avoid using Global Variables | Updated | name = Avoid using Global Variables (C++) |
1098 | quality-rule | DELETED: Avoid recursive Functions (C) | Documentation english | name = Avoid recursive Functions | Updated | name = DELETED: Avoid recursive Functions (C) |
1588 | quality-rule | Use WHEN OTHERS in exception management | Documentation english | associatedValueName = Associated Value | Removed | Missing |
1588 | quality-rule | Use WHEN OTHERS in exception management | Documentation english | Missing | Added | total = Number of PLSQL compiled objects |
1608 | quality-rule | Avoid cascading Triggers | Documentation english | Missing | Added | total = Number of PLSQL triggers |
1616 | quality-rule | DELETED: Avoid undocumented Triggers | Documentation english | name = Avoid undocumented Triggers | Updated | name = DELETED: Avoid undocumented Triggers |
1622 | quality-rule | DELETED: Avoid Triggers with a very low comment/code ratio | Documentation english | name = Avoid Triggers with a very low comment/code ratio | Updated | name = DELETED: Avoid Triggers with a very low comment/code ratio |
2230 | quality-rule | Use of style sheets (JEE) | Documentation english | name = Use of style sheets | Updated | name = Use of style sheets (JEE) |
2234 | quality-rule | DELETED: Avoid call of JAVA objects | Documentation english | name = Avoid call of JAVA objects | Updated | name = DELETED: Avoid call of JAVA objects |
2242 | quality-rule | Avoid direct definition of JavaScript Functions in a Web page (JEE) | Documentation english | name = ...Script Functions in a Web page | Updated | name = ...Script Functions in a Web page (JEE) |
2254 | quality-rule | Avoid large Page files (JEE) | Documentation english | name = Avoid large Page files | Updated | name = Avoid large Page files (JEE) |
2266 | quality-rule | Avoid non standard file extensions (JEE) | Documentation english | name = ...d non standard file extensions | Updated | name = ...d non standard file extensions (JEE) |
2572 | quality-rule | Avoid declaring VB Variables without typing them (Visual Basic) | Documentation english | name = ... Variables without typing them | Updated | name = ... Variables without typing them (Visual Basic) |
2574 | quality-rule | Avoid using Global Variables (Visual Basic) | Documentation english | name = Avoid using Global Variables | Updated | name = Avoid using Global Variables (Visual Basic) |
2578 | quality-rule | DELETED: Avoid recursive Functions (Visual Basic) | Documentation english | name = Avoid recursive Functions | Updated | name = DELETED: Avoid recursive Functions (Visual Basic) |
2616 | quality-rule | Avoid undocumented Forms | Documentation english | associatedValueName = Associated Value | Removed | Missing |
2616 | quality-rule | Avoid undocumented Forms | Documentation english | Missing | Added | total = Number of forms |
2618 | quality-rule | Avoid Forms with a very low comment/code ratio | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Comment ratio |
2618 | quality-rule | Avoid Forms with a very low comment/code ratio | Documentation english | total = Total number of forms | Updated | total = Number of forms |
2624 | quality-rule | Avoid unreferenced Forms | Documentation english | associatedValueName = Associated Value | Removed | Missing |
2624 | quality-rule | Avoid unreferenced Forms | Documentation english | Missing | Added | total = Number of forms |
3058 | quality-rule | Use of style sheets (ASP) | Documentation english | name = Use of style sheets | Updated | name = Use of style sheets (ASP) |
3070 | quality-rule | Avoid non standard file extensions (ASP) | Documentation english | name = ...d non standard file extensions | Updated | name = ...d non standard file extensions (ASP) |
3088 | quality-rule | Avoid large Page files (ASP) | Documentation english | name = Avoid large Page files | Updated | name = Avoid large Page files (ASP) |
3148 | quality-rule | An include file must contain at most one Class definition | Documentation english | associatedValueName = Number of classes | Updated | associatedValueName = Number of classes and structs |
3148 | quality-rule | An include file must contain at most one Class definition | Documentation english | description = ...iple class definitions. | Updated | description = ...iple class/struct definitions. |
3148 | quality-rule | An include file must contain at most one Class definition | Documentation english | output = ...vides: - The number of classes | Updated | output = ...vides: - The number of classes and structs |
3148 | quality-rule | An include file must contain at most one Class definition | Documentation english | rationale = ...ral class definitions in a header file makes it more complex to understand/navig... | Updated | rationale = ...ral class or structs definitions in a header file makes it more complex to under... |
3148 | quality-rule | An include file must contain at most one Class definition | Documentation english | remediation = ...l classes are defined in a header file, split class definitions into multiple he... | Updated | remediation = ...l classes ore structs are defined in a header file, split class/struct definitio... |
3578 | quality-rule | Avoid large Classes - too many Constructors (.NET) | Documentation english | name = ...lasses - too many Constructors | Updated | name = ...lasses - too many Constructors (.NET) |
3580 | quality-rule | Avoid large Classes - too many Methods (.NET) | Documentation english | name = ...rge Classes - too many Methods | Updated | name = ...rge Classes - too many Methods (.NET) |
3610 | quality-rule | Avoid declaring VB Variables without typing them (.NET) | Documentation english | name = ... Variables without typing them | Updated | name = ... Variables without typing them (.NET) |
4554 | quality-rule | Avoid large Classes - too many Methods (JEE) | Documentation english | name = ...rge Classes - too many Methods | Updated | name = ...rge Classes - too many Methods (JEE) |
4556 | quality-rule | Avoid large Classes - too many Constructors (JEE) | Documentation english | name = ...lasses - too many Constructors | Updated | name = ...lasses - too many Constructors (JEE) |
4560 | quality-rule | Avoid large Interfaces - too many Methods (JEE) | Documentation english | name = ... Interfaces - too many Methods | Updated | name = ... Interfaces - too many Methods (JEE) |
4700 | quality-rule | DELETED: Avoid using 'Throwable.printStackTrace()' within a try catch block | Activation | active = true, detached = false | Updated | active = false |
4700 | quality-rule | DELETED: Avoid using 'Throwable.printStackTrace()' within a try catch block | Diagnosis | scopeID = 0, propertyID = 0 | Updated | scopeID = 558, propertyID = 140899 |
4700 | quality-rule | DELETED: Avoid using 'Throwable.printStackTrace()' within a try catch block | Documentation english | name = Avoid using 'Throwable.printStackTrace()' within a try catch block | Updated | name = DELETED: Avoid using 'Throwable.printStackTrace()' within a try catch block |
4700 | quality-rule | DELETED: Avoid using 'Throwable.printStackTrace()' within a try catch block | Diagnosis | diagnosisValueType = no-value | Updated | diagnosisValueType = integer |
4700 | quality-rule | DELETED: Avoid using 'Throwable.printStackTrace()' within a try catch block | Operation | localSiteDiagnose = DIAG_SCOPE_JAVAPERF010 | Updated | localSiteDiagnose = null |
4700 | quality-rule | DELETED: Avoid using 'Throwable.printStackTrace()' within a try catch block | Operation | localSiteCountTotal = DIAG_JAVA_NA_ARTIFACT_TOTAL | Updated | localSiteCountTotal = null |
4702 | quality-rule | Avoid using 'Throwable.printStackTrace()' with no argument | Diagnosis | scopeID = 0, propertyID = 0 | Updated | scopeID = 558, propertyID = 140899 |
4702 | quality-rule | Avoid using 'Throwable.printStackTrace()' with no argument | Documentation english | description = 'Throwable.printStackTrace()' should not be used outside a try catch block. | Updated | description = Throwable.printStackTrace(...) prints a Throwable and its stack trace to some st... |
4702 | quality-rule | Avoid using 'Throwable.printStackTrace()' with no argument | Documentation english | name = ...kTrace()' outside a try catch block | Updated | name = ...kTrace()' with no argument |
4702 | quality-rule | Avoid using 'Throwable.printStackTrace()' with no argument | Documentation english | output = ...ckTrace()' outside a try catch block. It provides the following information: - ... | Updated | output = ...ckTrace()'. It provides the following information: - Artifact full name |
4702 | quality-rule | Avoid using 'Throwable.printStackTrace()' with no argument | Documentation english | rationale = ...kTrace()' outside a catch block usually means that it is used to log the stack o... | Updated | rationale = ...kTrace()' usually means that it is used to log the stack of errors, which has th... |
4702 | quality-rule | Avoid using 'Throwable.printStackTrace()' with no argument | Documentation english | Missing | Added | reference = http://cwe.mitre.org/data/definitions/489.html OWASP Top 10 2017 Category A3 - S... |
4702 | quality-rule | Avoid using 'Throwable.printStackTrace()' with no argument | Documentation english | Missing | Added | remediation = Loggers should be used instead to print Throwables, as they have many advantages... |
4702 | quality-rule | Avoid using 'Throwable.printStackTrace()' with no argument | Documentation english | Missing | Added | sample = public static void main(String[] args){ try { test(); } catch (U... |
4702 | quality-rule | Avoid using 'Throwable.printStackTrace()' with no argument | Diagnosis | diagnosisValueType = no-value | Updated | diagnosisValueType = integer |
4702 | quality-rule | Avoid using 'Throwable.printStackTrace()' with no argument | Operation | localSiteDiagnose = DIAG_SCOPE_JAVAPERF011 | Updated | localSiteDiagnose = null |
4702 | quality-rule | Avoid using 'Throwable.printStackTrace()' with no argument | Operation | localSiteCountTotal = DIAG_JAVA_NA_ARTIFACT_TOTAL | Updated | localSiteCountTotal = null |
4716 | quality-rule | Avoid Classes implementing too many Interfaces (JEE) | Documentation english | name = ...plementing too many Interfaces | Updated | name = ...plementing too many Interfaces (JEE) |
4734 | quality-rule | Class naming convention - case control (JEE) | Documentation english | name = ...ming convention - case control | Updated | name = ...ming convention - case control (JEE) |
4736 | quality-rule | Method naming convention - case control (JEE) | Documentation english | name = ...ming convention - case control | Updated | name = ...ming convention - case control (JEE) |
4738 | quality-rule | Constant naming convention - case control (JEE) | Documentation english | name = ...ming convention - case control | Updated | name = ...ming convention - case control (JEE) |
5108 | quality-rule | Avoid Sections with a very low comment/code ratio (COBOL) | Documentation english | name = ... a very low comment/code ratio | Updated | name = ... a very low comment/code ratio (COBOL) |
5110 | quality-rule | Avoid Programs with a very low comment/code ratio (COBOL) | Documentation english | name = ... a very low comment/code ratio | Updated | name = ... a very low comment/code ratio (COBOL) |
5112 | quality-rule | Avoid undocumented Sections (COBOL) | Documentation english | name = Avoid undocumented Sections | Updated | name = Avoid undocumented Sections (COBOL) |
5114 | quality-rule | Avoid undocumented Programs (COBOL) | Documentation english | name = Avoid undocumented Programs | Updated | name = Avoid undocumented Programs (COBOL) |
5144 | quality-rule | Avoid using GOTO statement (COBOL) | Documentation english | name = Avoid using GOTO statement | Updated | name = Avoid using GOTO statement (COBOL) |
6184 | quality-rule | Avoid Artifacts with Subqueries (Power Builder) | Documentation english | name = ...void Artifacts with Subqueries | Updated | name = ...void Artifacts with Subqueries (Power Builder) |
7054 | quality-rule | Avoid large Programs - too many Lines of Code (ABAP) | Documentation english | name = ...grams - too many Lines of Code | Updated | name = ...grams - too many Lines of Code (ABAP) |
7060 | quality-rule | Avoid undocumented Programs (ABAP) | Documentation english | name = Avoid undocumented Programs | Updated | name = Avoid undocumented Programs (ABAP) |
7084 | quality-rule | DELETED: Macro Naming Convention | Documentation english | name = Macro Naming Convention | Updated | name = DELETED: Macro Naming Convention |
7086 | quality-rule | DELETED: Form Naming Convention | Documentation english | name = Form Naming Convention | Updated | name = DELETED: Form Naming Convention |
7090 | quality-rule | DELETED: Avoid Functions recursive calls | Documentation english | name = Avoid Functions recursive calls | Updated | name = DELETED: Avoid Functions recursive calls |
7124 | quality-rule | DELETED: Functional Evolvability | Documentation english | name = Functional Evolvability | Updated | name = DELETED: Functional Evolvability |
7194 | quality-rule | Avoid large number of String concatenation (.NET) | Documentation english | name = ...number of String concatenation | Updated | name = ...number of String concatenation (.NET) |
7196 | quality-rule | Avoid large number of String concatenation (JEE) | Documentation english | name = ...number of String concatenation | Updated | name = ...number of String concatenation (JEE) |
7198 | quality-rule | Avoid String concatenation in loops (.NET) | Documentation english | name = ... String concatenation in loops | Updated | name = ... String concatenation in loops (.NET) |
7200 | quality-rule | Avoid String concatenation in loops (JEE) | Documentation english | name = ... String concatenation in loops | Updated | name = ... String concatenation in loops (JEE) |
7212 | quality-rule | Avoid instantiations inside loops (.NET) | Documentation english | name = ...id instantiations inside loops | Updated | name = ...id instantiations inside loops (.NET) |
7214 | quality-rule | DELETED: Avoid using exception handling inside loops (JEE) | Documentation english | name = Avoid using exception handling inside loops | Updated | name = DELETED: Avoid using exception handling inside loops (JEE) |
7216 | quality-rule | Avoid using exception handling inside loops (.NET) | Documentation english | name = ...xception handling inside loops | Updated | name = ...xception handling inside loops (.NET) |
7254 | quality-rule | Declare as Static all methods not using instance members (JEE) | Documentation english | name = ...ods not using instance members | Updated | name = ...ods not using instance members (JEE) |
7256 | quality-rule | Provide a private default Constructor for utility Classes (JEE) | Documentation english | name = ...onstructor for utility Classes | Updated | name = ...onstructor for utility Classes (JEE) |
7270 | quality-rule | Declare as Static all methods not using instance members (.NET) | Documentation english | name = ...ods not using instance members | Updated | name = ...ods not using instance members (.NET) |
7272 | quality-rule | Provide a private default Constructor for utility Classes (.NET) | Documentation english | name = ...onstructor for utility Classes | Updated | name = ...onstructor for utility Classes (.NET) |
7308 | quality-rule | Avoid using Inner Classes | Documentation english | description = ...er classes. | Updated | description = ...er classes except if the class is a static one. |
7384 | quality-rule | DELETED: Large Programs should be called dynamically | Documentation english | name = Large Programs should be called dynamically | Updated | name = DELETED: Large Programs should be called dynamically |
7396 | quality-rule | DELETED: Subprograms called multiple times should be called statically | Documentation english | name = Subprograms called multiple times should be called statically | Updated | name = DELETED: Subprograms called multiple times should be called statically |
7442 | quality-rule | Avoid to use this within Constructor in multi-thread environment | Documentation english | reference = http://www-128.ibm.com/developerworks/java/library/j-jtp0618.html http://java.su... | Updated | reference = https://www.ibm.com/developerworks/java/library/j-jtp0618/index.html http://java... |
7446 | quality-rule | Avoid double checked locking | Operation | localSiteCountTotal = DSS_DIAG_SCOPE_GENERIC_NUM | Updated | localSiteCountTotal = null |
7458 | quality-rule | Avoid large Interfaces - too many Methods (.NET) | Documentation english | name = ... Interfaces - too many Methods | Updated | name = ... Interfaces - too many Methods (.NET) |
7532 | quality-rule | Avoid nested SELECT ... ENDSELECT statements | Documentation english | reference = ...b.mit.edu/ist/org/admincomputing/dev/abap_review_check_list.htm | Updated | reference = ...b.mit.edu/fss/dev/abap_review_check_list.htm |
7560 | quality-rule | DELETED: Programs accessing relational Databases must include the SQLCA Copybook | Documentation english | name = Programs accessing relational Databases must include the SQLCA Copybook | Updated | name = DELETED: Programs accessing relational Databases must include the SQLCA Copybook |
7588 | quality-rule | DELETED: Avoid custom code with OSS notes | Documentation english | name = Avoid custom code with OSS notes | Updated | name = DELETED: Avoid custom code with OSS notes |
7596 | quality-rule | Avoid Classes implementing too many Interfaces (ABAP) | Documentation english | name = ...plementing too many Interfaces | Updated | name = ...plementing too many Interfaces (ABAP) |
7626 | quality-rule | Avoid large Classes - too many Methods (ABAP) | Documentation english | name = ...rge Classes - too many Methods | Updated | name = ...rge Classes - too many Methods (ABAP) |
7628 | quality-rule | Avoid large Classes - too many Data Members (ABAP) | Documentation english | name = ...lasses - too many Data Members | Updated | name = ...lasses - too many Data Members (ABAP) |
7630 | quality-rule | Avoid large Interfaces - too many Methods (ABAP) | Documentation english | name = ... Interfaces - too many Methods | Updated | name = ... Interfaces - too many Methods (ABAP) |
7650 | quality-rule | All types of a serializable Class must be serializable | Documentation english | name = ...ble Class must be serializable (ASCRM-RLB-2) | Updated | name = ...ble Class must be serializable |
7740 | quality-rule | Avoid cross-site scripting DOM vulnerabilities | Documentation english | name = CWE-79: Avoid cross-site scripting DOM vulnerabilities | Updated | name = Avoid cross-site scripting DOM vulnerabilities |
7742 | quality-rule | Avoid SQL injection vulnerabilities | Documentation english | name = CWE-89: Avoid SQL injection vulnerabilities | Updated | name = Avoid SQL injection vulnerabilities |
7746 | quality-rule | Avoid LDAP injection vulnerabilities | Documentation english | name = CWE-90: Avoid LDAP injection vulnerabilities | Updated | name = Avoid LDAP injection vulnerabilities |
7748 | quality-rule | Avoid OS command injection vulnerabilities | Documentation english | name = CWE-78: Avoid OS command injection vulnerabilities | Updated | name = Avoid OS command injection vulnerabilities |
7750 | quality-rule | Avoid XPath injection vulnerabilities | Documentation english | name = CWE-91: Avoid XPath injection vulnerabilities | Updated | name = Avoid XPath injection vulnerabilities |
7752 | quality-rule | Avoid file path manipulation vulnerabilities | Documentation english | name = CWE-73: Avoid file path manipulation vulnerabilities | Updated | name = Avoid file path manipulation vulnerabilities |
7962 | quality-rule | Avoid direct or indirect remote calls inside a loop | Documentation english | name = ...ect remote calls inside a loop(ASCPEM-PRF-8) | Updated | name = ...ect remote calls inside a loop |
7968 | quality-rule | Never use strcat() function (C/C++) | Documentation english | name = Never use strcat() function | Updated | name = Never use strcat() function (C/C++) |
7970 | quality-rule | Never use strcpy() function (C/C++) | Documentation english | name = Never use strcpy() function | Updated | name = Never use strcpy() function (C/C++) |
7972 | quality-rule | Never use sprintf() or vsprintf() functions | Documentation english | associatedValueName = Number of violation patterns | Updated | associatedValueName = Functions called |
7972 | quality-rule | Never use sprintf() or vsprintf() functions | Documentation english | output = Associated to each C/C++ function/method/constructors/destructors with violation... | Updated | output = Functions called |
8044 | quality-rule | Avoid Log forging vulnerabilities | Documentation english | name = CWE-117: Avoid Log forging vulnerabilities | Updated | name = Avoid Log forging vulnerabilities |
8098 | quality-rule | Avoid uncontrolled format string | Documentation english | name = CWE-134: Avoid uncontrolled format string | Updated | name = Avoid uncontrolled format string |
8102 | quality-rule | Avoid hardcoded network resource names (JEE) | Documentation english | name = ...rdcoded network resource names | Updated | name = ...rdcoded network resource names (JEE) |
8114 | quality-rule | Avoid numerical data corruption during incompatible mutation (ABAP) | Documentation english | name = ...n during incompatible mutation | Updated | name = ...n during incompatible mutation (ABAP) |
8140 | quality-rule | Subscripts and iterators must be defined with BINARY usage | Documentation english | description = This rule lists Cobol Programs that access internal tables with a subscript rath... | Updated | description = This rule searches in Cobol Programs for variables that are not defined with the... |
8214 | quality-rule | CWE-672: Expired or Released Resource should not be used | Documentation english | associatedValueName = Associated Value | Updated | associatedValueName = Number of violation occurrences |
8214 | quality-rule | CWE-672: Expired or Released Resource should not be used | Documentation english | description = ...methods acessing the closed SQL connections or data streams which are not valid.... | Updated | description = ...methods accessing the closed SQL connections or data streams which are not valid... |
8214 | quality-rule | CWE-672: Expired or Released Resource should not be used | Documentation english | output = This report lists all methods that access the closed SQL connections or data str... | Updated | output = Associated to each violation, the following information is provided: - The numbe... |
8214 | quality-rule | CWE-672: Expired or Released Resource should not be used | Documentation english | rationale = This mainly comes from an incorrect code that by mistake access the invalid reso... | Updated | rationale = When a resource is released it might not be in an expected state, later attempts... |
8214 | quality-rule | CWE-672: Expired or Released Resource should not be used | Documentation english | reference = ....org/data/definitions/672.html | Updated | reference = ....org/data/definitions/672.html ASCSM-CWE-672: Expired or Released Resource Usage |
8214 | quality-rule | CWE-672: Expired or Released Resource should not be used | Documentation english | remediation = ...should be always before closing the application. | Updated | remediation = ...should be called before closing the application. |
8214 | quality-rule | CWE-672: Expired or Released Resource should not be used | Documentation english | remediationSample = ...sing a conection"); connection.close(); } | Updated | remediationSample = ...sing a connection"); connection.close(); } |
8214 | quality-rule | CWE-672: Expired or Released Resource should not be used | Documentation english | sample = ...sing a conection"); connection.close(); System.out.println("Connecti... | Updated | sample = ...sing a connection"); connection.close(); System.out.println("Connect... |
8214 | quality-rule | CWE-672: Expired or Released Resource should not be used | Documentation english | total = ...hods that open a database resource in the body | Updated | total = ...hods that have invalid access to the database resource in the body |
8216 | quality-rule | CWE-681: Avoid numerical data corruption during incompatible mutation | Documentation english | total = All artifacts that reference a incompatible mutation | Updated | total = All artefacts that can reference an incompatible mutation which includes methods... |
8216 | quality-rule | CWE-681: Avoid numerical data corruption during incompatible mutation | Diagnosis | diagnosisValueType = integer | Updated | diagnosisValueType = no-value |
8218 | quality-rule | Content type should be checked when receiving a HTTP Post | Documentation english | name = CWE-434: Content type should be checked when receiving a HTTP Post | Updated | name = Content type should be checked when receiving a HTTP Post |
8222 | quality-rule | Use of hard-coded credentials | Documentation english | name = CWE-798: Use of hard-coded credentials | Updated | name = Use of hard-coded credentials |
8238 | quality-rule | Trust boundary violation | Documentation english | name = CWE-501: Trust boundary violation | Updated | name = Trust boundary violation |
8240 | quality-rule | Sensitive cookie in HTTPS session without 'Secure' attribute | Documentation english | name = CWE-614: Sensitive cookie in HTTPS session without 'Secure' attribute | Updated | name = Sensitive cookie in HTTPS session without 'Secure' attribute |
8242 | quality-rule | Use of insufficiently random values | Documentation english | name = CWE-330: Use of insufficiently random values | Updated | name = Use of insufficiently random values |
8412 | quality-rule | "CX_ROOT" should not be used in TRY .. CATCH.. ENDTRY block | Quality Contribution to 'Programming Practices - Modularity and OO Encapsulation Conformity' (61020) | Missing contribution | Added | critical = true, weight = 7 |
AIP 8.3.9 - 8.3.10
This section lists the results of a comparison between a CAST AIP 8.3.9 Assessment Model and the CAST AIP 8.3.10 Assessment Model. You can download the original compare_839_8310.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.9 Assessment Model | Change | CAST 8.3.10 Assessment Model |
3570 | quality-rule | Avoid using Keywords as names | Documentation english | description = ...ds should not be used as names | Updated | description = ...ds should not be used as names. For list of supported keyword for C# please see ... |
7526 | quality-rule | Avoid using hardcoded paths | Diagnosis | scopeID = 0, propertyID = 0 | Updated | scopeID = 3, propertyID = 140907 |
7526 | quality-rule | Avoid using hardcoded paths | Operation | localSiteDiagnose = DIAG_SCOPE_ABAPAOPI002 | Updated | localSiteDiagnose = null |
7526 | quality-rule | Avoid using hardcoded paths | Operation | localSiteCountTotal = DIAG_ABAP_ANA_ARTIFAC_TOTAL | Updated | localSiteCountTotal = null |
AIP 8.3.8 - 8.3.9
No differences.
AIP 8.3.7 - 8.3.8
This section lists the results of a comparison between a CAST AIP 8.3.7 Assessment Model and the CAST AIP 8.3.8 Assessment Model. You can download the original compare_837_838.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.7 Assessment Model | Change | CAST 8.3.8 Assessment Model |
1634 | quality-rule | Avoid unreferenced Tables | Technologies | [DB2 Server, SQL Server, PL/SQL, Microsoft T-SQL, Sybase T-SQL, SQL] | Updated | Removed: [DB2 Server] |
6584 | quality-rule | View naming convention - name size control | Definition | active = true, detached = false | Removed | Missing |
6586 | quality-rule | Table naming convention - name size control | Definition | active = true, detached = false | Removed | Missing |
6588 | quality-rule | View naming convention - character set control | Definition | active = true, detached = false | Removed | Missing |
6590 | quality-rule | Table naming convention - character set control | Definition | active = true, detached = false | Removed | Missing |
6592 | quality-rule | DELETED:6592 Avoid undocumented Functions | Definition | active = true, detached = true | Removed | Missing |
6594 | quality-rule | DELETED:6594 Avoid undocumented Triggers | Definition | active = true, detached = true | Removed | Missing |
6596 | quality-rule | DELETED: 6596 Avoid Triggers with a very low comment/code ratio | Definition | active = true, detached = true | Removed | Missing |
6598 | quality-rule | DELETED:6598 Avoid undocumented Procedures | Definition | active = true, detached = true | Removed | Missing |
6600 | quality-rule | DELETED:6600 Avoid functions and procedures with a very low comment/code ratio | Definition | active = true, detached = true | Removed | Missing |
7122 | quality-measure | Complexity Volume (% of LoC) | Parameter #1: Maximum High Complexity Volume (% of LoC) | values(DB2 Server) = [20.0] | Updated | values(DB2 Server) = No default values |
7124 | quality-rule | Functional Evolvability | Parameter #1: Maximum Functional Evolvability | values(DB2 Server) = [50] | Updated | values(DB2 Server) = No default values |
7404 | quality-rule | Avoid unreferenced views | Technologies | [DB2 Server, SQL Server, PL/SQL, Microsoft T-SQL, Sybase T-SQL, SQL] | Updated | Removed: [DB2 Server] |
7412 | quality-rule | DELETED:7412 Avoid undocumented functions and procedures | Definition | active = true, detached = true | Removed | Missing |
7420 | quality-rule | Avoid SQL queries with implicit conversions in the WHERE clause | Technologies | [ABAP, DB2 Server, SQL Server, Forms, PL/SQL, Microsoft T-SQL, Sybase T-SQL] | Updated | Removed: [DB2 Server] |
7660 | quality-rule | Never use SQL queries with a cartesian product on XXL Tables | Technologies | [ABAP, DB2 Server, SQL Server, Forms, PL/SQL, Microsoft T-SQL, Sybase T-SQL] | Updated | Removed: [DB2 Server] |
7662 | quality-rule | Avoid SQL queries on XXL Tables with implicit conversions in the WHERE clause | Technologies | [ABAP, DB2 Server, SQL Server, Forms, PL/SQL, Microsoft T-SQL, Sybase T-SQL] | Updated | Removed: [DB2 Server] |
7760 | quality-rule | Avoid triggers, functions and procedures with a very low comment/code ratio | Technologies | [DB2 Server, SQL Server, Forms, PL/SQL, Microsoft T-SQL, Sybase T-SQL, SQL] | Updated | Removed: [DB2 Server] |
7760 | quality-rule | Avoid triggers, functions and procedures with a very low comment/code ratio | Parameter #1: Minimum % Comment / Code Ratio | values(DB2 Server) = [5] | Updated | values(DB2 Server) = No default values |
7762 | quality-rule | Avoid undocumented Triggers, Functions and Procedures | Technologies | [DB2 Server, SQL Server, Forms, PL/SQL, Microsoft T-SQL, Sybase T-SQL, SQL] | Updated | Removed: [DB2 Server] |
7766 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity | Technologies | [ASP, ABAP, DB2 Server, SQL Server, Forms, Visual Basic, PowerBuilder, Cobol, C++, C, C#, VB.NET, JavaScript, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL, .NET (Legacy Analyzer), SQL] | Updated | Removed: [DB2 Server] |
7768 | quality-rule | Avoid Artifacts with High Depth of Code | Technologies | [ASP, ABAP, DB2 Server, SQL Server, Forms, Visual Basic, PowerBuilder, Cobol, C++, C, C#, VB.NET, JavaScript, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL, .NET (Legacy Analyzer), SQL] | Updated | Removed: [DB2 Server] |
7770 | quality-rule | Avoid Artifacts with too many parameters | Technologies | [ASP, DB2 Server, SQL Server, Forms, Visual Basic, PowerBuilder, C++, C, C#, VB.NET, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL, .NET (Legacy Analyzer)] | Updated | Removed: [DB2 Server] |
7772 | quality-rule | Avoid Artifacts with High Essential Complexity | Technologies | [ASP, ABAP, DB2 Server, SQL Server, Forms, Visual Basic, PowerBuilder, Cobol, C++, C, C#, VB.NET, JavaScript, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL, .NET (Legacy Analyzer), SQL] | Updated | Removed: [DB2 Server] |
7774 | quality-rule | Avoid Artifacts with High Integration Complexity | Technologies | [ASP, ABAP, DB2 Server, SQL Server, Forms, Visual Basic, Cobol, C++, C, C#, VB.NET, JavaScript, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL, .NET (Legacy Analyzer), SQL] | Updated | Removed: [DB2 Server] |
7776 | quality-rule | Avoid Artifacts with High Fan-In | Technologies | [ASP, ABAP, DB2 Server, SQL Server, Forms, Visual Basic, PowerBuilder, Cobol, C++, C, C#, VB.NET, JavaScript, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL, .NET (Legacy Analyzer), HTML5, SQL] | Updated | Removed: [DB2 Server] |
7778 | quality-rule | Avoid Artifacts with High Fan-Out | Technologies | [ASP, ABAP, DB2 Server, SQL Server, Forms, Visual Basic, PowerBuilder, Cobol, C++, C, C#, VB.NET, JavaScript, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL, .NET (Legacy Analyzer), HTML5, SQL] | Updated | Removed: [DB2 Server] |
7784 | quality-rule | Avoid Artifacts with lines longer than X characters | Technologies | [ASP, DB2 Server, SQL Server, Forms, Visual Basic, C++, C, C#, VB.NET, JavaScript, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL, .NET (Legacy Analyzer), HTML5, SQL] | Updated | Removed: [DB2 Server] |
7806 | quality-rule | Avoid Artifacts with Group By | Technologies | [ABAP, DB2 Server, SQL Server, Forms, Visual Basic, PowerBuilder, Cobol, C++, C, C#, VB.NET, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL] | Updated | Removed: [DB2 Server] |
7808 | quality-rule | Avoid Artifacts with SQL statement including subqueries | Technologies | [ABAP, DB2 Server, SQL Server, Forms, Visual Basic, Cobol, C++, C, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL, SQL] | Updated | Removed: [DB2 Server] |
7810 | quality-rule | Avoid Artifacts with a Complex SELECT Clause | Technologies | [ABAP, DB2 Server, SQL Server, Forms, Visual Basic, PowerBuilder, Cobol, C++, C, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL] | Updated | Removed: [DB2 Server] |
7814 | quality-rule | Avoid Tables not using referential integrity | Technologies | [DB2 Server, SQL Server, PL/SQL, Microsoft T-SQL, Sybase T-SQL, SQL] | Updated | Removed: [DB2 Server] |
7816 | quality-rule | Avoid using GOTO statement | Technologies | [DB2 Server, SQL Server, Forms, C++, C, C#, VB.NET, PL/SQL, Microsoft T-SQL, Sybase T-SQL, SQL] | Updated | Removed: [DB2 Server] |
7820 | quality-rule | Never use SQL queries with a cartesian product | Technologies | [ABAP, DB2 Server, SQL Server, Forms, PL/SQL, Microsoft T-SQL, Sybase T-SQL] | Updated | Removed: [DB2 Server] |
7822 | quality-rule | Avoid Artifacts with queries on more than 4 Tables | Technologies | [ABAP, DB2 Server, SQL Server, Forms, Visual Basic, PowerBuilder, Cobol, C++, C, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL] | Updated | Removed: [DB2 Server] |
7828 | quality-rule | Avoid Artifacts with High RAW SQL Complexity | Technologies | [ABAP, DB2 Server, SQL Server, Forms, Visual Basic, PowerBuilder, Cobol, C++, C, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL, SQL] | Updated | Removed: [DB2 Server] |
7840 | quality-rule | Trigger naming convention - prefix control | Technologies | [DB2 Server, SQL Server, Forms, PL/SQL, Microsoft T-SQL, Sybase T-SQL] | Updated | Removed: [DB2 Server] |
7840 | quality-rule | Trigger naming convention - prefix control | Parameter #1: Trigger name prefix | values(DB2 Server) = [D_, U_, L_] | Updated | values(DB2 Server) = No default values |
7842 | quality-rule | Avoid large Artifacts - too many Lines of Code | Technologies | [ABAP, DB2 Server, SQL Server, Forms, Cobol, C++, C, C#, VB.NET, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL, .NET (Legacy Analyzer), HTML5, SQL] | Updated | Removed: [DB2 Server] |
7842 | quality-rule | Avoid large Artifacts - too many Lines of Code | Parameter #1: Maximum Line Count | values(DB2 Server) = [50] | Updated | values(DB2 Server) = No default values |
7852 | quality-rule | Database view naming convention - prefix control | Technologies | [SAP SQL, DB2 Server, SQL Server, PL/SQL, Microsoft T-SQL, Sybase T-SQL] | Updated | Removed: [DB2 Server] |
7852 | quality-rule | Database view naming convention - prefix control | Parameter #1: Prefix | values(DB2 Server) = [V_] | Updated | values(DB2 Server) = No default values |
7854 | quality-rule | Database table naming convention - prefix control | Technologies | [SAP SQL, DB2 Server, SQL Server, PL/SQL, Microsoft T-SQL, Sybase T-SQL] | Updated | Removed: [DB2 Server] |
7854 | quality-rule | Database table naming convention - prefix control | Parameter #1: Prefix | values(DB2 Server) = [T_] | Updated | values(DB2 Server) = No default values |
7856 | quality-rule | Avoid Tables with more than 20 columns on an OLTP system | Technologies | [DB2 Server, SQL Server, PL/SQL, Microsoft T-SQL, Sybase T-SQL, SQL] | Updated | Removed: [DB2 Server] |
7896 | quality-rule | Avoid using Cursors | Technologies | [DB2 Server, SQL Server, Microsoft T-SQL, Sybase T-SQL] | Updated | Removed: [DB2 Server] |
7898 | quality-rule | SQL Function naming convention - prefix control | Technologies | [DB2 Server, SQL Server, PL/SQL, Microsoft T-SQL, Sybase T-SQL] | Updated | Removed: [DB2 Server] |
7898 | quality-rule | SQL Function naming convention - prefix control | Parameter #1: Prefix | values(DB2 Server) = [F_] | Updated | values(DB2 Server) = No default values |
7900 | quality-rule | Stored Procedure naming convention - prefix control | Technologies | [DB2 Server, SQL Server, Forms, PL/SQL, Microsoft T-SQL, Sybase T-SQL] | Updated | Removed: [DB2 Server] |
7900 | quality-rule | Stored Procedure naming convention - prefix control | Parameter #1: Prefix | values(DB2 Server) = [SP_] | Updated | values(DB2 Server) = No default values |
7902 | quality-rule | Avoid SQL queries that no index can support | Technologies | [ABAP, DB2 Server, SQL Server, Forms, Cobol, PL/SQL, Microsoft T-SQL, Sybase T-SQL] | Updated | Removed: [DB2 Server] |
7904 | quality-rule | Avoid SQL queries on XXL tables that no index can support | Technologies | [ABAP, DB2 Server, SQL Server, Cobol, PL/SQL, Microsoft T-SQL, Sybase T-SQL] | Updated | Removed: [DB2 Server] |
7904 | quality-rule | Avoid SQL queries on XXL tables that no index can support | Parameter #1: threshold | values(DB2 Server) = [100000] | Updated | values(DB2 Server) = No default values |
10201 | sizing-measure | Backfired Function Points | Parameter #1: BackFired FP ratio | values(DB2 Server) = [60.0] | Updated | values(DB2 Server) = No default values |
6584 | quality-rule | View naming convention - name size control | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 1 | Removed | Missing contribution |
6586 | quality-rule | Table naming convention - name size control | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 1 | Removed | Missing contribution |
6588 | quality-rule | View naming convention - character set control | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 1 | Removed | Missing contribution |
6590 | quality-rule | Table naming convention - character set control | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 1 | Removed | Missing contribution |
65105 | quality-distribution | Size Distribution | Parameter #1: Average Size Threshold | values(DB2 Server) = [10.0] | Updated | values(DB2 Server) = No default values |
65105 | quality-distribution | Size Distribution | Parameter #2: Large Size Threshold | values(DB2 Server) = [50.0] | Updated | values(DB2 Server) = No default values |
65105 | quality-distribution | Size Distribution | Parameter #3: Very Large Size Threshold | values(DB2 Server) = [200.0] | Updated | values(DB2 Server) = No default values |
65350 | quality-distribution | Coupling Distribution | Parameter #1: Average Coupling Artifacts Threshold | values(DB2 Server) = [4.0] | Updated | values(DB2 Server) = No default values |
65350 | quality-distribution | Coupling Distribution | Parameter #2: High Coupling Artifacts Threshold | values(DB2 Server) = [10.0] | Updated | values(DB2 Server) = No default values |
65350 | quality-distribution | Coupling Distribution | Parameter #3: Very High Coupling Artifacts Threshold | values(DB2 Server) = [30.0] | Updated | values(DB2 Server) = No default values |
65501 | quality-distribution | Cyclomatic Complexity Distribution | Parameter #1: Average Complexity Artifact Threshold | values(DB2 Server) = [5.0] | Updated | values(DB2 Server) = No default values |
65501 | quality-distribution | Cyclomatic Complexity Distribution | Parameter #2: High Complexity Artifact Threshold | values(DB2 Server) = [15.0] | Updated | values(DB2 Server) = No default values |
65501 | quality-distribution | Cyclomatic Complexity Distribution | Parameter #3: Very High Complexity Artifact Threshold | values(DB2 Server) = [30.0] | Updated | values(DB2 Server) = No default values |
66010 | quality-distribution | Reuse by Call Distribution | Parameter #1: Average Reuse Threshold | values(DB2 Server) = [4.0] | Updated | values(DB2 Server) = No default values |
66010 | quality-distribution | Reuse by Call Distribution | Parameter #2: High Reuse Threshold | values(DB2 Server) = [10.0] | Updated | values(DB2 Server) = No default values |
66010 | quality-distribution | Reuse by Call Distribution | Parameter #3: Very High Reuse Threshold | values(DB2 Server) = [30.0] | Updated | values(DB2 Server) = No default values |
66015 | quality-distribution | Class Complexity Distribution (WMC) | Parameter #1: Average Class Complexity Threshold | values(DB2 Server) = [30.0] | Updated | values(DB2 Server) = No default values |
66015 | quality-distribution | Class Complexity Distribution (WMC) | Parameter #2: High Class Complexity Threshold | values(DB2 Server) = [50.0] | Updated | values(DB2 Server) = No default values |
66015 | quality-distribution | Class Complexity Distribution (WMC) | Parameter #3: Very High Class Complexity Threshold | values(DB2 Server) = [100.0] | Updated | values(DB2 Server) = No default values |
66020 | quality-distribution | Class Fan-Out Distribution | Parameter #1: Average Class Fan-Out Threshold | values(DB2 Server) = [10.0] | Updated | values(DB2 Server) = No default values |
66020 | quality-distribution | Class Fan-Out Distribution | Parameter #2: High Class Fan-Out Threshold | values(DB2 Server) = [25.0] | Updated | values(DB2 Server) = No default values |
66020 | quality-distribution | Class Fan-Out Distribution | Parameter #3: Very High Class Fan-Out Threshold | values(DB2 Server) = [50.0] | Updated | values(DB2 Server) = No default values |
66021 | quality-distribution | Class Fan-In Distribution | Parameter #1: Average Class Fan-In Threshold | values(DB2 Server) = [10.0] | Updated | values(DB2 Server) = No default values |
66021 | quality-distribution | Class Fan-In Distribution | Parameter #2: High Class Fan-In Threshold | values(DB2 Server) = [15.0] | Updated | values(DB2 Server) = No default values |
66021 | quality-distribution | Class Fan-In Distribution | Parameter #3: Very High Class Fan-In Threshold | values(DB2 Server) = [30.0] | Updated | values(DB2 Server) = No default values |
AIP 8.3.6 - 8.3.7
This section lists the results of a comparison between a CAST AIP 8.3.6 Assessment Model and the CAST AIP 8.3.7 Assessment Model. You can download the original compare_836_837.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.6 Assessment Model | Change | CAST 8.3.7 Assessment Model |
8146 | quality-rule | Avoid calling programs statically | Thresholds | [99.0, 95.0, 90.0, 50.0] | Updated | [50.0, 90.0, 95.0, 99.0] |
1101038 | quality-rule | Replace OR conditions testing equality on the same identifier in SQL WHERE clauses by an IN test condition | Documentation english | description = ...ts having R conditions testing equality on the same identifier in SQL WHERE clau... | Updated | description = ...ts having OR conditions testing equality on the same identifier in SQL WHERE cla... |
AIP 8.3.5 - 8.3.6
This section lists the results of a comparison between a CAST AIP 8.3.5 Assessment Model and the CAST AIP 8.3.6 Assessment Model. You can download the original compare_835_836.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.5 Assessment Model | Change | CAST 8.3.6 Assessment Model |
4602 | quality-rule | Avoid using Fields (non static final) from other Classes | Documentation english | description = ...rs should be relatively rare." | Updated | description = ...rs should be relatively rare.". Fields of an INNER class are considered as inter... |
7210 | quality-rule | Avoid instantiations inside loops | Documentation english | description = ...lace . and any method with the same name in their respective derived classes ... | Updated | description = ...lace . java.util.stream.Stream.map . and any method with the same name in ... |
7442 | quality-rule | Avoid to use this within Constructor in multi-thread environment | Diagnosis | scopeID = 0, propertyID = 0 | Updated | scopeID = 545, propertyID = 5008 |
7442 | quality-rule | Avoid to use this within Constructor in multi-thread environment | Operation | localSiteDiagnose = DIAG_SCOPE_JAVASCTS003 | Updated | localSiteDiagnose = null |
7442 | quality-rule | Avoid to use this within Constructor in multi-thread environment | Operation | localSiteCountTotal = DIAG_JAVA_CONS_TOTAL | Updated | localSiteCountTotal = null |
7446 | quality-rule | Avoid double checked locking | Diagnosis | scopeID = 0, propertyID = 0 | Updated | scopeID = 557, propertyID = 140861 |
7446 | quality-rule | Avoid double checked locking | Operation | localSiteDiagnose = DIAG_SCOPE_JAVASCTS001 | Updated | localSiteDiagnose = null |
7446 | quality-rule | Avoid double checked locking | Operation | localSiteCountTotal = DIAG_JAVA_ANA_SYNCH_TOTAL | Updated | localSiteCountTotal = DSS_DIAG_SCOPE_GENERIC_NUM |
8082 | quality-rule | Avoid Tables without Primary Key | Documentation english | description = ...of tables without Primary key constraints | Updated | description = ...of tables and materialized views without Primary key constraints |
8082 | quality-rule | Avoid Tables without Primary Key | Documentation english | output = ...ll tables without a primary key defined. it provides the following information: ... | Updated | output = ...ll tables and materialized views without a primary key defined. it provides the ... |
8082 | quality-rule | Avoid Tables without Primary Key | Documentation english | rationale = ...entifier. Next a primary key is a candidate key that's been singled out to uni... | Updated | rationale = ...entifier. Next a primary key is a candidate key that's been singled out to uniqu... |
8082 | quality-rule | Avoid Tables without Primary Key | Documentation english | remediation = Appy referential integrity through constraint:: | Updated | remediation = Apply referential integrity through constraint:: |
8082 | quality-rule | Avoid Tables without Primary Key | Documentation english | total = Tables of the scoped container (schema or database depending of the DBMS) | Updated | total = Tables and materialized views of the scoped container (schema or database depend... |
1020004 | quality-rule | Avoid using querySelectorAll | Documentation english | description = ...ctorAll can be 40 time slower. | Updated | description = ...ctorAll can be 40 time slower. This rule is compliant with CISQ ASCPEM-PRF-4 rec... |
1020004 | quality-rule | Avoid using querySelectorAll | Documentation english | name = Avoid to use querySelectorAll | Updated | name = Avoid using querySelectorAll |
1020004 | quality-rule | Avoid using querySelectorAll | Documentation english | rationale = ASCPEM-PRF-04 | Updated | rationale = Ensure your web application interactivity by accessing/manipulating the DOM tree... |
1020004 | quality-rule | Avoid using querySelectorAll | Documentation english | Missing | Added | reference = [1] http://www.infoq.com/presentations/JavaScript-Performance-Patterns [2] http... |
1020006 | quality-rule | Avoid calling a function in a termination loop | Documentation english | description = ...unction in a loop termination. | Updated | description = ...unction in a loop termination. This rule is compliant with CISQ OMG ASCPEM-PRF-4... |
1020006 | quality-rule | Avoid calling a function in a termination loop | Documentation english | name = Avoid to call a function in a termination loop | Updated | name = Avoid calling a function in a termination loop |
1020006 | quality-rule | Avoid calling a function in a termination loop | Documentation english | Missing | Added | reference = AJAX in Action - Manning - ISBN 1-932394-61-3 page 290 CISQ OMG |
1020008 | quality-rule | Avoid using for-in loop | Documentation english | description = ...n number of object properties. | Updated | description = ...n number of object properties. This rules is compliant with CISQ OMG ASCPEM-PRF-... |
1020008 | quality-rule | Avoid using for-in loop | Documentation english | name = Avoid for-in loop | Updated | name = Avoid using for-in loop |
1020008 | quality-rule | Avoid using for-in loop | Documentation english | rationale = ASCPEM-PRF-04 | Updated | rationale = Ensure your web application interactivity by accessing/manipulating the DOM tree... |
1020008 | quality-rule | Avoid using for-in loop | Documentation english | reference = CISQ OMG | Updated | reference = CISQ OMG ASCPEM-PRF-4 |
1020010 | quality-rule | Avoid using forEach() | Documentation english | description = ...refore isn't a suitable approach when execution time is a significant concern. | Updated | description = ...refore isn’t a suitable approach when execution time is a significant concern. T... |
1020010 | quality-rule | Avoid using forEach() | Documentation english | rationale = ASCPEM-PRF-04 | Updated | rationale = Ensure your web application interactivity by accessing/manipulating the DOM tree... |
1020010 | quality-rule | Avoid using forEach() | Documentation english | reference = CISQ OMG, http://jsperf.com/foreach-vs-loop | Updated | reference = CISQ OMG ASCPEM-PRF-4 http://jsperf.com/foreach-vs-loop |
1020016 | quality-rule | Avoid using too much dot notation in loop | Documentation english | rationale = ...ime consumed by this function. | Updated | rationale = ...ime consumed by this function. This rule is compliant with CISQ OMG ASCPEM-PRF-4... |
1020024 | quality-rule | Avoid using submit markup related to "form" with id attribute | Documentation english | sample = <form id="test">...</form><button form="test" formaction="javascript:alert(1)">X... | Updated | sample = <form id="myid"><input type="submit" value="Submit"></form> |
1020060 | quality-rule | Avoid using console.log() | Documentation english | description = ...WASP 2013 and 2017 A6 - Sensitive Data Exposure. | Updated | description = ...WASP 2013 A6 and 2017 A3 - Sensitive Data Exposure |
1020082 | quality-rule | Avoid undocumented Functions | Parameter #-5 | name = [Target Metric ID], type = integer, description = Reserved parameter | Removed | Missing |
1020084 | quality-rule | Avoid unreferenced Functions | Parameter #-5 | name = [Target Metric ID], type = integer, description = Reserved parameter | Removed | Missing |
1020086 | quality-rule | Avoid Functions having a very low Comment/Code ratio | Parameter #-5 | name = [Target Metric ID], type = integer, description = Reserved parameter | Removed | Missing |
1020088 | quality-rule | Avoid Artifacts with lines longer than X characters | Parameter #-5 | name = [Target Metric ID], type = integer, description = Reserved parameter | Removed | Missing |
1020090 | quality-rule | Avoid Artifacts with High Depth of Code | Parameter #-5 | name = [Target Metric ID], type = integer, description = Reserved parameter | Removed | Missing |
AIP 8.3.4 - 8.3.5
This section lists the results of a comparison between a CAST AIP 8.3.4 Assessment Model and the CAST AIP 8.3.5 Assessment Model. You can download the original compare_834_835.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.4 Assessment Model | Change | CAST 8.3.5 Assessment Model |
4616 | quality-rule | Proper overriding of 'finalize()' | Documentation english | Missing | Added | reference = https://cwe.mitre.org/data/definitions/568.html |
7348 | quality-rule | Avoid too many Indexes on one Table | Documentation english | description = Avoid having more than (>) X indexes (where X is a parameter) | Updated | description = This rule will report a violation where the number of indexes on a table exceeds... |
7648 | quality-rule | Avoid calling finalize() | Documentation english | reference = http://www.owasp.org/index.php/Poor_Style:_Explicit_call_to_finalize() | Updated | reference = https://cwe.mitre.org/data/definitions/586.html |
7690 | quality-rule | Avoid unchecked return code (SQLCODE) after EXEC SQL query | Documentation english | description = ...ery and the return code check. | Updated | description = ...ery and the return code check. Rule should not consider the below case as viol... |
8240 | quality-rule | CWE-614: Sensitive cookie in HTTPS session without 'Secure' attribute | Technologies | [C#, VB.NET, JEE] | Updated | Removed: [C#, VB.NET] |
8240 | quality-rule | CWE-614: Sensitive cookie in HTTPS session without 'Secure' attribute | Thresholds | [98.0, 99.0, 99.5, 99.99] | Updated | [50.0, 90.0, 95.0, 99.0] |
8240 | quality-rule | CWE-614: Sensitive cookie in HTTPS session without 'Secure' attribute | Documentation english | description = ...laintext over an HTTP session. | Updated | description = ...laintext over an HTTP session. Using the method "setSecure" ensures that the se... |
8240 | quality-rule | CWE-614: Sensitive cookie in HTTPS session without 'Secure' attribute | Documentation english | name = ...Sensitive Cookie in HTTPS Session Without 'Secure' Attribute | Updated | name = ...Sensitive cookie in HTTPS session without 'Secure' attribute |
8240 | quality-rule | CWE-614: Sensitive cookie in HTTPS session without 'Secure' attribute | Documentation english | rationale = The Secure attribute for sensitive cookies in HTTPS sessions is not set, which c... | Updated | rationale = The secure flag is an option that can be set by the application server when send... |
8240 | quality-rule | CWE-614: Sensitive cookie in HTTPS session without 'Secure' attribute | Documentation english | reference = CWE-614: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute https://cw... | Updated | reference = https://cwe.mitre.org/data/definitions/614.html https://www.owasp.org/index.php... |
8240 | quality-rule | CWE-614: Sensitive cookie in HTTPS session without 'Secure' attribute | Documentation english | remediation = Set the secured attribute to cookies. | Updated | remediation = Always set the secure attribute when the cookie should sent via HTTPS only |
8240 | quality-rule | CWE-614: Sensitive cookie in HTTPS session without 'Secure' attribute | Documentation english | total = Total number of methods calling javax.servlet.http.HttpServletResponse.addCookie... | Updated | total = Methods calling javax.servlet.http.HttpServletResponse.addCookie. |
8240 | quality-rule | CWE-614: Sensitive cookie in HTTPS session without 'Secure' attribute | Documentation english | Missing | Added | remediationSample = Cookie c = new Cookie(ACCOUNT_ID, acctID); c.setSecure(true); // Compliant Code... |
8240 | quality-rule | CWE-614: Sensitive cookie in HTTPS session without 'Secure' attribute | Documentation english | Missing | Added | sample = Cookie c = new Cookie(ACCOUNT_ID, acctID); // Violation - cookie is not secure ... |
10201 | sizing-measure | Backfired Function Points | Parameter #1: BackFired FP ratio | values(SQL) = No default values | Updated | values(SQL) = [60.0] |
66064 | technical-criterion | Secure Coding - Weak Security Features | Quality Contribution to 'Total Quality Index' (60017) | Missing contribution | Added | critical = false, weight = 5 |
1020078 | quality-rule | Avoid using setTimeout() | Diagnosis | scopeID = 1020001, propertyID = 1020075 | Updated | scopeID = 1020009, propertyID = 1020075 |
1020078 | quality-rule | Avoid using setTimeout() | Documentation english | remediation = If possible, refactor your code so that it does not need to use setTimeout() at ... | Updated | remediation = Do not use setTimeout with function passed as a string value. |
1020078 | quality-rule | Avoid using setTimeout() | Documentation english | sample = setTimeout(function(){ alert("Hello"); }, 3000); | Updated | sample = function delayedFunction() { alert("This is a delay"); } // unsafe - call to... |
1020078 | quality-rule | Avoid using setTimeout() | Documentation english | total = Number of Javascript Functions | Updated | total = Number of Javascript Functions using setTimeout |
1020078 | quality-rule | Avoid using setTimeout() | Documentation english | Missing | Added | remediationSample = function delayedFunction() { alert("This is a delay"); } // safe - direct ca... |
AIP 8.3.3 - 8.3.4
This section lists the results of a comparison between a CAST AIP 8.3.3 Assessment Model and the CAST AIP 8.3.4 Assessment Model. You can download the original compare_833_834.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.3 Assessment Model | Change | CAST 8.3.4 Assessment Model |
2232 | quality-rule | Pages should use error handling page | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | critical = true, weight = 5 | Updated | critical = false |
3616 | quality-rule | Data Access must be based on Stored Procedure Calls | Documentation english | rationale = ...also limit the parsing phase of the SQL order. This generally result in better p... | Updated | rationale = ...also limits the parsing phase of the SQL order. This generally results in better... |
4070 | quality-rule | Avoid use of "truncate table" | Documentation english | total = Total number of database objects containing code: SP, Functions, and Triggers. | Updated | total = Number of SQL Artifacts |
4084 | quality-rule | Avoid nested Stored Procedures using temporary Tables | Documentation english | Missing | Added | rationale = Using temporary tables in nested procedures could be risky when tables are creat... |
4084 | quality-rule | Avoid nested Stored Procedures using temporary Tables | Documentation english | Missing | Added | remediation = Replace temporary tables with queries. |
4084 | quality-rule | Avoid nested Stored Procedures using temporary Tables | Documentation english | Missing | Added | remediationSample = Create proc1 As Begin Exec proc2 End; Go Create proc2 As Begin /* 1st c... |
4084 | quality-rule | Avoid nested Stored Procedures using temporary Tables | Documentation english | Missing | Added | sample = Create proc1 As Begin Create table #table1 (col1 integer) Insert into #tabl... |
4602 | quality-rule | Avoid using Fields (non static final) from other Classes | Documentation english | description = ...concepts, fields should not be accessed from outside the class without going thr... | Updated | description = ...concepts, Fields should not be accessed from outside the Class without going thr... |
4612 | quality-rule | Avoid using native Methods (JNI) | Documentation english | description = ... that you consider to be safe. | Updated | description = ... that you consider to be safe. See : CWE-111: Direct Use of Unsafe JNI |
4612 | quality-rule | Avoid using native Methods (JNI) | Documentation english | reference = ...Java_Native_Interface#Pitfalls | Updated | reference = ...Java_Native_Interface#Pitfalls https://cwe.mitre.org/data/definitions/111.html |
7218 | quality-rule | Avoid OPEN/CLOSE inside loops | Documentation english | total = Number of Cobol Programs using Cobol File Links | Updated | total = Number of Cobol Programs |
7366 | quality-rule | File descriptor block must be defined with 0 record | Documentation english | total = Number of Cobol Programs using Cobol File Links | Updated | total = Number of Cobol Programs |
7542 | quality-rule | Avoid using FOR ALL ENTRIES IN without emptiness check | Documentation english | total = ...Artifacts using SAP Tables and SAP Views. | Updated | total = ...Artifacts containing OpenSQL statements |
7548 | quality-rule | Never use incompatible statements with the CICS environment | Documentation english | total = Number of Cobol Programs running under the CICS | Updated | total = Number of Cobol Programs |
7560 | quality-rule | Programs accessing relational Databases must include the SQLCA Copybook | Documentation english | total = Number of programs accessing relational databases | Updated | total = Number of Cobol Programs embedding SQL |
7644 | quality-rule | Avoid executing multiple OPEN statements | Documentation english | total = Number of Cobol Programs using Cobol File Links | Updated | total = Number of Cobol Programs |
7670 | quality-rule | Avoid accessing SAP standard Tables in modification from custom code | Documentation english | total = ...r of ABAP custom Programs, User-exits, Includes, Functions, and Class Methods th... | Updated | total = ...r of ABAP Artifacts |
7688 | quality-rule | Never truncate data in MOVE statements | Documentation english | Missing | Added | total = Number of Cobol Programs |
7690 | quality-rule | Avoid unchecked return code (SQLCODE) after EXEC SQL query | Documentation english | total = ... Programs accessing relational databases | Updated | total = ... Programs embedding SQL |
7698 | quality-rule | Files should be declared with a FILE-STATUS | Documentation english | total = Number of Cobol Programs using Cobol File Links | Updated | total = Number of Cobol Programs |
7756 | quality-rule | Avoid using READ statement without AT END clause or INVALID KEY clause | Documentation english | total = Number of Cobol Programs using Cobol File Links | Updated | total = Number of Cobol Programs |
7784 | quality-rule | Avoid Artifacts with lines longer than X characters | Documentation english | description = ...er and can be changed at will. | Updated | description = ...er and can be changed at will. For JAVA artifacts with annotation declared insid... |
7866 | quality-rule | Avoid SELECT ... BYPASSING BUFFER | Documentation english | total = ...g OpenSQL queries. | Updated | total = ...g OpenSQL statements |
7868 | quality-rule | Avoid Open SQL queries in loops | Documentation english | total = ...g OpenSQL queries. | Updated | total = ...g OpenSQL statements |
7870 | quality-rule | Avoid using the NOT LIKE operator in WHERE clauses | Documentation english | total = ...g OpenSQL queries. | Updated | total = ...g OpenSQL statements |
7872 | quality-rule | Avoid using IS [NOT] NULL in WHERE condition | Documentation english | total = ...g OpenSQL queries. | Updated | total = ...g OpenSQL statements |
7874 | quality-rule | Avoid using dynamic queries | Documentation english | total = ...g OpenSQL queries. | Updated | total = ...g OpenSQL statements |
7876 | quality-rule | Avoid using SELECT ... FOR UPDATE | Documentation english | total = ...g OpenSQL queries. | Updated | total = ...g OpenSQL statements |
7878 | quality-rule | Avoid Open SQL SELECT queries without WHERE condition | Documentation english | total = ...g OpenSQL queries. | Updated | total = ...g OpenSQL statements |
7880 | quality-rule | Avoid nested loops | Documentation english | total = ...umber of Abap artifacts containing code | Updated | total = ...umber of ABAP Artifacts |
7884 | quality-rule | Avoid disabling source code inspection | Documentation english | total = ...r of ABAP artifacts containing ABAP code. | Updated | total = ...r of ABAP Artifacts |
7906 | quality-rule | Avoid testing specific values for SY-UNAME | Documentation english | total = ...r of ABAP artifacts containing ABAP code | Updated | total = ...r of ABAP Artifacts |
7946 | quality-rule | Avoid queries using old style join convention instead of ANSI-Standard joins | Documentation english | total = LINBERGH_PLUS | Updated | total = Number of SQL Artifacts |
7948 | quality-rule | Do not mix Ansi joins syntax with Oracle proprietary joins syntax in the same query | Documentation english | total = LINBERGH_PLUS | Updated | total = Number of SQL Artifacts |
8014 | quality-rule | Avoid unchecked return code (SY-SUBRC) after AUTHORITY-CHECK | Documentation english | total = ...umber of Abap Artifacts | Updated | total = ...umber of ABAP Artifacts |
8036 | quality-rule | Avoid improperly written triangular joins with XXL tables in PL/SQL code | Documentation english | total = The total procedure counts the number of Client-Server Artifacts | Updated | total = Number of SQL Artifacts |
8080 | quality-rule | Avoid exists independent clauses | Documentation english | total = All SQL artifacts | Updated | total = Number of SQL Artifacts |
8100 | quality-rule | Blocking synchronous calls should have associated timeouts | Documentation english | total = All Artifacts | Updated | total = Number of Java Artifacts |
8102 | quality-rule | Avoid hardcoded network resource names | Documentation english | total = All Artifacts | Updated | total = Number of Java Artifacts |
8124 | quality-rule | Do not use function module DB_EXISTS_INDEX (HANA) | Documentation english | total = ...P Artifacts containing OpenSQL | Updated | total = ...P Artifacts containing OpenSQL statements |
8126 | quality-rule | Avoid using empty SELECT ... ENDSELECT loop | Documentation english | total = ...P Artifacts containing OpenSQL | Updated | total = ...P Artifacts containing OpenSQL statements |
8128 | quality-rule | Avoid using UPDATE and DELETE without WHERE condition | Documentation english | total = ...P Artifacts containing OpenSQL | Updated | total = ...P Artifacts containing OpenSQL statements |
8130 | quality-rule | Avoid using database hints | Documentation english | total = ...P Artifacts containing OpenSQL | Updated | total = ...P Artifacts containing OpenSQL statements |
8132 | quality-rule | Avoid using CHECK, EXIT,or RETURN in SELECT ... ENDSELECT loops | Documentation english | total = ...P Artifacts containing OpenSQL | Updated | total = ...P Artifacts containing OpenSQL statements |
8134 | quality-rule | Avoid unsorted data after SELECT queries | Documentation english | total = ...P Artifacts containing OpenSQL | Updated | total = ...P Artifacts containing OpenSQL statements |
8140 | quality-rule | Subscripts and iterators must be defined with BINARY usage | Documentation english | total = Number of violations | Updated | total = Number of Cobol Programs |
8142 | quality-rule | Prefer using indexes instead of subscripts | Documentation english | total = Number of violations | Updated | total = Number of Cobol Programs |
8144 | quality-rule | Avoid using INITIALIZE statement on data structures | Documentation english | total = Number of violations | Updated | total = Number of Cobol Programs |
8146 | quality-rule | Avoid calling programs statically | Documentation english | total = Number of Cobol Programs. | Updated | total = Number of Cobol Programs |
8160 | quality-rule | Check PCB status code after DLI queries | Documentation english | total = Number of Cobol Programs accessing IMS database | Updated | total = Number of Cobol Programs |
8162 | quality-rule | CICS return code should be checked | Documentation english | total = Number of Cobol Programs running under CICS | Updated | total = Number of Cobol Programs |
8220 | quality-rule | Avoid using deprecated method, constructor, field, type or package | Documentation english | total = Report if Deprecated class, method, field or type is used in the java code. | Updated | total = Number of Java Artifacts |
8236 | quality-rule | Avoid using hard-coded values | Documentation english | total = Number of Cobol Programs with Alphanumeric literals Matching the violation patte... | Updated | total = Number of Cobol Programs |
1022000 | quality-rule | Avoid using weak encryption algorithm as DES and triple DES | Definition | Missing | Added | active = true, detached = false |
1022000 | quality-rule | Avoid using weak encryption algorithm as DES and triple DES | Quality Contribution to 'Secure Coding - Weak Security Features' (66064) | Missing contribution | Added | critical = true, weight = 9 |
1022002 | quality-rule | Avoid using RSA Cryptographic algorithms without OAEP (Optimal Asymmetric Encryption Padding) | Definition | Missing | Added | active = true, detached = false |
1022002 | quality-rule | Avoid using RSA Cryptographic algorithms without OAEP (Optimal Asymmetric Encryption Padding) | Quality Contribution to 'Secure Coding - Weak Security Features' (66064) | Missing contribution | Added | critical = true, weight = 9 |
AIP 8.3.2 - 8.3.3
This section lists the results of a comparison between a CAST AIP 8.3.2 Assessment Model and the CAST AIP 8.3.3 Assessment Model. You can download the original compare_832_833.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.2 Assessment Model | Change | CAST 8.3.3 Assessment Model |
8222 | quality-rule | CWE-798: Use of hard-coded credentials | Documentation english | name = CWE-798 : Use of Hard-coded Credentials | Updated | name = CWE-798: Use of hard-coded credentials |
8222 | quality-rule | CWE-798: Use of hard-coded credentials | Documentation english | reference = CWE-798 : Use of Hard-coded Credentials http://cwe.mitre.org/data/definitions/79... | Updated | reference = CWE-798: Use of hard-coded credentials http://cwe.mitre.org/data/definitions/798... |
8222 | quality-rule | CWE-798: Use of hard-coded credentials | Documentation english | sample = Java example : ... DriverManager.getConnection(url, "jeff", "1234"); ... C#... | Removed | Missing |
8238 | quality-rule | CWE-501: Trust boundary violation | Definition | Missing | Added | active = true, detached = false |
8238 | quality-rule | CWE-501: Trust boundary violation | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8240 | quality-rule | CWE-614: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute | Definition | Missing | Added | active = true, detached = false |
8240 | quality-rule | CWE-614: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
8242 | quality-rule | CWE-330: Use of insufficiently random values | Definition | Missing | Added | active = true, detached = false |
8242 | quality-rule | CWE-330: Use of insufficiently random values | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
AIP 8.3.1 - 8.3.2
This section lists the results of a comparison between a CAST AIP 8.3.1 Assessment Model and the CAST AIP 8.3.2 Assessment Model. You can download the original compare_831_832.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.1 Assessment Model | Change | CAST 8.3.2 Assessment Model |
4602 | quality-rule | Avoid using Fields (non static final) from other Classes | Documentation english | description = ...concepts, Fields should not be accessed from outside the Class without going thr... | Updated | description = ...concepts, fields should not be accessed from outside the class without going thr... |
4602 | quality-rule | Avoid using Fields (non static final) from other Classes | Documentation english | Missing | Added | rationale = On of the fundamental concept of this rule is encapsulation: Hiding the internal... |
7210 | quality-rule | Avoid instantiations inside loops | Documentation english | description = ...instantiation occurs in a call to one of the following methods: . java.util.C... | Updated | description = ...instantiated object is one of the arguments of a call to one of the following me... |
7366 | quality-rule | File descriptor block must be defined with 0 record | Documentation english | description = ...ED clause), sort files (SD), and input files are not considered as violating the... | Updated | description = ...ED clause) and sort files (SD) are not considered as violating the rule. |
7548 | quality-rule | Never use incompatible statements with the CICS environment | Documentation english | description = ...- DISPLAY - FD and SD - SELECT <file> ASSIGN TO - OPEN, CLOSE, READ, WRITE, REWR... | Updated | description = ...- DISPLAY UPON CONSOLE - DISPLAY UPON SYSPUNCH - FD and SD - SELECT <file> ASS... |
7784 | quality-rule | Avoid Artifacts with lines longer than X characters | Technologies | [ASP, DB2 Server, SQL Server, Forms, Visual Basic, C++, C, C#, VB.NET, JavaScript, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL, .NET (Legacy Analyzer), SQL] | Updated | Added: [HTML5] |
7844 | quality-rule | Avoid undocumented Classes | Technologies | [ABAP, Visual Basic, C++, C#, VB.NET, .NET (Legacy Analyzer)] | Updated | Added: [HTML5] |
7944 | quality-rule | Avoid High Response for Classes | Technologies | [ABAP, PowerBuilder, C++, C#, VB.NET, JEE, .NET (Legacy Analyzer)] | Updated | Added: [HTML5] |
8112 | quality-rule | Avoid improper processing of the execution status of data handling operations | Diagnosis | scopeID = 535, propertyID = 140550 | Updated | scopeID = 911, propertyID = 140550 |
8236 | quality-rule | Avoid using hard-coded values | Definition | Missing | Added | active = true, detached = false |
8236 | quality-rule | Avoid using hard-coded values | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | Missing contribution | Added | critical = false, weight = 4 |
66064 | technical-criterion | Secure Coding - Weak Security Features | Quality Contribution to 'Security' (60016) | Missing contribution | Added | critical = false, weight = 8 |
66064 | technical-criterion | Secure Coding - Weak Security Features | Activation | active = true, detached = true | Updated | detached = false |
1020082 | quality-rule | Avoid undocumented Functions | Definition | Missing | Added | active = true, detached = false |
1020082 | quality-rule | Avoid undocumented Functions | Quality Contribution to 'Documentation - Volume of Comments' (61028) | Missing contribution | Added | critical = false, weight = 7 |
1020084 | quality-rule | Avoid unreferenced Functions | Definition | Missing | Added | active = true, detached = false |
1020084 | quality-rule | Avoid unreferenced Functions | Quality Contribution to 'Dead code (static)' (61027) | Missing contribution | Added | critical = false, weight = 4 |
1020086 | quality-rule | Avoid Functions having a very low Comment/Code ratio | Definition | Missing | Added | active = true, detached = false |
1020086 | quality-rule | Avoid Functions having a very low Comment/Code ratio | Quality Contribution to 'Documentation - Volume of Comments' (61028) | Missing contribution | Added | critical = false, weight = 3 |
1020088 | quality-rule | Avoid Artifacts with lines longer than X characters | Definition | Missing | Added | active = true, detached = false |
1020088 | quality-rule | Avoid Artifacts with lines longer than X characters | Quality Contribution to 'Documentation - Style Conformity' (61006) | Missing contribution | Added | critical = false, weight = 2 |
1020090 | quality-rule | Avoid Artifacts with High Depth of Code | Definition | Missing | Added | active = true, detached = false |
1020090 | quality-rule | Avoid Artifacts with High Depth of Code | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | Missing contribution | Added | critical = false, weight = 5 |
1020304 | quality-rule | Implement success and error callbacks when using jquery web service call | Documentation english | description = ...ise $.ajax interface to implement success and error callbacks. This rule is comp... | Updated | description = ...ise $.ajax, $.get, $.getJSON interface to implement success and error callbacks.... |
1020304 | quality-rule | Implement success and error callbacks when using jquery web service call | Documentation english | name = ...hen using $.ajax interface | Updated | name = ...hen using jquery web service call |
AIP 8.3.0 - 8.3.1
This section lists the results of a comparison between a CAST AIP 8.3.0 Assessment Model and the CAST AIP 8.3.1 Assessment Model. You can download the original compare_830_831.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.3.0 Assessment Model | Change | CAST 8.3.1 Assessment Model |
2232 | quality-rule | Pages should use error handling page | Diagnosis | scopeID = 0, propertyID = 0 | Updated | scopeID = 555, propertyID = 140268 |
2232 | quality-rule | Pages should use error handling page | Operation | localSiteDiagnose = DIAG_SCOPE_JSPBEST002 | Updated | localSiteDiagnose = null |
2232 | quality-rule | Pages should use error handling page | Operation | localSiteCountTotal = DIAG_JSP_PAGE_DESC_TOTAL | Updated | localSiteCountTotal = null |
2232 | quality-rule | Pages should use error handling page | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | critical = true, weight = 7 | Updated | weight = 5 |
7250 | quality-rule | Avoid String initialization with String object (created using the 'new' keyword) | Diagnosis | scopeID = 0, propertyID = 0 | Updated | scopeID = 540, propertyID = 140796 |
7250 | quality-rule | Avoid String initialization with String object (created using the 'new' keyword) | Diagnosis | diagnosisValueType = no-value | Updated | diagnosisValueType = integer |
7250 | quality-rule | Avoid String initialization with String object (created using the 'new' keyword) | Operation | localSiteDiagnose = DIAG_SCOPE_JAVAEMEM007 | Updated | localSiteDiagnose = null |
7250 | quality-rule | Avoid String initialization with String object (created using the 'new' keyword) | Operation | localSiteCountTotal = DIAG_JAVA_NA_ARTIFACT_TOTAL | Updated | localSiteCountTotal = null |
7510 | quality-rule | Use only Hibernate API to access to the database | Diagnosis | scopeID = 0, propertyID = 0 | Updated | scopeID = 554, propertyID = 140792 |
7510 | quality-rule | Use only Hibernate API to access to the database | Operation | localSiteDiagnose = DIAG_SCOPE_JEEAHML002 | Updated | localSiteDiagnose = null |
7510 | quality-rule | Use only Hibernate API to access to the database | Operation | localSiteCountTotal = DIAG_JEE_ANA_API_TOTAL | Updated | localSiteCountTotal = null |
7518 | quality-rule | Avoid missing WHEN OTHERS in CASE statements | Documentation english | description = ...ment with a missing WHEN OTHERS. | Updated | description = ...ment with no or with an empty WHEN OTHERS clause. |
8082 | quality-rule | Avoid Tables without Primary Key | Diagnosis | scopeID = 400, propertyID = 140202 | Updated | scopeID = 0, propertyID = 0 |
8082 | quality-rule | Avoid Tables without Primary Key | Operation | localSiteDiagnose = null | Updated | localSiteDiagnose = DIA_MANY_TABNOTINPKEY |
8082 | quality-rule | Avoid Tables without Primary Key | Operation | localSiteCountTotal = null | Updated | localSiteCountTotal = DIT_MANY_TABLES |
8112 | quality-rule | Avoid improper processing of the execution status of data handling operations | Technologies | [JEE] | Updated | Added: [C#, VB.NET] |
8116 | quality-rule | Avoid calling system function (CALL 'cfunc') | Activation | active = false, detached = false | Updated | active = true |
8118 | quality-rule | Avoid using the RFC_ABAP_INSTALL_AND_RUN function | Activation | active = false, detached = false | Updated | active = true |
8120 | quality-rule | Avoid using CALL FUNCTION without error handling | Activation | active = false, detached = false | Updated | active = true |
8120 | quality-rule | Avoid using CALL FUNCTION without error handling | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | critical = true, weight = 9 | Updated | critical = false, weight = 8 |
8122 | quality-rule | Avoid using CALL METHOD without error handling | Activation | active = false, detached = false | Updated | active = true |
8122 | quality-rule | Avoid using CALL METHOD without error handling | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | critical = true, weight = 9 | Updated | critical = false, weight = 8 |
8124 | quality-rule | Do not use function module DB_EXISTS_INDEX (HANA) | Activation | active = false, detached = false | Updated | active = true |
8124 | quality-rule | Do not use function module DB_EXISTS_INDEX (HANA) | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | critical = true, weight = 9 | Updated | critical = false, weight = 7 |
8126 | quality-rule | Avoid using empty SELECT ... ENDSELECT loop | Activation | active = false, detached = false | Updated | active = true |
8126 | quality-rule | Avoid using empty SELECT ... ENDSELECT loop | Documentation english | remediationSample = ...CT SINGLE * FROM sflight INTO ls_flight WHERE carrid EQ lv_carrid AND connid ... | Updated | remediationSample = ...CT SINGLE flnam FROM sflight INTO ls_flight WHERE carrid EQ lv_carrid AND con... |
8126 | quality-rule | Avoid using empty SELECT ... ENDSELECT loop | Documentation english | sample = SELECT * FROM sflight INTO ls_flight WHERE carrid EQ lv_carrid AND connid EQ l... | Updated | sample = SELECT flnam FROM sflight INTO ls_flight WHERE carrid EQ lv_carrid AND connid... |
8128 | quality-rule | Avoid using UPDATE and DELETE without WHERE condition | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = true, weight = 9 | Removed | Missing contribution |
8130 | quality-rule | Avoid using database hints | Activation | active = false, detached = false | Updated | active = true |
8130 | quality-rule | Avoid using database hints | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = true, weight = 9 | Updated | critical = false, weight = 7 |
8132 | quality-rule | Avoid using CHECK, EXIT,or RETURN in SELECT ... ENDSELECT loops | Activation | active = false, detached = false | Updated | active = true |
8134 | quality-rule | Avoid unsorted data after SELECT queries | Activation | active = false, detached = false | Updated | active = true |
8140 | quality-rule | Subscripts and iterators must be defined with BINARY usage | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = false, weight = 5 |
8140 | quality-rule | Subscripts and iterators must be defined with BINARY usage | Quality Contribution to 'Efficiency - Expensive Calls in Loops' (66068) | critical = false, weight = 3 | Removed | Missing contribution |
8142 | quality-rule | Prefer using indexes instead of subscripts | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = false, weight = 5 |
8142 | quality-rule | Prefer using indexes instead of subscripts | Quality Contribution to 'Efficiency - Expensive Calls in Loops' (66068) | critical = false, weight = 3 | Removed | Missing contribution |
8144 | quality-rule | Avoid using INITIALIZE statement on data structures | Quality Contribution to 'Efficiency - Memory, Network and Disk Space Management' (61018) | critical = false, weight = 4 | Removed | Missing contribution |
8144 | quality-rule | Avoid using INITIALIZE statement on data structures | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | Missing contribution | Added | critical = false, weight = 5 |
8148 | quality-rule | Avoid artifacts having Incorrect Type Conversion or Cast | Quality Contribution to 'Complexity - Dynamic Instantiation' (61029) | Missing contribution | Added | critical = true, weight = 8 |
8148 | quality-rule | Avoid artifacts having Incorrect Type Conversion or Cast | Quality Contribution to 'Secure Coding - Encapsulation' (66066) | critical = true, weight = 8 | Removed | Missing contribution |
8400 | quality-rule | Avoid having lock on this object | Definition | Missing | Added | active = true, detached = true |
8402 | quality-rule | All types of a serializable class must be serializable | Definition | Missing | Added | active = true, detached = false |
8402 | quality-rule | All types of a serializable class must be serializable | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | Missing contribution | Added | critical = false, weight = 5 |
AIP 8.2.6 - 8.3.0
This section lists the results of a comparison between a CAST AIP 8.2.6 Assessment Model and the CAST AIP 8.3.0 Assessment Model. You can download the original compare_826_830.xlsx file (which you should open in Microsoft Excel) if you prefer.
Metric | Type | Name | Topic | CAST 8.2.6 Assessment Model | Change | CAST 8.3.0 Assessment Model |
574 | quality-rule | Avoid large Methods/Functions - too many Lines of Code (C++) | Definition | active = true, detached = true | Removed | Missing |
574 | quality-rule | Avoid large Methods/Functions - too many Lines of Code (C++) | Quality Contribution to 'Volume - Number of LOC' (61023) | critical = false, weight = 6 | Removed | Missing contribution |
596 | quality-rule | Avoid unreferenced Classes (C++) | Definition | active = true, detached = true | Removed | Missing |
596 | quality-rule | Avoid unreferenced Classes (C++) | Quality Contribution to 'Dead code (static)' (61027) | critical = false, weight = 4 | Removed | Missing contribution |
598 | quality-rule | Avoid unreferenced Methods (C++) | Definition | active = true, detached = true | Removed | Missing |
598 | quality-rule | Avoid unreferenced Methods (C++) | Quality Contribution to 'Dead code (static)' (61027) | critical = false, weight = 4 | Removed | Missing contribution |
600 | quality-rule | Avoid unreferenced Data Members (C++) | Definition | active = true, detached = true | Removed | Missing |
600 | quality-rule | Avoid unreferenced Data Members (C++) | Quality Contribution to 'Dead code (static)' (61027) | critical = false, weight = 2 | Removed | Missing contribution |
602 | quality-rule | Avoid undocumented Functions, Methods, Constructors, and Destructors (C++) | Definition | active = true, detached = true | Removed | Missing |
602 | quality-rule | Avoid undocumented Functions, Methods, Constructors, and Destructors (C++) | Quality Contribution to 'Documentation - Volume of Comments' (61028) | critical = false, weight = 8 | Removed | Missing contribution |
604 | quality-rule | Avoid undocumented Classes (C++) | Definition | active = true, detached = true | Removed | Missing |
604 | quality-rule | Avoid undocumented Classes (C++) | Quality Contribution to 'Documentation - Volume of Comments' (61028) | critical = false, weight = 8 | Removed | Missing contribution |
606 | quality-rule | Avoid Functions, Methods, Constructors, and Destructors with a very low comment/code ratio (C++) | Definition | active = true, detached = true | Removed | Missing |
606 | quality-rule | Avoid Functions, Methods, Constructors, and Destructors with a very low comment/code ratio (C++) | Quality Contribution to 'Documentation - Volume of Comments' (61028) | critical = false, weight = 3 | Removed | Missing contribution |
608 | quality-rule | Avoid Classes with a very low comment/code ratio (C++) | Definition | active = true, detached = true | Removed | Missing |
608 | quality-rule | Avoid Classes with a very low comment/code ratio (C++) | Quality Contribution to 'Documentation - Volume of Comments' (61028) | critical = false, weight = 3 | Removed | Missing contribution |
612 | quality-rule | Avoid included files including other files (C++) | Definition | active = true, detached = true | Removed | Missing |
612 | quality-rule | Avoid included files including other files (C++) | Quality Contribution to 'Programming Practices - File Organization Conformity' (61015) | critical = false, weight = 6 | Removed | Missing contribution |
614 | quality-rule | Avoid direct usage of database tables (C++) | Definition | active = true, detached = true | Removed | Missing |
614 | quality-rule | Avoid direct usage of database tables (C++) | Quality Contribution to 'Architecture - Multi-Layers and Data Access' (61001) | critical = true, weight = 8 | Removed | Missing contribution |
636 | quality-rule | Avoid Artifacts with High Fan-In (C++) | Definition | active = true, detached = true | Removed | Missing |
636 | quality-rule | Avoid Artifacts with High Fan-In (C++) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 4 | Removed | Missing contribution |
638 | quality-rule | Avoid High Response for a Class (C++) | Definition | active = true, detached = true | Removed | Missing |
638 | quality-rule | Avoid High Response for a Class (C++) | Quality Contribution to 'Volume - Number of Components' (61022) | critical = false, weight = 8 | Removed | Missing contribution |
640 | quality-rule | Avoid Artifacts with High Fan-Out (C++) | Definition | active = true, detached = true | Removed | Missing |
640 | quality-rule | Avoid Artifacts with High Fan-Out (C++) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 4 | Removed | Missing contribution |
642 | quality-rule | Avoid Artifacts with High Integration Complexity (C++) | Definition | active = true, detached = true | Removed | Missing |
642 | quality-rule | Avoid Artifacts with High Integration Complexity (C++) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 6 | Removed | Missing contribution |
644 | quality-rule | Avoid Classes with High Coupling Between Objects (C++) | Definition | active = true, detached = true | Removed | Missing |
644 | quality-rule | Avoid Classes with High Coupling Between Objects (C++) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 4 | Removed | Missing contribution |
646 | quality-rule | Avoid Classes with a High Lack of Cohesion (C++) | Definition | active = true, detached = true | Removed | Missing |
646 | quality-rule | Avoid Classes with a High Lack of Cohesion (C++) | Quality Contribution to 'Programming Practices - Modularity and OO Encapsulation Conformity' (61020) | critical = false, weight = 7 | Removed | Missing contribution |
648 | quality-rule | Avoid Classes with High Weighted Methods per Class (C++) | Definition | active = true, detached = true | Removed | Missing |
648 | quality-rule | Avoid Classes with High Weighted Methods per Class (C++) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 6 | Removed | Missing contribution |
650 | quality-rule | Avoid Classes with a High Depth of Inheritance Tree (C++) | Definition | active = true, detached = true | Removed | Missing |
650 | quality-rule | Avoid Classes with a High Depth of Inheritance Tree (C++) | Quality Contribution to 'Complexity - OO Inheritance and Polymorphism' (61010) | critical = false, weight = 6 | Removed | Missing contribution |
652 | quality-rule | Avoid Classes with a High Public Data Ratio (C++) | Definition | active = true, detached = true | Removed | Missing |
652 | quality-rule | Avoid Classes with a High Public Data Ratio (C++) | Quality Contribution to 'Programming Practices - Modularity and OO Encapsulation Conformity' (61020) | critical = false, weight = 2 | Removed | Missing contribution |
652 | quality-rule | Avoid Classes with a High Public Data Ratio (C++) | Quality Contribution to 'Secure Coding - Encapsulation' (66066) | critical = false, weight = 2 | Removed | Missing contribution |
654 | quality-rule | Avoid Classes with a High Number Of Children (C++) | Definition | active = true, detached = true | Removed | Missing |
654 | quality-rule | Avoid Classes with a High Number Of Children (C++) | Quality Contribution to 'Complexity - OO Inheritance and Polymorphism' (61010) | critical = false, weight = 5 | Removed | Missing contribution |
656 | quality-rule | Avoid Functions/Methods with queries on too many Tables (C++) | Definition | active = true, detached = true | Removed | Missing |
656 | quality-rule | Avoid Functions/Methods with queries on too many Tables (C++) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 9 | Removed | Missing contribution |
658 | quality-rule | Avoid Functions/Methods with SQL statement using Group By clause (C++) | Definition | active = true, detached = true | Removed | Missing |
658 | quality-rule | Avoid Functions/Methods with SQL statement using Group By clause (C++) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 9 | Removed | Missing contribution |
660 | quality-rule | Avoid Functions/Methods with SQL statement including Subqueries (C++) | Definition | active = true, detached = true | Removed | Missing |
660 | quality-rule | Avoid Functions/Methods with SQL statement including Subqueries (C++) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 9 | Removed | Missing contribution |
662 | quality-rule | Avoid Functions/Methods with a complex SELECT clause (C++) | Definition | active = true, detached = true | Removed | Missing |
662 | quality-rule | Avoid Functions/Methods with a complex SELECT clause (C++) | Quality Contribution to 'Complexity - SQL Queries' (61011) | critical = false, weight = 6 | Removed | Missing contribution |
664 | quality-rule | Avoid Functions/Methods with High RAW SQL Complexity (C++) | Definition | active = true, detached = true | Removed | Missing |
664 | quality-rule | Avoid Functions/Methods with High RAW SQL Complexity (C++) | Quality Contribution to 'Complexity - SQL Queries' (61011) | critical = false, weight = 6 | Removed | Missing contribution |
666 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity (C++) | Definition | active = true, detached = true | Removed | Missing |
666 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity (C++) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 8 | Removed | Missing contribution |
668 | quality-rule | Avoid Artifacts with High Essential Complexity (C++) | Definition | active = true, detached = true | Removed | Missing |
668 | quality-rule | Avoid Artifacts with High Essential Complexity (C++) | Quality Contribution to 'Programming Practices - Structuredness' (61024) | critical = false, weight = 7 | Removed | Missing contribution |
670 | quality-rule | Avoid artifacts with too many parameters (C++) | Definition | active = true, detached = true | Removed | Missing |
670 | quality-rule | Avoid artifacts with too many parameters (C++) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 4 | Removed | Missing contribution |
672 | quality-rule | Avoid Artifacts with lines longer than 80 characters (C++) | Definition | active = true, detached = true | Removed | Missing |
672 | quality-rule | Avoid Artifacts with lines longer than 80 characters (C++) | Quality Contribution to 'Documentation - Style Conformity' (61006) | critical = false, weight = 3 | Removed | Missing contribution |
674 | quality-rule | Avoid Artifacts with High Depth of Code (C++) | Definition | active = true, detached = true | Removed | Missing |
674 | quality-rule | Avoid Artifacts with High Depth of Code (C++) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 6 | Removed | Missing contribution |
676 | quality-rule | Avoid Classes with a High Lack of Cohesion - variant (C++) | Definition | active = true, detached = true | Removed | Missing |
676 | quality-rule | Avoid Classes with a High Lack of Cohesion - variant (C++) | Quality Contribution to 'Programming Practices - Modularity and OO Encapsulation Conformity' (61020) | critical = false, weight = 7 | Removed | Missing contribution |
680 | quality-rule | Avoid Dynamic SQL Objects With Queries on more than 4 Tables (C++) | Definition | active = true, detached = true | Removed | Missing |
680 | quality-rule | Avoid Dynamic SQL Objects With Queries on more than 4 Tables (C++) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 9 | Removed | Missing contribution |
1056 | quality-rule | Avoid large Functions - too many Lines of Code (C Lang.) | Definition | active = true, detached = true | Removed | Missing |
1056 | quality-rule | Avoid large Functions - too many Lines of Code (C Lang.) | Quality Contribution to 'Volume - Number of LOC' (61023) | critical = false, weight = 6 | Removed | Missing contribution |
1064 | quality-rule | Avoid Artifacts with lines longer than 80 characters (C Lang.) | Definition | active = true, detached = true | Removed | Missing |
1064 | quality-rule | Avoid Artifacts with lines longer than 80 characters (C Lang.) | Quality Contribution to 'Documentation - Style Conformity' (61006) | critical = false, weight = 3 | Removed | Missing contribution |
1068 | quality-rule | Avoid Includes in Header Files (C Lang.) | Definition | active = true, detached = true | Removed | Missing |
1068 | quality-rule | Avoid Includes in Header Files (C Lang.) | Quality Contribution to 'Programming Practices - File Organization Conformity' (61015) | critical = false, weight = 6 | Removed | Missing contribution |
1076 | quality-rule | Avoid undocumented Functions (C Lang.) | Definition | active = true, detached = true | Removed | Missing |
1076 | quality-rule | Avoid undocumented Functions (C Lang.) | Quality Contribution to 'Documentation - Volume of Comments' (61028) | critical = false, weight = 8 | Removed | Missing contribution |
1080 | quality-rule | Avoid Functions and Methods with a very low comment/code ratio | Definition | active = true, detached = true | Removed | Missing |
1080 | quality-rule | Avoid Functions and Methods with a very low comment/code ratio | Quality Contribution to 'Documentation - Volume of Comments' (61028) | critical = false, weight = 3 | Removed | Missing contribution |
1086 | quality-rule | Avoid unreferenced Data Members (C Lang.) | Definition | active = true, detached = true | Removed | Missing |
1086 | quality-rule | Avoid unreferenced Data Members (C Lang.) | Quality Contribution to 'Dead code (static)' (61027) | critical = false, weight = 2 | Removed | Missing contribution |
1088 | quality-rule | Avoid unreferenced Functions (C Lang.) | Definition | active = true, detached = true | Removed | Missing |
1088 | quality-rule | Avoid unreferenced Functions (C Lang.) | Quality Contribution to 'Dead code (static)' (61027) | critical = false, weight = 4 | Removed | Missing contribution |
1096 | quality-rule | Avoid direct usage of database Tables (C Lang.) | Definition | active = true, detached = true | Removed | Missing |
1096 | quality-rule | Avoid direct usage of database Tables (C Lang.) | Quality Contribution to 'Architecture - Multi-Layers and Data Access' (61001) | critical = true, weight = 8 | Removed | Missing contribution |
1100 | quality-rule | Never use strcat() function (C Lang.) | Definition | active = true, detached = true | Removed | Missing |
1100 | quality-rule | Never use strcat() function (C Lang.) | Quality Contribution to 'Secure Coding - API Abuse' (66063) | critical = false, weight = 7 | Removed | Missing contribution |
1102 | quality-rule | Avoid Artifacts with High Fan-In (C Lang.) | Definition | active = true, detached = true | Removed | Missing |
1102 | quality-rule | Avoid Artifacts with High Fan-In (C Lang.) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 4 | Removed | Missing contribution |
1104 | quality-rule | Avoid Artifacts with High Fan-Out (C Lang.) | Definition | active = true, detached = true | Removed | Missing |
1104 | quality-rule | Avoid Artifacts with High Fan-Out (C Lang.) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 4 | Removed | Missing contribution |
1106 | quality-rule | Avoid Artifacts with High Integration Complexity (C Lang.) | Definition | active = true, detached = true | Removed | Missing |
1106 | quality-rule | Avoid Artifacts with High Integration Complexity (C Lang.) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 6 | Removed | Missing contribution |
1108 | quality-rule | Avoid Functions with queries on too many Tables (C Lang.) | Definition | active = true, detached = true | Removed | Missing |
1108 | quality-rule | Avoid Functions with queries on too many Tables (C Lang.) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 9 | Removed | Missing contribution |
1110 | quality-rule | Avoid Functions with SQL statement including Subqueries (C Lang.) | Definition | active = true, detached = true | Removed | Missing |
1110 | quality-rule | Avoid Functions with SQL statement including Subqueries (C Lang.) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 7 | Removed | Missing contribution |
1112 | quality-rule | Avoid Functions with SQL statement using Group By clause (C Lang.) | Definition | active = true, detached = true | Removed | Missing |
1112 | quality-rule | Avoid Functions with SQL statement using Group By clause (C Lang.) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 7 | Removed | Missing contribution |
1114 | quality-rule | Avoid Functions with High RAW SQL Complexity (C Lang.) | Definition | active = true, detached = true | Removed | Missing |
1114 | quality-rule | Avoid Functions with High RAW SQL Complexity (C Lang.) | Quality Contribution to 'Complexity - SQL Queries' (61011) | critical = false, weight = 6 | Removed | Missing contribution |
1116 | quality-rule | Avoid Functions with a complex SELECT clause (C Lang.) | Definition | active = true, detached = true | Removed | Missing |
1116 | quality-rule | Avoid Functions with a complex SELECT clause (C Lang.) | Quality Contribution to 'Complexity - SQL Queries' (61011) | critical = false, weight = 6 | Removed | Missing contribution |
1118 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity (C Lang.) | Definition | active = true, detached = true | Removed | Missing |
1118 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity (C Lang.) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 8 | Removed | Missing contribution |
1120 | quality-rule | Avoid artifacts with too many parameters (C Lang.) | Definition | active = true, detached = true | Removed | Missing |
1120 | quality-rule | Avoid artifacts with too many parameters (C Lang.) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 4 | Removed | Missing contribution |
1122 | quality-rule | Avoid Artifacts with High Depth of Code (C Lang.) | Definition | active = true, detached = true | Removed | Missing |
1122 | quality-rule | Avoid Artifacts with High Depth of Code (C Lang.) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 6 | Removed | Missing contribution |
1124 | quality-rule | Avoid Artifacts with High Essential Complexity (C Lang.) | Definition | active = true, detached = true | Removed | Missing |
1124 | quality-rule | Avoid Artifacts with High Essential Complexity (C Lang.) | Quality Contribution to 'Programming Practices - Structuredness' (61024) | critical = false, weight = 7 | Removed | Missing contribution |
1126 | quality-rule | Avoid Dynamic SQL Objects With Queries on more than 4 Tables (C Lang.) | Definition | active = true, detached = true | Removed | Missing |
1126 | quality-rule | Avoid Dynamic SQL Objects With Queries on more than 4 Tables (C Lang.) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 9 | Removed | Missing contribution |
1550 | quality-rule | Table naming convention - prefix control (PL/SQL Oracle) | Definition | active = false, detached = true | Removed | Missing |
1550 | quality-rule | Table naming convention - prefix control (PL/SQL Oracle) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 5 | Removed | Missing contribution |
1552 | quality-rule | View naming convention - prefix control (PL/SQL Oracle) | Definition | active = false, detached = true | Removed | Missing |
1552 | quality-rule | View naming convention - prefix control (PL/SQL Oracle) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 5 | Removed | Missing contribution |
1554 | quality-rule | Stored Procedure naming convention - prefix control (PL/SQL Oracle) | Definition | active = false, detached = true | Removed | Missing |
1554 | quality-rule | Stored Procedure naming convention - prefix control (PL/SQL Oracle) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 5 | Removed | Missing contribution |
1556 | quality-rule | Function naming convention - prefix control (PL/SQL Oracle) | Definition | active = false, detached = true | Removed | Missing |
1556 | quality-rule | Function naming convention - prefix control (PL/SQL Oracle) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 5 | Removed | Missing contribution |
1566 | quality-rule | Trigger naming convention - prefix control (PL/SQL Oracle) | Definition | active = false, detached = true | Removed | Missing |
1566 | quality-rule | Trigger naming convention - prefix control (PL/SQL Oracle) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 5 | Removed | Missing contribution |
1584 | quality-rule | Avoid Artifacts with too many lines of code (PL/SQL Oracle) | Definition | active = true, detached = true | Removed | Missing |
1584 | quality-rule | Avoid Artifacts with too many lines of code (PL/SQL Oracle) | Quality Contribution to 'Volume - Number of LOC' (61023) | critical = false, weight = 6 | Removed | Missing contribution |
1586 | quality-rule | Avoid using GOTO statement (PL/SQL Oracle) | Definition | active = true, detached = true | Removed | Missing |
1586 | quality-rule | Avoid using GOTO statement (PL/SQL Oracle) | Quality Contribution to 'Programming Practices - Structuredness' (61024) | critical = false, weight = 7 | Removed | Missing contribution |
1628 | quality-rule | Avoid unreferenced functions, procedures and package functions & procedures (PL/SQL Oracle) | Definition | active = true, detached = true | Removed | Missing |
1628 | quality-rule | Avoid unreferenced functions, procedures and package functions & procedures (PL/SQL Oracle) | Quality Contribution to 'Dead code (static)' (61027) | critical = false, weight = 4 | Removed | Missing contribution |
1634 | quality-rule | Avoid unreferenced Tables | Technologies | [DB2 Server, SQL Server, PL/SQL, Microsoft T-SQL, Sybase T-SQL] | Updated | Added: [SQL Analyzer] |
1636 | quality-rule | Avoid Artifacts with High Fan-In (PL/SQL Oracle) | Definition | active = true, detached = true | Removed | Missing |
1636 | quality-rule | Avoid Artifacts with High Fan-In (PL/SQL Oracle) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 4 | Removed | Missing contribution |
1638 | quality-rule | Avoid Artifacts with High Integration Complexity (PL/SQL Oracle) | Definition | active = true, detached = true | Removed | Missing |
1638 | quality-rule | Avoid Artifacts with High Integration Complexity (PL/SQL Oracle) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 6 | Removed | Missing contribution |
1640 | quality-rule | Avoid Artifacts with High Fan-Out (PL/SQL Oracle) | Definition | active = true, detached = true | Removed | Missing |
1640 | quality-rule | Avoid Artifacts with High Fan-Out (PL/SQL Oracle) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 4 | Removed | Missing contribution |
1642 | quality-rule | Avoid Functions/Procedures with queries on too many Tables (PL/SQL Oracle) | Definition | active = true, detached = true | Removed | Missing |
1642 | quality-rule | Avoid Functions/Procedures with queries on too many Tables (PL/SQL Oracle) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 9 | Removed | Missing contribution |
1644 | quality-rule | Avoid Functions/Procedures/Triggers with a complex SELECT clause (PL/SQL Oracle) | Definition | active = true, detached = true | Removed | Missing |
1644 | quality-rule | Avoid Functions/Procedures/Triggers with a complex SELECT clause (PL/SQL Oracle) | Quality Contribution to 'Complexity - SQL Queries' (61011) | critical = false, weight = 6 | Removed | Missing contribution |
1646 | quality-rule | Avoid Functions/Procedures with SQL statement using Group By clause (PL/SQL Oracle) | Definition | active = true, detached = true | Removed | Missing |
1646 | quality-rule | Avoid Functions/Procedures with SQL statement using Group By clause (PL/SQL Oracle) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 9 | Removed | Missing contribution |
1648 | quality-rule | Avoid Functions/Procedures with SQL statement including Subqueries (PL/SQL Oracle) | Definition | active = true, detached = true | Removed | Missing |
1648 | quality-rule | Avoid Functions/Procedures with SQL statement including Subqueries (PL/SQL Oracle) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 9 | Removed | Missing contribution |
1650 | quality-rule | Avoid PL/SQL Artifacts with High RAW SQL Complexity (PL/SQL Oracle) | Definition | active = true, detached = true | Removed | Missing |
1650 | quality-rule | Avoid PL/SQL Artifacts with High RAW SQL Complexity (PL/SQL Oracle) | Quality Contribution to 'Complexity - SQL Queries' (61011) | critical = false, weight = 6 | Removed | Missing contribution |
1652 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity (PL/SQL Oracle) | Definition | active = true, detached = true | Removed | Missing |
1652 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity (PL/SQL Oracle) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 8 | Removed | Missing contribution |
1654 | quality-rule | Avoid Artifacts with High Essential Complexity (PL/SQL Oracle) | Definition | active = true, detached = true | Removed | Missing |
1654 | quality-rule | Avoid Artifacts with High Essential Complexity (PL/SQL Oracle) | Quality Contribution to 'Programming Practices - Structuredness' (61024) | critical = false, weight = 7 | Removed | Missing contribution |
1656 | quality-rule | Avoid artifacts with too many parameters (PL/SQL Oracle) | Definition | active = true, detached = true | Removed | Missing |
1656 | quality-rule | Avoid artifacts with too many parameters (PL/SQL Oracle) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 4 | Removed | Missing contribution |
1658 | quality-rule | Avoid Artifacts with lines longer than 80 characters (PL/SQL Oracle) | Definition | active = true, detached = true | Removed | Missing |
1658 | quality-rule | Avoid Artifacts with lines longer than 80 characters (PL/SQL Oracle) | Quality Contribution to 'Documentation - Style Conformity' (61006) | critical = false, weight = 3 | Removed | Missing contribution |
1660 | quality-rule | Avoid Artifacts with High Depth of Code (PL/SQL Oracle) | Definition | active = true, detached = true | Removed | Missing |
1660 | quality-rule | Avoid Artifacts with High Depth of Code (PL/SQL Oracle) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 6 | Removed | Missing contribution |
2240 | quality-rule | Avoid unreferenced JavaScript Functions (JEE) | Definition | active = true, detached = true | Removed | Missing |
2240 | quality-rule | Avoid unreferenced JavaScript Functions (JEE) | Quality Contribution to 'Dead code (static)' (61027) | critical = false, weight = 4 | Removed | Missing contribution |
2246 | quality-rule | Avoid undocumented JavaScript Functions (JSP) | Definition | active = true, detached = true | Removed | Missing |
2246 | quality-rule | Avoid undocumented JavaScript Functions (JSP) | Quality Contribution to 'Documentation - Volume of Comments' (61028) | critical = false, weight = 8 | Removed | Missing contribution |
2250 | quality-rule | Avoid JavaScript Functions having a very low Comment/Code ratio (JSP) | Definition | active = true, detached = true | Removed | Missing |
2250 | quality-rule | Avoid JavaScript Functions having a very low Comment/Code ratio (JSP) | Quality Contribution to 'Documentation - Volume of Comments' (61028) | critical = false, weight = 3 | Removed | Missing contribution |
2252 | quality-rule | Avoid direct access to database Tables (JSP) | Definition | active = true, detached = true | Removed | Missing |
2252 | quality-rule | Avoid direct access to database Tables (JSP) | Quality Contribution to 'Architecture - Multi-Layers and Data Access' (61001) | critical = true, weight = 8 | Removed | Missing contribution |
2256 | quality-rule | Avoid direct access to database Procedures/Functions (JSP) | Definition | active = true, detached = true | Removed | Missing |
2256 | quality-rule | Avoid direct access to database Procedures/Functions (JSP) | Quality Contribution to 'Architecture - Multi-Layers and Data Access' (61001) | critical = false, weight = 8 | Removed | Missing contribution |
2290 | quality-rule | Avoid Artifacts with High Fan-In (JSP) | Definition | active = true, detached = true | Removed | Missing |
2290 | quality-rule | Avoid Artifacts with High Fan-In (JSP) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 4 | Removed | Missing contribution |
2292 | quality-rule | Avoid Artifacts with High Fan-Out (JSP) | Definition | active = true, detached = true | Removed | Missing |
2292 | quality-rule | Avoid Artifacts with High Fan-Out (JSP) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 4 | Removed | Missing contribution |
2294 | quality-rule | Avoid Artifacts with High Integration Complexity (JSP) | Definition | active = true, detached = true | Removed | Missing |
2294 | quality-rule | Avoid Artifacts with High Integration Complexity (JSP) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 6 | Removed | Missing contribution |
2296 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity (JSP) | Definition | active = true, detached = true | Removed | Missing |
2296 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity (JSP) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 8 | Removed | Missing contribution |
2298 | quality-rule | Avoid Artifacts with lines longer than 80 characters (JSP) | Definition | active = true, detached = true | Removed | Missing |
2298 | quality-rule | Avoid Artifacts with lines longer than 80 characters (JSP) | Quality Contribution to 'Documentation - Style Conformity' (61006) | critical = false, weight = 3 | Removed | Missing contribution |
2300 | quality-rule | Avoid artifacts with too many parameters (JSP) | Definition | active = true, detached = true | Removed | Missing |
2300 | quality-rule | Avoid artifacts with too many parameters (JSP) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 4 | Removed | Missing contribution |
2302 | quality-rule | Avoid Artifacts with High Essential Complexity (JSP) | Definition | active = true, detached = true | Removed | Missing |
2302 | quality-rule | Avoid Artifacts with High Essential Complexity (JSP) | Quality Contribution to 'Programming Practices - Structuredness' (61024) | critical = false, weight = 7 | Removed | Missing contribution |
2304 | quality-rule | Avoid Artifacts with High Depth of Code (JSP) | Definition | active = true, detached = true | Removed | Missing |
2304 | quality-rule | Avoid Artifacts with High Depth of Code (JSP) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 6 | Removed | Missing contribution |
2550 | quality-rule | Class Naming convention - character set and case control (Visual Basic) | Definition | active = true, detached = true | Removed | Missing |
2550 | quality-rule | Class Naming convention - character set and case control (Visual Basic) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 2 | Removed | Missing contribution |
2556 | quality-rule | Form Naming convention - prefix control (Visual Basic) | Definition | active = true, detached = true | Removed | Missing |
2556 | quality-rule | Form Naming convention - prefix control (Visual Basic) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 2 | Removed | Missing contribution |
2604 | quality-rule | Avoid undocumented Functions and Methods (Visual Basic) | Definition | active = true, detached = true | Removed | Missing |
2604 | quality-rule | Avoid undocumented Functions and Methods (Visual Basic) | Quality Contribution to 'Documentation - Volume of Comments' (61028) | critical = false, weight = 8 | Removed | Missing contribution |
2610 | quality-rule | Avoid Classes with a very low comment/code ratio (Visual Basic) | Definition | active = true, detached = true | Removed | Missing |
2610 | quality-rule | Avoid Classes with a very low comment/code ratio (Visual Basic) | Quality Contribution to 'Documentation - Volume of Comments' (61028) | critical = false, weight = 3 | Removed | Missing contribution |
2612 | quality-rule | Avoid Direct usage of database Tables (Visual Basic) | Definition | active = true, detached = true | Removed | Missing |
2612 | quality-rule | Avoid Direct usage of database Tables (Visual Basic) | Quality Contribution to 'Architecture - Multi-Layers and Data Access' (61001) | critical = true, weight = 8 | Removed | Missing contribution |
2614 | quality-rule | Avoid undocumented Classes (Visual Basic) | Definition | active = true, detached = true | Removed | Missing |
2614 | quality-rule | Avoid undocumented Classes (Visual Basic) | Quality Contribution to 'Documentation - Volume of Comments' (61028) | critical = false, weight = 8 | Removed | Missing contribution |
2628 | quality-rule | Unreferenced Classes (Visual Basic) | Definition | active = true, detached = true | Removed | Missing |
2628 | quality-rule | Unreferenced Classes (Visual Basic) | Quality Contribution to 'Dead code (static)' (61027) | critical = false, weight = 4 | Removed | Missing contribution |
2630 | quality-rule | Unreferenced Functions and Methods (Visual Basic) | Definition | active = true, detached = true | Removed | Missing |
2630 | quality-rule | Unreferenced Functions and Methods (Visual Basic) | Quality Contribution to 'Dead code (static)' (61027) | critical = false, weight = 4 | Removed | Missing contribution |
2632 | quality-rule | Avoid Artifacts with High Fan-In (Visual Basic) | Definition | active = true, detached = true | Removed | Missing |
2632 | quality-rule | Avoid Artifacts with High Fan-In (Visual Basic) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 4 | Removed | Missing contribution |
2634 | quality-rule | Avoid Artifacts with High Fan-Out (Visual Basic) | Definition | active = true, detached = true | Removed | Missing |
2634 | quality-rule | Avoid Artifacts with High Fan-Out (Visual Basic) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 4 | Removed | Missing contribution |
2636 | quality-rule | Avoid Artifacts with High Integration Complexity (Visual Basic) | Definition | active = true, detached = true | Removed | Missing |
2636 | quality-rule | Avoid Artifacts with High Integration Complexity (Visual Basic) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 6 | Removed | Missing contribution |
2638 | quality-rule | Avoid Classes with High Weighted Methods per Class (Visual Basic) | Definition | active = true, detached = true | Removed | Missing |
2638 | quality-rule | Avoid Classes with High Weighted Methods per Class (Visual Basic) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 6 | Removed | Missing contribution |
2640 | quality-rule | Avoid Classes with a High Depth of Inheritance Tree (Visual Basic) | Definition | active = true, detached = true | Removed | Missing |
2640 | quality-rule | Avoid Classes with a High Depth of Inheritance Tree (Visual Basic) | Quality Contribution to 'Complexity - OO Inheritance and Polymorphism' (61010) | critical = false, weight = 6 | Removed | Missing contribution |
2642 | quality-rule | Avoid Classes with a High Public Data Ratio (Visual Basic) | Definition | active = true, detached = true | Removed | Missing |
2642 | quality-rule | Avoid Classes with a High Public Data Ratio (Visual Basic) | Quality Contribution to 'Programming Practices - Modularity and OO Encapsulation Conformity' (61020) | critical = false, weight = 2 | Removed | Missing contribution |
2642 | quality-rule | Avoid Classes with a High Public Data Ratio (Visual Basic) | Quality Contribution to 'Secure Coding - Encapsulation' (66066) | critical = false, weight = 2 | Removed | Missing contribution |
2644 | quality-rule | Avoid Classes with a High Number Of Children (Visual Basic) | Definition | active = true, detached = true | Removed | Missing |
2644 | quality-rule | Avoid Classes with a High Number Of Children (Visual Basic) | Quality Contribution to 'Complexity - OO Inheritance and Polymorphism' (61010) | critical = false, weight = 5 | Removed | Missing contribution |
2646 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity (Visual Basic) | Definition | active = true, detached = true | Removed | Missing |
2646 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity (Visual Basic) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 8 | Removed | Missing contribution |
2648 | quality-rule | Avoid Artifacts with High Essential Complexity (Visual Basic) | Definition | active = true, detached = true | Removed | Missing |
2648 | quality-rule | Avoid Artifacts with High Essential Complexity (Visual Basic) | Quality Contribution to 'Programming Practices - Structuredness' (61024) | critical = false, weight = 7 | Removed | Missing contribution |
2650 | quality-rule | Avoid artifacts with too many parameters (Visual Basic) | Definition | active = true, detached = true | Removed | Missing |
2650 | quality-rule | Avoid artifacts with too many parameters (Visual Basic) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 4 | Removed | Missing contribution |
2652 | quality-rule | Avoid Artifacts with lines longer than 80 characters (Visual Basic) | Definition | active = true, detached = true | Removed | Missing |
2652 | quality-rule | Avoid Artifacts with lines longer than 80 characters (Visual Basic) | Quality Contribution to 'Documentation - Style Conformity' (61006) | critical = false, weight = 3 | Removed | Missing contribution |
2654 | quality-rule | Avoid Artifacts with High Depth of Code (Visual Basic) | Definition | active = true, detached = true | Removed | Missing |
2654 | quality-rule | Avoid Artifacts with High Depth of Code (Visual Basic) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 6 | Removed | Missing contribution |
3054 | quality-rule | Avoid unreferenced JavaScript Functions (ASP - JavaScript) | Definition | active = true, detached = true | Removed | Missing |
3054 | quality-rule | Avoid unreferenced JavaScript Functions (ASP - JavaScript) | Quality Contribution to 'Dead code (static)' (61027) | critical = false, weight = 4 | Removed | Missing contribution |
3056 | quality-rule | Avoid undocumented JavaScript Functions (ASP - JavaScript) | Definition | active = true, detached = true | Removed | Missing |
3056 | quality-rule | Avoid undocumented JavaScript Functions (ASP - JavaScript) | Quality Contribution to 'Documentation - Volume of Comments' (61028) | critical = false, weight = 8 | Removed | Missing contribution |
3084 | quality-rule | Avoid Artifacts having a very low Comment/Code ratio (ASP - JavaScript VBScript) | Definition | active = true, detached = true | Removed | Missing |
3084 | quality-rule | Avoid Artifacts having a very low Comment/Code ratio (ASP - JavaScript VBScript) | Quality Contribution to 'Documentation - Volume of Comments' (61028) | critical = false, weight = 3 | Removed | Missing contribution |
3104 | quality-rule | Avoid direct use of database objects (ASP - JavaScript) | Definition | active = true, detached = true | Removed | Missing |
3104 | quality-rule | Avoid direct use of database objects (ASP - JavaScript) | Quality Contribution to 'Architecture - Multi-Layers and Data Access' (61001) | critical = false, weight = 8 | Removed | Missing contribution |
3106 | quality-rule | Avoid direct access to database Tables (ASP) | Definition | active = true, detached = true | Removed | Missing |
3106 | quality-rule | Avoid direct access to database Tables (ASP) | Quality Contribution to 'Architecture - Multi-Layers and Data Access' (61001) | critical = true, weight = 8 | Removed | Missing contribution |
3132 | quality-rule | Avoid Artifacts with High Fan-In (ASP) | Definition | active = true, detached = true | Removed | Missing |
3132 | quality-rule | Avoid Artifacts with High Fan-In (ASP) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 4 | Removed | Missing contribution |
3134 | quality-rule | Avoid Artifacts with High Fan-Out (ASP) | Definition | active = true, detached = true | Removed | Missing |
3134 | quality-rule | Avoid Artifacts with High Fan-Out (ASP) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 4 | Removed | Missing contribution |
3136 | quality-rule | Avoid Artifacts with High Integration Complexity (ASP) | Definition | active = true, detached = true | Removed | Missing |
3136 | quality-rule | Avoid Artifacts with High Integration Complexity (ASP) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 6 | Removed | Missing contribution |
3138 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity (ASP) | Definition | active = true, detached = true | Removed | Missing |
3138 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity (ASP) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 8 | Removed | Missing contribution |
3140 | quality-rule | Avoid Artifacts with lines longer than 80 characters (ASP) | Definition | active = true, detached = true | Removed | Missing |
3140 | quality-rule | Avoid Artifacts with lines longer than 80 characters (ASP) | Quality Contribution to 'Documentation - Style Conformity' (61006) | critical = false, weight = 3 | Removed | Missing contribution |
3142 | quality-rule | Avoid artifacts with too many parameters (ASP) | Definition | active = true, detached = true | Removed | Missing |
3142 | quality-rule | Avoid artifacts with too many parameters (ASP) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 4 | Removed | Missing contribution |
3144 | quality-rule | Avoid Artifacts with High Essential Complexity (ASP) | Definition | active = true, detached = true | Removed | Missing |
3144 | quality-rule | Avoid Artifacts with High Essential Complexity (ASP) | Quality Contribution to 'Programming Practices - Structuredness' (61024) | critical = false, weight = 7 | Removed | Missing contribution |
3146 | quality-rule | Avoid Artifacts with High Depth of Code (ASP) | Definition | active = true, detached = true | Removed | Missing |
3146 | quality-rule | Avoid Artifacts with High Depth of Code (ASP) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 6 | Removed | Missing contribution |
3552 | quality-rule | Class naming convention - case and character set control (C# .Net) | Definition | active = true, detached = true | Removed | Missing |
3552 | quality-rule | Class naming convention - case and character set control (C# .Net) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 2 | Removed | Missing contribution |
3556 | quality-rule | Exceptions naming convention - case, character set and suffix control (C# .Net) | Definition | active = true, detached = true | Removed | Missing |
3556 | quality-rule | Exceptions naming convention - case, character set and suffix control (C# .Net) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 2 | Removed | Missing contribution |
3592 | quality-rule | Avoid unreferenced Interfaces (C# .Net) | Definition | active = true, detached = true | Removed | Missing |
3592 | quality-rule | Avoid unreferenced Interfaces (C# .Net) | Quality Contribution to 'Dead code (static)' (61027) | critical = false, weight = 6 | Removed | Missing contribution |
3594 | quality-rule | Avoid unreferenced Classes (C# .Net) | Definition | active = true, detached = true | Removed | Missing |
3594 | quality-rule | Avoid unreferenced Classes (C# .Net) | Quality Contribution to 'Dead code (static)' (61027) | critical = false, weight = 4 | Removed | Missing contribution |
3596 | quality-rule | Avoid uncommented Methods (C# .Net) | Definition | active = true, detached = true | Removed | Missing |
3596 | quality-rule | Avoid uncommented Methods (C# .Net) | Quality Contribution to 'Documentation - Volume of Comments' (61028) | critical = false, weight = 8 | Removed | Missing contribution |
3598 | quality-rule | Avoid uncommented Classes (C# .Net) | Definition | active = true, detached = true | Removed | Missing |
3598 | quality-rule | Avoid uncommented Classes (C# .Net) | Quality Contribution to 'Documentation - Volume of Comments' (61028) | critical = false, weight = 8 | Removed | Missing contribution |
3600 | quality-rule | Avoid Methods with a very low comment/code ratio | Definition | active = true, detached = true | Removed | Missing |
3600 | quality-rule | Avoid Methods with a very low comment/code ratio | Quality Contribution to 'Documentation - Volume of Comments' (61028) | critical = false, weight = 3 | Removed | Missing contribution |
3602 | quality-rule | Avoid Classes with a very low comment/code ratio (C# .Net) | Definition | active = true, detached = true | Removed | Missing |
3602 | quality-rule | Avoid Classes with a very low comment/code ratio (C# .Net) | Quality Contribution to 'Documentation - Volume of Comments' (61028) | critical = false, weight = 3 | Removed | Missing contribution |
3622 | quality-rule | Avoid direct access to Database Tables (C# .Net) | Definition | active = true, detached = true | Removed | Missing |
3622 | quality-rule | Avoid direct access to Database Tables (C# .Net) | Quality Contribution to 'Architecture - Multi-Layers and Data Access' (61001) | critical = true, weight = 8 | Removed | Missing contribution |
3624 | quality-rule | Avoid uncommented Interfaces (C# .Net) | Definition | active = true, detached = true | Removed | Missing |
3624 | quality-rule | Avoid uncommented Interfaces (C# .Net) | Quality Contribution to 'Documentation - Volume of Comments' (61028) | critical = false, weight = 8 | Removed | Missing contribution |
3628 | quality-rule | Avoid Superclass knowing Subclass (C# .Net) | Definition | active = true, detached = true | Removed | Missing |
3628 | quality-rule | Avoid Superclass knowing Subclass (C# .Net) | Quality Contribution to 'Programming Practices - OO Inheritance and Polymorphism' (61003) | critical = false, weight = 9 | Removed | Missing contribution |
3632 | quality-rule | Avoid Artifacts with High Fan-In (C# .Net) | Definition | active = true, detached = true | Removed | Missing |
3632 | quality-rule | Avoid Artifacts with High Fan-In (C# .Net) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 4 | Removed | Missing contribution |
3634 | quality-rule | Avoid Classes with a High Lack of Cohesion - variant (C# .Net) | Definition | active = true, detached = true | Removed | Missing |
3634 | quality-rule | Avoid Classes with a High Lack of Cohesion - variant (C# .Net) | Quality Contribution to 'Programming Practices - Modularity and OO Encapsulation Conformity' (61020) | critical = false, weight = 7 | Removed | Missing contribution |
3636 | quality-rule | Avoid Artifacts with High Integration Complexity (C# .Net) | Definition | active = true, detached = true | Removed | Missing |
3636 | quality-rule | Avoid Artifacts with High Integration Complexity (C# .Net) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 6 | Removed | Missing contribution |
3638 | quality-rule | Avoid Classes with a High Lack of Cohesion (C# .Net) | Definition | active = true, detached = true | Removed | Missing |
3638 | quality-rule | Avoid Classes with a High Lack of Cohesion (C# .Net) | Quality Contribution to 'Programming Practices - Modularity and OO Encapsulation Conformity' (61020) | critical = false, weight = 7 | Removed | Missing contribution |
3640 | quality-rule | Avoid Artifacts with High Fan-Out (C# .Net) | Definition | active = true, detached = true | Removed | Missing |
3640 | quality-rule | Avoid Artifacts with High Fan-Out (C# .Net) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 4 | Removed | Missing contribution |
3642 | quality-rule | Avoid Classes with High Coupling Between Objects (C# .Net) | Definition | active = true, detached = true | Removed | Missing |
3642 | quality-rule | Avoid Classes with High Coupling Between Objects (C# .Net) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 4 | Removed | Missing contribution |
3644 | quality-rule | Avoid High Response for a Class (C# .Net) | Definition | active = true, detached = true | Removed | Missing |
3644 | quality-rule | Avoid High Response for a Class (C# .Net) | Quality Contribution to 'Volume - Number of Components' (61022) | critical = false, weight = 8 | Removed | Missing contribution |
3646 | quality-rule | Avoid Classes with High Weighted Methods per Class (C# .Net) | Definition | active = true, detached = true | Removed | Missing |
3646 | quality-rule | Avoid Classes with High Weighted Methods per Class (C# .Net) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 6 | Removed | Missing contribution |
3648 | quality-rule | Avoid Classes with a High Depth of Inheritance Tree (C# .Net) | Definition | active = true, detached = true | Removed | Missing |
3648 | quality-rule | Avoid Classes with a High Depth of Inheritance Tree (C# .Net) | Quality Contribution to 'Complexity - OO Inheritance and Polymorphism' (61010) | critical = false, weight = 6 | Removed | Missing contribution |
3650 | quality-rule | Avoid Classes with a High Public Data Ratio (C# .Net) | Definition | active = true, detached = true | Removed | Missing |
3650 | quality-rule | Avoid Classes with a High Public Data Ratio (C# .Net) | Quality Contribution to 'Programming Practices - Modularity and OO Encapsulation Conformity' (61020) | critical = false, weight = 2 | Removed | Missing contribution |
3650 | quality-rule | Avoid Classes with a High Public Data Ratio (C# .Net) | Quality Contribution to 'Secure Coding - Encapsulation' (66066) | critical = false, weight = 2 | Removed | Missing contribution |
3652 | quality-rule | Avoid Classes with a High Number Of Children (C# .Net) | Definition | active = true, detached = true | Removed | Missing |
3652 | quality-rule | Avoid Classes with a High Number Of Children (C# .Net) | Quality Contribution to 'Complexity - OO Inheritance and Polymorphism' (61010) | critical = false, weight = 5 | Removed | Missing contribution |
3654 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity (C# .Net) | Definition | active = true, detached = true | Removed | Missing |
3654 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity (C# .Net) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 8 | Removed | Missing contribution |
3656 | quality-rule | Avoid Artifacts with High Depth of Code (C# .Net) | Definition | active = true, detached = true | Removed | Missing |
3656 | quality-rule | Avoid Artifacts with High Depth of Code (C# .Net) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 6 | Removed | Missing contribution |
3658 | quality-rule | Avoid Artifacts with lines longer than 80 characters (C# .Net) | Definition | active = true, detached = true | Removed | Missing |
3658 | quality-rule | Avoid Artifacts with lines longer than 80 characters (C# .Net) | Quality Contribution to 'Documentation - Style Conformity' (61006) | critical = false, weight = 2 | Removed | Missing contribution |
3660 | quality-rule | Avoid artifacts with too many parameters (C# .Net) | Definition | active = true, detached = true | Removed | Missing |
3660 | quality-rule | Avoid artifacts with too many parameters (C# .Net) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 4 | Removed | Missing contribution |
3662 | quality-rule | Avoid Artifacts with High Essential Complexity (C# .Net) | Definition | active = true, detached = true | Removed | Missing |
3662 | quality-rule | Avoid Artifacts with High Essential Complexity (C# .Net) | Quality Contribution to 'Programming Practices - Structuredness' (61024) | critical = false, weight = 7 | Removed | Missing contribution |
4050 | quality-rule | Avoid Tables access directly from client-side SQL queries (SQL Server) | Definition | active = false, detached = true | Removed | Missing |
4052 | quality-rule | Avoid tables not involved in a Foreign Key (SQL Server) | Definition | active = true, detached = true | Removed | Missing |
4052 | quality-rule | Avoid tables not involved in a Foreign Key (SQL Server) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 9 | Removed | Missing contribution |
4068 | quality-rule | Avoid Tables with more than 20 columns on an OLTP system (SQL Server) | Definition | active = true, detached = true | Removed | Missing |
4068 | quality-rule | Avoid Tables with more than 20 columns on an OLTP system (SQL Server) | Quality Contribution to 'Volume - Number of Components' (61022) | critical = false, weight = 7 | Removed | Missing contribution |
4072 | quality-rule | Avoid using GOTO statement (SQL Server) | Definition | active = true, detached = true | Removed | Missing |
4072 | quality-rule | Avoid using GOTO statement (SQL Server) | Quality Contribution to 'Programming Practices - Structuredness' (61024) | critical = false, weight = 7 | Removed | Missing contribution |
4078 | quality-rule | Stored Procedure naming convention - prefix control (SQL Server) | Definition | active = false, detached = true | Removed | Missing |
4078 | quality-rule | Stored Procedure naming convention - prefix control (SQL Server) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 5 | Removed | Missing contribution |
4080 | quality-rule | Trigger naming convention - prefix control (SQL Server) | Definition | active = false, detached = true | Removed | Missing |
4080 | quality-rule | Trigger naming convention - prefix control (SQL Server) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 5 | Removed | Missing contribution |
4092 | quality-rule | Avoid using Cursors (SQL Server) | Definition | active = true, detached = true | Removed | Missing |
4092 | quality-rule | Avoid using Cursors (SQL Server) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 9 | Removed | Missing contribution |
4104 | quality-rule | Avoid long Table names (SQL Server) | Definition | active = true, detached = true | Removed | Missing |
4104 | quality-rule | Avoid long Table names (SQL Server) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 2 | Removed | Missing contribution |
4106 | quality-rule | Avoid long View names (SQL Server) | Definition | active = true, detached = true | Removed | Missing |
4106 | quality-rule | Avoid long View names (SQL Server) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 2 | Removed | Missing contribution |
4112 | quality-rule | Table naming convention - prefix control (SQL Server) | Definition | active = false, detached = true | Removed | Missing |
4112 | quality-rule | Table naming convention - prefix control (SQL Server) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 5 | Removed | Missing contribution |
4114 | quality-rule | View naming convention - prefix control (SQL Server) | Definition | active = false, detached = true | Removed | Missing |
4114 | quality-rule | View naming convention - prefix control (SQL Server) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 5 | Removed | Missing contribution |
4132 | quality-rule | Avoid Artifacts with High Fan-In (SQL Server) | Definition | active = true, detached = true | Removed | Missing |
4132 | quality-rule | Avoid Artifacts with High Fan-In (SQL Server) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 4 | Removed | Missing contribution |
4134 | quality-rule | Avoid Artifacts with High Fan-Out (SQL Server) | Definition | active = true, detached = true | Removed | Missing |
4134 | quality-rule | Avoid Artifacts with High Fan-Out (SQL Server) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 4 | Removed | Missing contribution |
4136 | quality-rule | Avoid Artifacts with High Integration Complexity (SQL Server) | Definition | active = true, detached = true | Removed | Missing |
4136 | quality-rule | Avoid Artifacts with High Integration Complexity (SQL Server) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 6 | Removed | Missing contribution |
4138 | quality-rule | Avoid Functions/Procedures with queries on too many Tables (SQL Server) | Definition | active = true, detached = true | Removed | Missing |
4138 | quality-rule | Avoid Functions/Procedures with queries on too many Tables (SQL Server) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 9 | Removed | Missing contribution |
4140 | quality-rule | Avoid Functions/Procedures with a complex SELECT clause (SQL Server) | Definition | active = true, detached = true | Removed | Missing |
4140 | quality-rule | Avoid Functions/Procedures with a complex SELECT clause (SQL Server) | Quality Contribution to 'Complexity - SQL Queries' (61011) | critical = false, weight = 6 | Removed | Missing contribution |
4142 | quality-rule | Avoid Functions/Procedures with High RAW SQL Complexity (SQL Server) | Definition | active = true, detached = true | Removed | Missing |
4142 | quality-rule | Avoid Functions/Procedures with High RAW SQL Complexity (SQL Server) | Quality Contribution to 'Complexity - SQL Queries' (61011) | critical = false, weight = 6 | Removed | Missing contribution |
4144 | quality-rule | Avoid Functions/Procedures with SQL statement using Group By clause (SQL Server) | Definition | active = true, detached = true | Removed | Missing |
4144 | quality-rule | Avoid Functions/Procedures with SQL statement using Group By clause (SQL Server) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 9 | Removed | Missing contribution |
4146 | quality-rule | Avoid Functions/Procedures with SQL statement including Subqueries (SQL Server) | Definition | active = true, detached = true | Removed | Missing |
4146 | quality-rule | Avoid Functions/Procedures with SQL statement including Subqueries (SQL Server) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 9 | Removed | Missing contribution |
4148 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity (SQL Server) | Definition | active = true, detached = true | Removed | Missing |
4148 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity (SQL Server) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 8 | Removed | Missing contribution |
4150 | quality-rule | Avoid Artifacts with High Essential Complexity (SQL Server) | Definition | active = true, detached = true | Removed | Missing |
4150 | quality-rule | Avoid Artifacts with High Essential Complexity (SQL Server) | Quality Contribution to 'Programming Practices - Structuredness' (61024) | critical = false, weight = 7 | Removed | Missing contribution |
4152 | quality-rule | Avoid Artifacts with too many parameters (SQL Server) | Definition | active = true, detached = true | Removed | Missing |
4152 | quality-rule | Avoid Artifacts with too many parameters (SQL Server) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 4 | Removed | Missing contribution |
4154 | quality-rule | Avoid Artifacts with lines longer than 80 characters (SQL Server) | Definition | active = true, detached = true | Removed | Missing |
4154 | quality-rule | Avoid Artifacts with lines longer than 80 characters (SQL Server) | Quality Contribution to 'Documentation - Style Conformity' (61006) | critical = false, weight = 3 | Removed | Missing contribution |
4156 | quality-rule | Avoid Artifacts with High Depth of Code (SQL Server) | Definition | active = true, detached = true | Removed | Missing |
4156 | quality-rule | Avoid Artifacts with High Depth of Code (SQL Server) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 6 | Removed | Missing contribution |
4564 | quality-rule | Avoid large Methods - too many Lines of Code (JEE) | Definition | active = true, detached = true | Removed | Missing |
4564 | quality-rule | Avoid large Methods - too many Lines of Code (JEE) | Quality Contribution to 'Volume - Number of LOC' (61023) | critical = false, weight = 6 | Removed | Missing contribution |
4582 | quality-rule | Avoid unreferenced Interfaces (JEE) | Definition | active = true, detached = true | Removed | Missing |
4582 | quality-rule | Avoid unreferenced Interfaces (JEE) | Quality Contribution to 'Dead code (static)' (61027) | critical = false, weight = 6 | Removed | Missing contribution |
4584 | quality-rule | Avoid unreferenced Classes (JEE) | Definition | active = true, detached = true | Removed | Missing |
4584 | quality-rule | Avoid unreferenced Classes (JEE) | Quality Contribution to 'Dead code (static)' (61027) | critical = false, weight = 4 | Removed | Missing contribution |
4586 | quality-rule | Avoid unreferenced Methods (JEE) | Definition | active = true, detached = true | Removed | Missing |
4586 | quality-rule | Avoid unreferenced Methods (JEE) | Quality Contribution to 'Dead code (static)' (61027) | critical = false, weight = 4 | Removed | Missing contribution |
4588 | quality-rule | Avoid unreferenced Fields (JEE) | Definition | active = true, detached = true | Removed | Missing |
4588 | quality-rule | Avoid unreferenced Fields (JEE) | Quality Contribution to 'Dead code (static)' (61027) | critical = false, weight = 4 | Removed | Missing contribution |
4590 | quality-rule | Avoid hiding attributes (JEE) | Definition | active = true, detached = true | Removed | Missing |
4590 | quality-rule | Avoid hiding attributes (JEE) | Quality Contribution to 'Programming Practices - OO Inheritance and Polymorphism' (61003) | critical = false, weight = 6 | Removed | Missing contribution |
4620 | quality-rule | Avoid empty catch blocks (JEE) | Definition | active = true, detached = true | Removed | Missing |
4620 | quality-rule | Avoid empty catch blocks (JEE) | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | critical = true, weight = 6 | Removed | Missing contribution |
4622 | quality-rule | Avoid empty finally blocks (JEE) | Definition | active = true, detached = true | Removed | Missing |
4622 | quality-rule | Avoid empty finally blocks (JEE) | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | critical = false, weight = 6 | Removed | Missing contribution |
4624 | quality-rule | Avoid return statements in finally blocks (JEE) | Definition | active = true, detached = true | Removed | Missing |
4624 | quality-rule | Avoid return statements in finally blocks (JEE) | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | critical = false, weight = 6 | Removed | Missing contribution |
4626 | quality-rule | Avoid missing default in switch statements (JEE) | Definition | active = true, detached = true | Removed | Missing |
4626 | quality-rule | Avoid missing default in switch statements (JEE) | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | critical = false, weight = 8 | Removed | Missing contribution |
4654 | quality-rule | Avoid throwing an exception of type Exception (JEE) | Definition | active = true, detached = true | Removed | Missing |
4654 | quality-rule | Avoid throwing an exception of type Exception (JEE) | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | critical = false, weight = 8 | Removed | Missing contribution |
4658 | quality-rule | Avoid catching an exception of type Exception, RuntimeException, or Throwable (JEE) | Definition | active = true, detached = true | Removed | Missing |
4658 | quality-rule | Avoid catching an exception of type Exception, RuntimeException, or Throwable (JEE) | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | critical = false, weight = 8 | Removed | Missing contribution |
4714 | quality-rule | Avoid Superclass knowing Subclass (JEE) | Definition | active = true, detached = true | Removed | Missing |
4714 | quality-rule | Avoid Superclass knowing Subclass (JEE) | Quality Contribution to 'Programming Practices - OO Inheritance and Polymorphism' (61003) | critical = false, weight = 9 | Removed | Missing contribution |
4748 | quality-rule | Avoid Artifacts with High Fan-In (JEE) | Definition | active = true, detached = true | Removed | Missing |
4748 | quality-rule | Avoid Artifacts with High Fan-In (JEE) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 4 | Removed | Missing contribution |
4750 | quality-rule | Avoid Classes with a High Lack of Cohesion (JEE) | Definition | active = true, detached = true | Removed | Missing |
4750 | quality-rule | Avoid Classes with a High Lack of Cohesion (JEE) | Quality Contribution to 'Programming Practices - Modularity and OO Encapsulation Conformity' (61020) | critical = false, weight = 7 | Removed | Missing contribution |
4752 | quality-rule | Avoid Artifacts with High Fan-Out (JEE) | Definition | active = true, detached = true | Removed | Missing |
4752 | quality-rule | Avoid Artifacts with High Fan-Out (JEE) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 4 | Removed | Missing contribution |
4754 | quality-rule | Avoid Classes with High Coupling Between Objects (JEE) | Definition | active = true, detached = true | Removed | Missing |
4754 | quality-rule | Avoid Classes with High Coupling Between Objects (JEE) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 4 | Removed | Missing contribution |
4756 | quality-rule | Avoid High Response for a Class (JEE) | Definition | active = true, detached = true | Removed | Missing |
4756 | quality-rule | Avoid High Response for a Class (JEE) | Quality Contribution to 'Volume - Number of Components' (61022) | critical = false, weight = 8 | Removed | Missing contribution |
4758 | quality-rule | Avoid Artifacts with High Integration Complexity (JEE) | Definition | active = true, detached = true | Removed | Missing |
4758 | quality-rule | Avoid Artifacts with High Integration Complexity (JEE) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 6 | Removed | Missing contribution |
4760 | quality-rule | Avoid Classes with a High Lack of Cohesion - variant (JEE) | Definition | active = true, detached = true | Removed | Missing |
4760 | quality-rule | Avoid Classes with a High Lack of Cohesion - variant (JEE) | Quality Contribution to 'Programming Practices - Modularity and OO Encapsulation Conformity' (61020) | critical = false, weight = 7 | Removed | Missing contribution |
4762 | quality-rule | Avoid Classes with High Weighted Methods per Class (JEE) | Definition | active = true, detached = true | Removed | Missing |
4762 | quality-rule | Avoid Classes with High Weighted Methods per Class (JEE) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 6 | Removed | Missing contribution |
4764 | quality-rule | Avoid Classes with a High Depth of Inheritance Tree (JEE) | Definition | active = true, detached = true | Removed | Missing |
4764 | quality-rule | Avoid Classes with a High Depth of Inheritance Tree (JEE) | Quality Contribution to 'Complexity - OO Inheritance and Polymorphism' (61010) | critical = false, weight = 6 | Removed | Missing contribution |
4766 | quality-rule | Avoid Classes with a High Number Of Children (JEE) | Definition | active = true, detached = true | Removed | Missing |
4766 | quality-rule | Avoid Classes with a High Number Of Children (JEE) | Quality Contribution to 'Complexity - OO Inheritance and Polymorphism' (61010) | critical = false, weight = 5 | Removed | Missing contribution |
4768 | quality-rule | Avoid Classes with a High Public Data Ratio (JEE) | Definition | active = true, detached = true | Removed | Missing |
4768 | quality-rule | Avoid Classes with a High Public Data Ratio (JEE) | Quality Contribution to 'Programming Practices - Modularity and OO Encapsulation Conformity' (61020) | critical = false, weight = 2 | Removed | Missing contribution |
4768 | quality-rule | Avoid Classes with a High Public Data Ratio (JEE) | Quality Contribution to 'Secure Coding - Encapsulation' (66066) | critical = false, weight = 2 | Removed | Missing contribution |
4770 | quality-rule | Avoid SQL Artifacts with queries on too many Tables (JEE) | Definition | active = true, detached = true | Removed | Missing |
4770 | quality-rule | Avoid SQL Artifacts with queries on too many Tables (JEE) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 9 | Removed | Missing contribution |
4772 | quality-rule | Avoid SQL Artifacts with SQL statement including Subqueries (JEE) | Definition | active = true, detached = true | Removed | Missing |
4772 | quality-rule | Avoid SQL Artifacts with SQL statement including Subqueries (JEE) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 7 | Removed | Missing contribution |
4774 | quality-rule | Avoid SQL Artifacts with High RAW SQL Complexity (JEE) | Definition | active = true, detached = true | Removed | Missing |
4774 | quality-rule | Avoid SQL Artifacts with High RAW SQL Complexity (JEE) | Quality Contribution to 'Complexity - SQL Queries' (61011) | critical = false, weight = 6 | Removed | Missing contribution |
4776 | quality-rule | Avoid Artifacts with a complex SELECT clause (JEE) | Definition | active = true, detached = true | Removed | Missing |
4776 | quality-rule | Avoid Artifacts with a complex SELECT clause (JEE) | Quality Contribution to 'Complexity - SQL Queries' (61011) | critical = false, weight = 6 | Removed | Missing contribution |
4778 | quality-rule | Avoid SQL Artifacts with SQL statement using Group By clause (JEE) | Definition | active = true, detached = true | Removed | Missing |
4778 | quality-rule | Avoid SQL Artifacts with SQL statement using Group By clause (JEE) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 7 | Removed | Missing contribution |
4780 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity (JEE) | Definition | active = true, detached = true | Removed | Missing |
4780 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity (JEE) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 8 | Removed | Missing contribution |
4782 | quality-rule | Avoid Artifacts with High Depth of Code (JEE) | Definition | active = true, detached = true | Removed | Missing |
4782 | quality-rule | Avoid Artifacts with High Depth of Code (JEE) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 6 | Removed | Missing contribution |
4784 | quality-rule | Avoid Artifacts with lines longer than 80 characters (JEE) | Definition | active = true, detached = true | Removed | Missing |
4784 | quality-rule | Avoid Artifacts with lines longer than 80 characters (JEE) | Quality Contribution to 'Documentation - Style Conformity' (61006) | critical = false, weight = 3 | Removed | Missing contribution |
4786 | quality-rule | Avoid artifacts with too many parameters (JEE) | Definition | active = true, detached = true | Removed | Missing |
4786 | quality-rule | Avoid artifacts with too many parameters (JEE) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 4 | Removed | Missing contribution |
4788 | quality-rule | Avoid Artifacts with High Essential Complexity (JEE) | Definition | active = true, detached = true | Removed | Missing |
4788 | quality-rule | Avoid Artifacts with High Essential Complexity (JEE) | Quality Contribution to 'Programming Practices - Structuredness' (61024) | critical = false, weight = 7 | Removed | Missing contribution |
4794 | quality-rule | Avoid Dynamic SQL Objects With Queries on more than 4 Tables (JEE) | Definition | active = true, detached = true | Removed | Missing |
4794 | quality-rule | Avoid Dynamic SQL Objects With Queries on more than 4 Tables (JEE) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 9 | Removed | Missing contribution |
5098 | quality-rule | Avoid large Programs - too many Lines of Code (Cobol) | Definition | active = true, detached = true | Removed | Missing |
5098 | quality-rule | Avoid large Programs - too many Lines of Code (Cobol) | Quality Contribution to 'Volume - Number of LOC' (61023) | critical = false, weight = 4 | Removed | Missing contribution |
5118 | quality-rule | Avoid Programs with High Fan-In (Cobol) | Definition | active = true, detached = true | Removed | Missing |
5118 | quality-rule | Avoid Programs with High Fan-In (Cobol) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 4 | Removed | Missing contribution |
5120 | quality-rule | Avoid Programs with High Integration Complexity (Cobol) | Definition | active = true, detached = true | Removed | Missing |
5120 | quality-rule | Avoid Programs with High Integration Complexity (Cobol) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 7 | Removed | Missing contribution |
5122 | quality-rule | Avoid Programs with High Fan-Out (Cobol) | Definition | active = true, detached = true | Removed | Missing |
5122 | quality-rule | Avoid Programs with High Fan-Out (Cobol) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 4 | Removed | Missing contribution |
5124 | quality-rule | Avoid Programs With Queries on more than 4 Tables (Cobol) | Definition | active = true, detached = true | Removed | Missing |
5124 | quality-rule | Avoid Programs With Queries on more than 4 Tables (Cobol) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 9 | Removed | Missing contribution |
5126 | quality-rule | Avoid Programs with High RAW SQL Complexity (Cobol) | Definition | active = true, detached = true | Removed | Missing |
5126 | quality-rule | Avoid Programs with High RAW SQL Complexity (Cobol) | Quality Contribution to 'Complexity - SQL Queries' (61011) | critical = false, weight = 6 | Removed | Missing contribution |
5128 | quality-rule | Avoid Programs with subqueries (Cobol) | Definition | active = true, detached = true | Removed | Missing |
5128 | quality-rule | Avoid Programs with subqueries (Cobol) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 7 | Removed | Missing contribution |
5130 | quality-rule | Avoid Programs with Group By (Cobol) | Definition | active = true, detached = true | Removed | Missing |
5130 | quality-rule | Avoid Programs with Group By (Cobol) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 9 | Removed | Missing contribution |
5132 | quality-rule | Avoid Programs with a Complex SELECT Clause (Cobol) | Definition | active = true, detached = true | Removed | Missing |
5132 | quality-rule | Avoid Programs with a Complex SELECT Clause (Cobol) | Quality Contribution to 'Complexity - SQL Queries' (61011) | critical = false, weight = 6 | Removed | Missing contribution |
5134 | quality-rule | Avoid Programs with High Cyclomatic Complexity (Cobol) | Definition | active = true, detached = true | Removed | Missing |
5134 | quality-rule | Avoid Programs with High Cyclomatic Complexity (Cobol) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 8 | Removed | Missing contribution |
5136 | quality-rule | Avoid Programs with High Depth of Code (Cobol) | Definition | active = true, detached = true | Removed | Missing |
5136 | quality-rule | Avoid Programs with High Depth of Code (Cobol) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 6 | Removed | Missing contribution |
5140 | quality-rule | Avoid large artifacts with too many parameters | Definition | active = false, detached = true | Removed | Missing |
5142 | quality-rule | Avoid Programs with High Essential Complexity (Cobol) | Definition | active = true, detached = true | Removed | Missing |
5142 | quality-rule | Avoid Programs with High Essential Complexity (Cobol) | Quality Contribution to 'Programming Practices - Structuredness' (61024) | critical = false, weight = 7 | Removed | Missing contribution |
5552 | quality-rule | Avoid using queries with too many Tables in record groups (Forms) | Definition | active = true, detached = true | Removed | Missing |
5552 | quality-rule | Avoid using queries with too many Tables in record groups (Forms) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 9 | Removed | Missing contribution |
5556 | quality-rule | Forms naming convention - prefix control (Forms) | Definition | active = false, detached = true | Removed | Missing |
5556 | quality-rule | Forms naming convention - prefix control (Forms) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 5 | Removed | Missing contribution |
5574 | quality-rule | Avoid Artifacts with High Fan-In (Forms) | Definition | active = true, detached = true | Removed | Missing |
5574 | quality-rule | Avoid Artifacts with High Fan-In (Forms) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 4 | Removed | Missing contribution |
5576 | quality-rule | Avoid Artifacts with High Integration Complexity (Forms) | Definition | active = true, detached = true | Removed | Missing |
5576 | quality-rule | Avoid Artifacts with High Integration Complexity (Forms) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 6 | Removed | Missing contribution |
5578 | quality-rule | Avoid Artifacts with High Fan-Out (Forms) | Definition | active = true, detached = true | Removed | Missing |
5578 | quality-rule | Avoid Artifacts with High Fan-Out (Forms) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 4 | Removed | Missing contribution |
5580 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity (Forms) | Definition | active = true, detached = true | Removed | Missing |
5580 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity (Forms) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 8 | Removed | Missing contribution |
5582 | quality-rule | Avoid Artifacts with High Essential Complexity (Forms) | Definition | active = true, detached = true | Removed | Missing |
5582 | quality-rule | Avoid Artifacts with High Essential Complexity (Forms) | Quality Contribution to 'Programming Practices - Structuredness' (61024) | critical = false, weight = 7 | Removed | Missing contribution |
5584 | quality-rule | Avoid Artifacts with High Depth of Code (Forms) | Definition | active = true, detached = true | Removed | Missing |
5584 | quality-rule | Avoid Artifacts with High Depth of Code (Forms) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 6 | Removed | Missing contribution |
5586 | quality-rule | Avoid artifacts with too many parameters (Forms) | Definition | active = true, detached = true | Removed | Missing |
5586 | quality-rule | Avoid artifacts with too many parameters (Forms) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 4 | Removed | Missing contribution |
5588 | quality-rule | Avoid Artifacts with lines longer than 80 characters (Forms) | Definition | active = true, detached = true | Removed | Missing |
5588 | quality-rule | Avoid Artifacts with lines longer than 80 characters (Forms) | Quality Contribution to 'Documentation - Style Conformity' (61006) | critical = false, weight = 3 | Removed | Missing contribution |
6074 | quality-rule | Avoid Datawindows accessing Database Tables (PowerBuilder) | Definition | active = true, detached = true | Removed | Missing |
6074 | quality-rule | Avoid Datawindows accessing Database Tables (PowerBuilder) | Quality Contribution to 'Architecture - Multi-Layers and Data Access' (61001) | critical = false, weight = 1 | Removed | Missing contribution |
6080 | quality-rule | Avoid PB Function/Event/Method accessing Database Tables (PowerBuilder) | Definition | active = true, detached = true | Removed | Missing |
6080 | quality-rule | Avoid PB Function/Event/Method accessing Database Tables (PowerBuilder) | Quality Contribution to 'Architecture - Multi-Layers and Data Access' (61001) | critical = false, weight = 1 | Removed | Missing contribution |
6094 | quality-rule | Avoid undocumented functions (PowerBuilder) | Definition | active = true, detached = true | Removed | Missing |
6094 | quality-rule | Avoid undocumented functions (PowerBuilder) | Quality Contribution to 'Documentation - Volume of Comments' (61028) | critical = false, weight = 7 | Removed | Missing contribution |
6096 | quality-rule | Avoid functions with a very low comment/code ratio (PowerBuilder) | Definition | active = true, detached = true | Removed | Missing |
6096 | quality-rule | Avoid functions with a very low comment/code ratio (PowerBuilder) | Quality Contribution to 'Documentation - Volume of Comments' (61028) | critical = false, weight = 3 | Removed | Missing contribution |
6098 | quality-rule | Avoid undocumented methods (PowerBuilder) | Definition | active = true, detached = true | Removed | Missing |
6098 | quality-rule | Avoid undocumented methods (PowerBuilder) | Quality Contribution to 'Documentation - Volume of Comments' (61028) | critical = false, weight = 8 | Removed | Missing contribution |
6100 | quality-rule | Avoid methods with a very low comment/code ratio (PowerBuilder) | Definition | active = true, detached = true | Removed | Missing |
6100 | quality-rule | Avoid methods with a very low comment/code ratio (PowerBuilder) | Quality Contribution to 'Documentation - Volume of Comments' (61028) | critical = false, weight = 3 | Removed | Missing contribution |
6154 | quality-rule | Avoid Artifacts with High Fan-In (PowerBuilder) | Definition | active = true, detached = true | Removed | Missing |
6154 | quality-rule | Avoid Artifacts with High Fan-In (PowerBuilder) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 4 | Removed | Missing contribution |
6156 | quality-rule | Avoid Classes with a High Lack of Cohesion - variant (PowerBuilder) | Definition | active = true, detached = true | Removed | Missing |
6156 | quality-rule | Avoid Classes with a High Lack of Cohesion - variant (PowerBuilder) | Quality Contribution to 'Programming Practices - Modularity and OO Encapsulation Conformity' (61020) | critical = false, weight = 7 | Removed | Missing contribution |
6158 | quality-rule | Avoid High Coupling Between Object Classes (PowerBuilder) | Definition | active = true, detached = true | Removed | Missing |
6158 | quality-rule | Avoid High Coupling Between Object Classes (PowerBuilder) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 4 | Removed | Missing contribution |
6160 | quality-rule | Avoid High Response for a Class (PowerBuilder) | Definition | active = true, detached = true | Removed | Missing |
6160 | quality-rule | Avoid High Response for a Class (PowerBuilder) | Quality Contribution to 'Volume - Number of Components' (61022) | critical = false, weight = 8 | Removed | Missing contribution |
6164 | quality-rule | Avoid Classes with a High Lack of Cohesion (PowerBuilder) | Definition | active = true, detached = true | Removed | Missing |
6164 | quality-rule | Avoid Classes with a High Lack of Cohesion (PowerBuilder) | Quality Contribution to 'Programming Practices - Modularity and OO Encapsulation Conformity' (61020) | critical = false, weight = 7 | Removed | Missing contribution |
6166 | quality-rule | Avoid Artifacts with High Fan-Out (PowerBuilder) | Definition | active = true, detached = true | Removed | Missing |
6166 | quality-rule | Avoid Artifacts with High Fan-Out (PowerBuilder) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 4 | Removed | Missing contribution |
6168 | quality-rule | Avoid Classes with High Weighted Methods per Class (PowerBuilder) | Definition | active = true, detached = true | Removed | Missing |
6168 | quality-rule | Avoid Classes with High Weighted Methods per Class (PowerBuilder) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 6 | Removed | Missing contribution |
6170 | quality-rule | Avoid Objects with a High Depth of Inheritance Tree (PowerBuilder) | Definition | active = true, detached = true | Removed | Missing |
6170 | quality-rule | Avoid Objects with a High Depth of Inheritance Tree (PowerBuilder) | Quality Contribution to 'Complexity - OO Inheritance and Polymorphism' (61010) | critical = false, weight = 6 | Removed | Missing contribution |
6172 | quality-rule | Avoid Objects with a High Number Of Children (PowerBuilder) | Definition | active = true, detached = true | Removed | Missing |
6172 | quality-rule | Avoid Objects with a High Number Of Children (PowerBuilder) | Quality Contribution to 'Complexity - OO Inheritance and Polymorphism' (61010) | critical = false, weight = 5 | Removed | Missing contribution |
6174 | quality-rule | Avoid Classes with a High Public Data Ratio (PowerBuilder) | Definition | active = true, detached = true | Removed | Missing |
6174 | quality-rule | Avoid Classes with a High Public Data Ratio (PowerBuilder) | Quality Contribution to 'Programming Practices - Modularity and OO Encapsulation Conformity' (61020) | critical = false, weight = 2 | Removed | Missing contribution |
6174 | quality-rule | Avoid Classes with a High Public Data Ratio (PowerBuilder) | Quality Contribution to 'Secure Coding - Encapsulation' (66066) | critical = false, weight = 2 | Removed | Missing contribution |
6176 | quality-rule | Avoid Artifacts With Queries on more than 4 Tables (PowerBuilder) | Definition | active = true, detached = true | Removed | Missing |
6176 | quality-rule | Avoid Artifacts With Queries on more than 4 Tables (PowerBuilder) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 9 | Removed | Missing contribution |
6178 | quality-rule | Avoid Artifacts with a Complex SELECT Clause (PowerBuilder) | Definition | active = true, detached = true | Removed | Missing |
6178 | quality-rule | Avoid Artifacts with a Complex SELECT Clause (PowerBuilder) | Quality Contribution to 'Complexity - SQL Queries' (61011) | critical = false, weight = 6 | Removed | Missing contribution |
6180 | quality-rule | Avoid Artifacts with High RAW SQL Complexity (PowerBuilder) | Definition | active = true, detached = true | Removed | Missing |
6180 | quality-rule | Avoid Artifacts with High RAW SQL Complexity (PowerBuilder) | Quality Contribution to 'Complexity - SQL Queries' (61011) | critical = false, weight = 6 | Removed | Missing contribution |
6182 | quality-rule | Avoid Artifacts with Group By (PowerBuilder) | Definition | active = true, detached = true | Removed | Missing |
6182 | quality-rule | Avoid Artifacts with Group By (PowerBuilder) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 9 | Removed | Missing contribution |
6186 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity (PowerBuilder) | Definition | active = true, detached = true | Removed | Missing |
6186 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity (PowerBuilder) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 8 | Removed | Missing contribution |
6188 | quality-rule | Avoid Artifacts with High Depth of Code (PowerBuilder) | Definition | active = true, detached = true | Removed | Missing |
6188 | quality-rule | Avoid Artifacts with High Depth of Code (PowerBuilder) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 6 | Removed | Missing contribution |
6190 | quality-rule | Avoid Artifacts with High Essential Complexity (PowerBuilder) | Definition | active = true, detached = true | Removed | Missing |
6190 | quality-rule | Avoid Artifacts with High Essential Complexity (PowerBuilder) | Quality Contribution to 'Programming Practices - Structuredness' (61024) | critical = false, weight = 7 | Removed | Missing contribution |
6192 | quality-rule | Avoid Artifacts with more than 5 parameters (PowerBuilder) | Definition | active = true, detached = true | Removed | Missing |
6192 | quality-rule | Avoid Artifacts with more than 5 parameters (PowerBuilder) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 4 | Removed | Missing contribution |
6196 | quality-rule | Avoid Dynamic SQL Objects With Queries on more than 4 Tables (PowerBuilder) | Definition | active = true, detached = true | Removed | Missing |
6196 | quality-rule | Avoid Dynamic SQL Objects With Queries on more than 4 Tables (PowerBuilder) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 9 | Removed | Missing contribution |
6550 | quality-rule | Table naming convention - prefix control (DB2 Server) | Definition | active = false, detached = true | Removed | Missing |
6550 | quality-rule | Table naming convention - prefix control (DB2 Server) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 5 | Removed | Missing contribution |
6552 | quality-rule | View naming convention - prefix control (DB2 Server) | Definition | active = false, detached = true | Removed | Missing |
6552 | quality-rule | View naming convention - prefix control (DB2 Server) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 5 | Removed | Missing contribution |
6554 | quality-rule | Stored Procedure naming convention - prefix control (DB2 Server) | Definition | active = false, detached = true | Removed | Missing |
6554 | quality-rule | Stored Procedure naming convention - prefix control (DB2 Server) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 5 | Removed | Missing contribution |
6556 | quality-rule | Trigger naming convention - prefix control (DB2 Server) | Definition | active = false, detached = true | Removed | Missing |
6556 | quality-rule | Trigger naming convention - prefix control (DB2 Server) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 5 | Removed | Missing contribution |
6564 | quality-rule | Avoid Tables with more than 20 columns on an OLTP system (DB2 Server) | Definition | active = true, detached = true | Removed | Missing |
6564 | quality-rule | Avoid Tables with more than 20 columns on an OLTP system (DB2 Server) | Quality Contribution to 'Volume - Number of Components' (61022) | critical = false, weight = 7 | Removed | Missing contribution |
6568 | quality-rule | Avoid using GOTO statement (DB2 Server) | Definition | active = true, detached = true | Removed | Missing |
6568 | quality-rule | Avoid using GOTO statement (DB2 Server) | Quality Contribution to 'Programming Practices - Structuredness' (61024) | critical = false, weight = 7 | Removed | Missing contribution |
6574 | quality-rule | Avoid Tables access directly from client-side SQL queries (DB2 Server) | Definition | active = false, detached = true | Removed | Missing |
6576 | quality-rule | Avoid tables not involved in a Foreign Key (DB2 Server) | Definition | active = true, detached = true | Removed | Missing |
6576 | quality-rule | Avoid tables not involved in a Foreign Key (DB2 Server) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 9 | Removed | Missing contribution |
6580 | quality-rule | Avoid using Cursors (DB2 Server) | Definition | active = true, detached = true | Removed | Missing |
6580 | quality-rule | Avoid using Cursors (DB2 Server) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = true, weight = 9 | Removed | Missing contribution |
6602 | quality-rule | Avoid Artifacts with High Fan-In (DB2 Server) | Definition | active = true, detached = true | Removed | Missing |
6602 | quality-rule | Avoid Artifacts with High Fan-In (DB2 Server) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 4 | Removed | Missing contribution |
6604 | quality-rule | Avoid Artifacts with High Integration Complexity (DB2 Server) | Definition | active = true, detached = true | Removed | Missing |
6604 | quality-rule | Avoid Artifacts with High Integration Complexity (DB2 Server) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 6 | Removed | Missing contribution |
6606 | quality-rule | Avoid Artifacts with High Fan-Out (DB2 Server) | Definition | active = true, detached = true | Removed | Missing |
6606 | quality-rule | Avoid Artifacts with High Fan-Out (DB2 Server) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 4 | Removed | Missing contribution |
6608 | quality-rule | Avoid Functions/Procedures with queries on too many Tables (DB2 Server) | Definition | active = true, detached = true | Removed | Missing |
6608 | quality-rule | Avoid Functions/Procedures with queries on too many Tables (DB2 Server) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 9 | Removed | Missing contribution |
6610 | quality-rule | Avoid Functions/Procedures with SQL statement using Group By clause (DB2 Server) | Definition | active = true, detached = true | Removed | Missing |
6610 | quality-rule | Avoid Functions/Procedures with SQL statement using Group By clause (DB2 Server) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 9 | Removed | Missing contribution |
6612 | quality-rule | Avoid Functions/Procedures with a complex SELECT clause (DB2 Server) | Definition | active = true, detached = true | Removed | Missing |
6612 | quality-rule | Avoid Functions/Procedures with a complex SELECT clause (DB2 Server) | Quality Contribution to 'Complexity - SQL Queries' (61011) | critical = false, weight = 6 | Removed | Missing contribution |
6614 | quality-rule | Avoid Functions/Procedures with SQL statement including Subqueries (DB2 Server) | Definition | active = true, detached = true | Removed | Missing |
6614 | quality-rule | Avoid Functions/Procedures with SQL statement including Subqueries (DB2 Server) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 9 | Removed | Missing contribution |
6616 | quality-rule | Avoid Functions/Procedures with High RAW SQL Complexity (DB2 Server) | Definition | active = true, detached = true | Removed | Missing |
6616 | quality-rule | Avoid Functions/Procedures with High RAW SQL Complexity (DB2 Server) | Quality Contribution to 'Complexity - SQL Queries' (61011) | critical = false, weight = 6 | Removed | Missing contribution |
6618 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity (DB2 Server) | Definition | active = true, detached = true | Removed | Missing |
6618 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity (DB2 Server) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 8 | Removed | Missing contribution |
6620 | quality-rule | Avoid Artifacts with High Essential Complexity (DB2 Server) | Definition | active = true, detached = true | Removed | Missing |
6620 | quality-rule | Avoid Artifacts with High Essential Complexity (DB2 Server) | Quality Contribution to 'Programming Practices - Structuredness' (61024) | critical = false, weight = 7 | Removed | Missing contribution |
6622 | quality-rule | Avoid Artifacts with High Depth of Code (DB2 Server) | Definition | active = true, detached = true | Removed | Missing |
6622 | quality-rule | Avoid Artifacts with High Depth of Code (DB2 Server) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 6 | Removed | Missing contribution |
6624 | quality-rule | Avoid Artifacts with lines longer than 80 characters (DB2 Server) | Definition | active = true, detached = true | Removed | Missing |
6624 | quality-rule | Avoid Artifacts with lines longer than 80 characters (DB2 Server) | Quality Contribution to 'Documentation - Style Conformity' (61006) | critical = false, weight = 3 | Removed | Missing contribution |
6626 | quality-rule | Avoid artifacts with too many parameters (DB2 Server) | Definition | active = true, detached = true | Removed | Missing |
6626 | quality-rule | Avoid artifacts with too many parameters (DB2 Server) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 4 | Removed | Missing contribution |
7064 | quality-rule | Avoid undocumented Functions (ABAP) | Definition | active = true, detached = true | Removed | Missing |
7064 | quality-rule | Avoid undocumented Functions (ABAP) | Quality Contribution to 'Documentation - Volume of Comments' (61028) | critical = false, weight = 8 | Removed | Missing contribution |
7070 | quality-rule | Avoid Functions with low comment/code ratio (ABAP) | Definition | active = true, detached = true | Removed | Missing |
7070 | quality-rule | Avoid Functions with low comment/code ratio (ABAP) | Quality Contribution to 'Documentation - Volume of Comments' (61028) | critical = false, weight = 3 | Removed | Missing contribution |
7080 | quality-rule | Avoid unreferenced Functions (ABAP) | Definition | active = true, detached = true | Removed | Missing |
7080 | quality-rule | Avoid unreferenced Functions (ABAP) | Quality Contribution to 'Dead code (static)' (61027) | critical = false, weight = 4 | Removed | Missing contribution |
7096 | quality-rule | Avoid Artifacts with High Fan-In (ABAP) | Definition | active = true, detached = true | Removed | Missing |
7096 | quality-rule | Avoid Artifacts with High Fan-In (ABAP) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 4 | Removed | Missing contribution |
7098 | quality-rule | Avoid Artifacts with High Fan-Out (ABAP) | Definition | active = true, detached = true | Removed | Missing |
7098 | quality-rule | Avoid Artifacts with High Fan-Out (ABAP) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 4 | Removed | Missing contribution |
7100 | quality-rule | Avoid Artifacts with High integration complexity (ABAP) | Definition | active = true, detached = true | Removed | Missing |
7100 | quality-rule | Avoid Artifacts with High integration complexity (ABAP) | Quality Contribution to 'Architecture - Object-level Dependencies' (61013) | critical = false, weight = 6 | Removed | Missing contribution |
7102 | quality-rule | Avoid Artifacts With Queries on more than 4 Tables (ABAP) | Definition | active = true, detached = true | Removed | Missing |
7102 | quality-rule | Avoid Artifacts With Queries on more than 4 Tables (ABAP) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 9 | Removed | Missing contribution |
7104 | quality-rule | Avoid Artifacts with Subqueries (ABAP) | Definition | active = true, detached = true | Removed | Missing |
7104 | quality-rule | Avoid Artifacts with Subqueries (ABAP) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 7 | Removed | Missing contribution |
7106 | quality-rule | Avoid Artifacts with Group By (ABAP) | Definition | active = true, detached = true | Removed | Missing |
7106 | quality-rule | Avoid Artifacts with Group By (ABAP) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 9 | Removed | Missing contribution |
7108 | quality-rule | Avoid Artifacts with a Complex SELECT Clause (ABAP) | Definition | active = true, detached = true | Removed | Missing |
7108 | quality-rule | Avoid Artifacts with a Complex SELECT Clause (ABAP) | Quality Contribution to 'Complexity - SQL Queries' (61011) | critical = false, weight = 6 | Removed | Missing contribution |
7110 | quality-rule | Avoid Artifacts with High RAW SQL Complexity (ABAP) | Definition | active = true, detached = true | Removed | Missing |
7110 | quality-rule | Avoid Artifacts with High RAW SQL Complexity (ABAP) | Quality Contribution to 'Complexity - SQL Queries' (61011) | critical = false, weight = 6 | Removed | Missing contribution |
7112 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity (ABAP) | Definition | active = true, detached = true | Removed | Missing |
7112 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity (ABAP) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 8 | Removed | Missing contribution |
7114 | quality-rule | Avoid Artifacts with High Essential Complexity (ABAP) | Definition | active = true, detached = true | Removed | Missing |
7114 | quality-rule | Avoid Artifacts with High Essential Complexity (ABAP) | Quality Contribution to 'Programming Practices - Structuredness' (61024) | critical = false, weight = 7 | Removed | Missing contribution |
7116 | quality-rule | Avoid Artifacts with High Depth of Code (ABAP) | Definition | active = true, detached = true | Removed | Missing |
7116 | quality-rule | Avoid Artifacts with High Depth of Code (ABAP) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | critical = false, weight = 6 | Removed | Missing contribution |
7120 | quality-rule | Avoid Artifacts with lines of more than 80 characters (**deprecated**) (ABAP) | Definition | active = true, detached = true | Removed | Missing |
7130 | quality-rule | Avoid Artifacts with High Depth of Nested Subqueries | Documentation english | description = Depth of nested subqueries is measured as the maximum number of nested subquerie... | Updated | description = This rule list all the artifacts having queries with nested subqueries. Nested s... |
7130 | quality-rule | Avoid Artifacts with High Depth of Nested Subqueries | Documentation english | Missing | Added | rationale = Subqueries can possibly cause performance issues. High depth of nested subquerie... |
7130 | quality-rule | Avoid Artifacts with High Depth of Nested Subqueries | Documentation english | Missing | Added | reference = http://it-cisq.org/ CISQ: ASCPEM-PRF-04 |
7130 | quality-rule | Avoid Artifacts with High Depth of Nested Subqueries | Documentation english | Missing | Added | remediation = Review the source code and refactor in order to limit the number of suqueries. |
7130 | quality-rule | Avoid Artifacts with High Depth of Nested Subqueries | Documentation english | Missing | Added | sample = SELECT column-names FROM table-name1 WHERE value IN (SELECT column-na... |
7158 | quality-rule | Never use scanf() function (C Lang.) | Definition | active = true, detached = true | Removed | Missing |
7160 | quality-rule | Never use gets() function (C) | Definition | active = true, detached = true | Removed | Missing |
7160 | quality-rule | Never use gets() function (C) | Quality Contribution to 'Secure Coding - API Abuse' (66063) | critical = false, weight = 7 | Removed | Missing contribution |
7162 | quality-rule | Never use strcpy() function (C Lang.) | Definition | active = true, detached = true | Removed | Missing |
7162 | quality-rule | Never use strcpy() function (C Lang.) | Quality Contribution to 'Secure Coding - API Abuse' (66063) | critical = false, weight = 7 | Removed | Missing contribution |
7164 | quality-rule | Never use sprintf() or vsprintf() functions (C Lang.) | Definition | active = true, detached = true | Removed | Missing |
7164 | quality-rule | Never use sprintf() or vsprintf() functions (C Lang.) | Quality Contribution to 'Secure Coding - API Abuse' (66063) | critical = false, weight = 7 | Removed | Missing contribution |
7166 | quality-rule | Avoid using snprintf() function (C Lang.) | Definition | active = true, detached = true | Removed | Missing |
7166 | quality-rule | Avoid using snprintf() function (C Lang.) | Quality Contribution to 'Secure Coding - API Abuse' (66063) | critical = false, weight = 7 | Removed | Missing contribution |
7168 | quality-rule | Avoid using strlen() function (C Lang.) | Definition | active = true, detached = true | Removed | Missing |
7168 | quality-rule | Avoid using strlen() function (C Lang.) | Quality Contribution to 'Secure Coding - API Abuse' (66063) | critical = false, weight = 7 | Removed | Missing contribution |
7170 | quality-rule | Avoid using the scanf() function family (C Lang.) | Definition | active = true, detached = true | Removed | Missing |
7170 | quality-rule | Avoid using the scanf() function family (C Lang.) | Quality Contribution to 'Secure Coding - API Abuse' (66063) | critical = false, weight = 7 | Removed | Missing contribution |
7172 | quality-rule | Avoid using realpath() function (C Lang.) | Definition | active = true, detached = true | Removed | Missing |
7172 | quality-rule | Avoid using realpath() function (C Lang.) | Quality Contribution to 'Secure Coding - API Abuse' (66063) | critical = false, weight = 7 | Removed | Missing contribution |
7174 | quality-rule | Avoid using getopt() function (C Lang.) | Definition | active = true, detached = true | Removed | Missing |
7174 | quality-rule | Avoid using getopt() function (C Lang.) | Quality Contribution to 'Secure Coding - API Abuse' (66063) | critical = false, weight = 7 | Removed | Missing contribution |
7176 | quality-rule | Avoid using getpass() function (C Lang.) | Definition | active = true, detached = true | Removed | Missing |
7176 | quality-rule | Avoid using getpass() function (C Lang.) | Quality Contribution to 'Secure Coding - API Abuse' (66063) | critical = false, weight = 7 | Removed | Missing contribution |
7178 | quality-rule | Avoid using streadd() function (C Lang.) | Definition | active = true, detached = true | Removed | Missing |
7178 | quality-rule | Avoid using streadd() function (C Lang.) | Quality Contribution to 'Secure Coding - API Abuse' (66063) | critical = false, weight = 7 | Removed | Missing contribution |
7180 | quality-rule | Avoid using strecpy() function (C Lang.) | Definition | active = true, detached = true | Removed | Missing |
7180 | quality-rule | Avoid using strecpy() function (C Lang.) | Quality Contribution to 'Secure Coding - API Abuse' (66063) | critical = false, weight = 7 | Removed | Missing contribution |
7182 | quality-rule | Avoid using strtrns() function (C Lang.) | Definition | active = true, detached = true | Removed | Missing |
7182 | quality-rule | Avoid using strtrns() function (C Lang.) | Quality Contribution to 'Secure Coding - API Abuse' (66063) | critical = false, weight = 7 | Removed | Missing contribution |
7184 | quality-rule | Avoid Methods with a very low comment/code ratio (JEE) | Definition | active = true, detached = true | Removed | Missing |
7184 | quality-rule | Avoid Methods with a very low comment/code ratio (JEE) | Quality Contribution to 'Documentation - Volume of Comments' (61028) | critical = false, weight = 3 | Removed | Missing contribution |
7186 | quality-rule | Avoid classes with a very low comment/code ratio (JEE) | Definition | active = true, detached = true | Removed | Missing |
7186 | quality-rule | Avoid classes with a very low comment/code ratio (JEE) | Quality Contribution to 'Documentation - Volume of Comments' (61028) | critical = false, weight = 3 | Removed | Missing contribution |
7196 | quality-rule | Avoid large number of String concatenation | Documentation english | description = ...+ Method. This does not take into account literals since they are automatically ... | Updated | description = ...+ Method. However: * This does not take into account literals since they ar... |
7196 | quality-rule | Avoid large number of String concatenation | Documentation english | reference = ...AndStringBuffer.htm#Strings104 | Updated | reference = ...AndStringBuffer.htm#Strings104 http://stackoverflow.com/questions/14927630/java... |
7196 | quality-rule | Avoid large number of String concatenation | Quality Contribution to 'Efficiency - Memory, Network and Disk Space Management' (61018) | critical = false, weight = 6 | Updated | weight = 2 |
7198 | quality-rule | Avoid String concatenation in loops | Documentation english | description = ...case of VB .NET, both cases: String += Object and Object += String are consider... | Updated | description = ...case of VB.NET, both cases: String += Object and Object += String are considered... |
7204 | quality-rule | Avoid method invocation in a loop termination expression | Documentation english | rationale = ... Not only the call of method comes with a important cost but depending on the co... | Updated | rationale = ... Not only does the method call come with a considerable cost but depending on th... |
7212 | quality-rule | Avoid instantiations inside loops | Documentation english | description = ...creation).. .NET artifacts include all methods and constructors. | Updated | description = ...creation). .NET artifacts include all methods and constructors. If the instant... |
7212 | quality-rule | Avoid instantiations inside loops | Documentation english | remediationSample = ... sb.setLength(0); sb.append("count = "); sb.appe... | Updated | remediationSample = ... sb.Length = 0; sb.Append("count = "); sb.Append... |
7212 | quality-rule | Avoid instantiations inside loops | Documentation english | sample = ... sb.append("count = "); sb.append(i); Console.Wri... | Updated | sample = ... sb.Append("count = "); sb.Append(i); Console.Wri... |
7222 | quality-rule | Avoid Artifacts with a Complex SELECT Clause (Visual Basic) | Definition | active = true, detached = true | Removed | Missing |
7222 | quality-rule | Avoid Artifacts with a Complex SELECT Clause (Visual Basic) | Quality Contribution to 'Complexity - SQL Queries' (61011) | critical = false, weight = 1 | Removed | Missing contribution |
7224 | quality-rule | Avoid Artifacts with High RAW SQL Complexity (Visual Basic) | Definition | active = true, detached = true | Removed | Missing |
7224 | quality-rule | Avoid Artifacts with High RAW SQL Complexity (Visual Basic) | Quality Contribution to 'Complexity - SQL Queries' (61011) | critical = false, weight = 1 | Removed | Missing contribution |
7226 | quality-rule | Avoid Artifacts with Group By (Visual Basic) | Definition | active = true, detached = true | Removed | Missing |
7226 | quality-rule | Avoid Artifacts with Group By (Visual Basic) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 9 | Removed | Missing contribution |
7228 | quality-rule | Avoid Artifacts with Subqueries | Definition | active = true, detached = true | Removed | Missing |
7228 | quality-rule | Avoid Artifacts with Subqueries | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 7 | Removed | Missing contribution |
7230 | quality-rule | Avoid Artifacts With Queries on more than 4 Tables (Visual Basic) | Definition | active = true, detached = true | Removed | Missing |
7230 | quality-rule | Avoid Artifacts With Queries on more than 4 Tables (Visual Basic) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 9 | Removed | Missing contribution |
7232 | quality-rule | Avoid Dynamic SQL Objects With Queries on more than 4 Tables (Visual Basic) | Definition | active = true, detached = true | Removed | Missing |
7232 | quality-rule | Avoid Dynamic SQL Objects With Queries on more than 4 Tables (Visual Basic) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 9 | Removed | Missing contribution |
7294 | quality-rule | Avoid cyclical calls and inheritances between namespaces content | Documentation english | description = ...tatic link and not runtime. The threshold parameter permit to define the maximal... | Updated | description = ...tatic links and not runtime. The threshold parameter permit to define the maxima... |
7294 | quality-rule | Avoid cyclical calls and inheritances between namespaces content | Documentation english | output = ...mation: namespace full name, cyclically called / inherited namespace full name | Updated | output = ...mation: * namespace full name * cyclically called / inherited namespace ful... |
7294 | quality-rule | Avoid cyclical calls and inheritances between namespaces content | Documentation english | reference = CISQ rules: ASCMM-MNT-7, ASCRM-RLB-13. | Updated | reference = http://it-cisq.org/ CISQ rules: ASCMM-MNT-7, ASCRM-RLB-13. |
7310 | quality-rule | Never use strcat() function (C++) | Definition | active = true, detached = true | Removed | Missing |
7310 | quality-rule | Never use strcat() function (C++) | Quality Contribution to 'Secure Coding - API Abuse' (66063) | critical = false, weight = 7 | Removed | Missing contribution |
7312 | quality-rule | Avoid using strecpy() function (C++) | Definition | active = true, detached = true | Removed | Missing |
7312 | quality-rule | Avoid using strecpy() function (C++) | Quality Contribution to 'Secure Coding - API Abuse' (66063) | critical = false, weight = 7 | Removed | Missing contribution |
7314 | quality-rule | Avoid using strtrns() function (C++) | Definition | active = true, detached = true | Removed | Missing |
7314 | quality-rule | Avoid using strtrns() function (C++) | Quality Contribution to 'Secure Coding - API Abuse' (66063) | critical = false, weight = 7 | Removed | Missing contribution |
7316 | quality-rule | Never use sprintf() or vsprintf() functions (C++) | Definition | active = true, detached = true | Removed | Missing |
7316 | quality-rule | Never use sprintf() or vsprintf() functions (C++) | Quality Contribution to 'Secure Coding - API Abuse' (66063) | critical = false, weight = 7 | Removed | Missing contribution |
7318 | quality-rule | Avoid using streadd() function (C++) | Definition | active = true, detached = true | Removed | Missing |
7318 | quality-rule | Avoid using streadd() function (C++) | Quality Contribution to 'Secure Coding - API Abuse' (66063) | critical = false, weight = 7 | Removed | Missing contribution |
7320 | quality-rule | Never use scanf() function (C++) | Definition | active = true, detached = true | Removed | Missing |
7322 | quality-rule | Avoid using getpass() function (C++) | Definition | active = true, detached = true | Removed | Missing |
7322 | quality-rule | Avoid using getpass() function (C++) | Quality Contribution to 'Secure Coding - API Abuse' (66063) | critical = false, weight = 7 | Removed | Missing contribution |
7324 | quality-rule | Never use gets() function (C++) | Definition | active = true, detached = true | Removed | Missing |
7324 | quality-rule | Never use gets() function (C++) | Quality Contribution to 'Secure Coding - API Abuse' (66063) | critical = false, weight = 7 | Removed | Missing contribution |
7326 | quality-rule | Avoid using getopt() function (C++) | Definition | active = true, detached = true | Removed | Missing |
7326 | quality-rule | Avoid using getopt() function (C++) | Quality Contribution to 'Secure Coding - API Abuse' (66063) | critical = false, weight = 7 | Removed | Missing contribution |
7328 | quality-rule | Avoid using realpath() function (C++) | Definition | active = true, detached = true | Removed | Missing |
7328 | quality-rule | Avoid using realpath() function (C++) | Quality Contribution to 'Secure Coding - API Abuse' (66063) | critical = false, weight = 7 | Removed | Missing contribution |
7330 | quality-rule | Avoid using the scanf() function family (C++) | Definition | active = true, detached = true | Removed | Missing |
7330 | quality-rule | Avoid using the scanf() function family (C++) | Quality Contribution to 'Secure Coding - API Abuse' (66063) | critical = false, weight = 7 | Removed | Missing contribution |
7332 | quality-rule | Avoid using strlen() function (C++) | Definition | active = true, detached = true | Removed | Missing |
7332 | quality-rule | Avoid using strlen() function (C++) | Quality Contribution to 'Secure Coding - API Abuse' (66063) | critical = false, weight = 7 | Removed | Missing contribution |
7334 | quality-rule | Avoid using snprintf() function (C++) | Definition | active = true, detached = true | Removed | Missing |
7334 | quality-rule | Avoid using snprintf() function (C++) | Quality Contribution to 'Secure Coding - API Abuse' (66063) | critical = false, weight = 7 | Removed | Missing contribution |
7338 | quality-rule | Never use strcpy() function (C++) | Definition | active = true, detached = true | Removed | Missing |
7338 | quality-rule | Never use strcpy() function (C++) | Quality Contribution to 'Secure Coding - API Abuse' (66063) | critical = false, weight = 7 | Removed | Missing contribution |
7354 | quality-rule | Avoid catching an exception of type Exception (C# .Net) | Definition | active = true, detached = true | Removed | Missing |
7354 | quality-rule | Avoid catching an exception of type Exception (C# .Net) | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | critical = false, weight = 6 | Removed | Missing contribution |
7356 | quality-rule | Avoid throwing an exception of type Exception (C# .Net) | Definition | active = true, detached = true | Removed | Missing |
7356 | quality-rule | Avoid throwing an exception of type Exception (C# .Net) | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | critical = false, weight = 6 | Removed | Missing contribution |
7374 | quality-rule | Avoid empty finally blocks (C#, VB.NET) | Definition | active = true, detached = true | Removed | Missing |
7374 | quality-rule | Avoid empty finally blocks (C#, VB.NET) | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | critical = false, weight = 6 | Removed | Missing contribution |
7376 | quality-rule | Avoid empty catch blocks (C#, VB.NET) | Definition | active = true, detached = true | Removed | Missing |
7376 | quality-rule | Avoid empty catch blocks (C#, VB.NET) | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | critical = true, weight = 6 | Removed | Missing contribution |
7398 | quality-rule | Function naming convention - prefix control (SQL Server) | Definition | active = false, detached = true | Removed | Missing |
7398 | quality-rule | Function naming convention - prefix control (SQL Server) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 5 | Removed | Missing contribution |
7404 | quality-rule | Avoid unreferenced views | Technologies | [DB2 Server, SQL Server, PL/SQL, Microsoft T-SQL, Sybase T-SQL] | Updated | Added: [SQL Analyzer] |
7410 | quality-rule | Function naming convention - prefix control (DB2 Server) | Definition | active = false, detached = true | Removed | Missing |
7410 | quality-rule | Function naming convention - prefix control (DB2 Server) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 5 | Removed | Missing contribution |
7422 | quality-rule | Avoid SQL queries that no index can support (AllTechno) | Definition | active = true, detached = true | Removed | Missing |
7422 | quality-rule | Avoid SQL queries that no index can support (AllTechno) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 6 | Removed | Missing contribution |
7424 | quality-rule | Avoid using SQL queries inside a loop | Documentation english | rationale = ...e servers handle in a much better set-oriented pattern rather than pure iterativ... | Updated | rationale = ...e servers perform much better in set-oriented patterns rather than pure iterativ... |
7426 | quality-rule | Never use SQL queries with a cartesian product (AllTechno) | Definition | active = true, detached = true | Removed | Missing |
7426 | quality-rule | Never use SQL queries with a cartesian product (AllTechno) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 7 | Removed | Missing contribution |
7430 | quality-rule | Avoid Cursors inside a loop (PL/SQL Oracle) | Definition | active = true, detached = true | Removed | Missing |
7430 | quality-rule | Avoid Cursors inside a loop (PL/SQL Oracle) | Quality Contribution to 'Efficiency - Expensive Calls in Loops' (66068) | critical = true, weight = 7 | Removed | Missing contribution |
7432 | quality-rule | Avoid Cursors inside a loop (SQL Server) | Definition | active = true, detached = true | Removed | Missing |
7432 | quality-rule | Avoid Cursors inside a loop (SQL Server) | Quality Contribution to 'Efficiency - Expensive Calls in Loops' (66068) | critical = true, weight = 7 | Removed | Missing contribution |
7450 | quality-rule | Avoid long Table names (SAP SQL) | Definition | active = true, detached = true | Removed | Missing |
7450 | quality-rule | Avoid long Table names (SAP SQL) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 1 | Removed | Missing contribution |
7452 | quality-rule | Avoid long View names (SAP SQL) | Definition | active = true, detached = true | Removed | Missing |
7452 | quality-rule | Avoid long View names (SAP SQL) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 1 | Removed | Missing contribution |
7454 | quality-rule | Avoid long Table names (PL/SQL Oracle) | Definition | active = true, detached = true | Removed | Missing |
7454 | quality-rule | Avoid long Table names (PL/SQL Oracle) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 1 | Removed | Missing contribution |
7456 | quality-rule | Avoid long View names (PL/SQL Oracle) | Definition | active = true, detached = true | Removed | Missing |
7456 | quality-rule | Avoid long View names (PL/SQL Oracle) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 1 | Removed | Missing contribution |
7462 | quality-rule | Avoid unreferenced Data Members (C# .Net) | Definition | active = true, detached = true | Removed | Missing |
7462 | quality-rule | Avoid unreferenced Data Members (C# .Net) | Quality Contribution to 'Dead code (static)' (61027) | critical = false, weight = 1 | Removed | Missing contribution |
7464 | quality-rule | Avoid unreferenced Methods (C# .Net) | Definition | active = true, detached = true | Removed | Missing |
7464 | quality-rule | Avoid unreferenced Methods (C# .Net) | Quality Contribution to 'Dead code (static)' (61027) | critical = false, weight = 1 | Removed | Missing contribution |
7470 | quality-rule | Avoid doing select on Datatable in loop | Documentation english | rationale = ...in a loop generally involve performance problems because the data is not indexe... | Updated | rationale = ...in a loop generally involves performance problems because the data is not indexe... |
7470 | quality-rule | Avoid doing select on Datatable in loop | Documentation english | reference = In this sample, the remediation is about 4 times faster. CISQ rule: ASCPEM-PRF-... | Updated | reference = CISQ rule: ASCPEM-PRF-8. |
7546 | quality-rule | Avoid tables not involved in a Foreign Key (PL/SQL Oracle) | Definition | active = true, detached = true | Removed | Missing |
7546 | quality-rule | Avoid tables not involved in a Foreign Key (PL/SQL Oracle) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 1 | Removed | Missing contribution |
7564 | quality-rule | SAP Table naming convention (ABAP) | Definition | active = true, detached = true | Removed | Missing |
7564 | quality-rule | SAP Table naming convention (ABAP) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 3 | Removed | Missing contribution |
7566 | quality-rule | SAP database view naming convention (ABAP) | Definition | active = true, detached = true | Removed | Missing |
7566 | quality-rule | SAP database view naming convention (ABAP) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 3 | Removed | Missing contribution |
7600 | quality-rule | Interface naming convention (ABAP) | Definition | active = true, detached = true | Removed | Missing |
7600 | quality-rule | Interface naming convention (ABAP) | Quality Contribution to 'Documentation - Naming Convention Conformity' (61017) | critical = false, weight = 5 | Removed | Missing contribution |
7604 | quality-rule | Avoid undocumented Classes (ABAP) | Definition | active = true, detached = true | Removed | Missing |
7604 | quality-rule | Avoid undocumented Classes (ABAP) | Quality Contribution to 'Documentation - Volume of Comments' (61028) | critical = false, weight = 1 | Removed | Missing contribution |
7606 | quality-rule | Avoid undocumented Interfaces (ABAP) | Definition | active = true, detached = true | Removed | Missing |
7606 | quality-rule | Avoid undocumented Interfaces (ABAP) | Quality Contribution to 'Documentation - Volume of Comments' (61028) | critical = false, weight = 1 | Removed | Missing contribution |
7608 | quality-rule | Avoid undocumented Methods (ABAP) | Definition | active = true, detached = true | Removed | Missing |
7608 | quality-rule | Avoid undocumented Methods (ABAP) | Quality Contribution to 'Documentation - Volume of Comments' (61028) | critical = false, weight = 1 | Removed | Missing contribution |
7610 | quality-rule | Avoid Classes with a low comment/code ratio (ABAP) | Definition | active = true, detached = true | Removed | Missing |
7610 | quality-rule | Avoid Classes with a low comment/code ratio (ABAP) | Quality Contribution to 'Documentation - Volume of Comments' (61028) | critical = false, weight = 1 | Removed | Missing contribution |
7614 | quality-rule | Avoid Methods with a low comment/code ratio (ABAP) | Definition | active = true, detached = true | Removed | Missing |
7614 | quality-rule | Avoid Methods with a low comment/code ratio (ABAP) | Quality Contribution to 'Documentation - Volume of Comments' (61028) | critical = false, weight = 1 | Removed | Missing contribution |
7616 | quality-rule | Avoid unreferenced Classes (ABAP) | Definition | active = true, detached = true | Removed | Missing |
7616 | quality-rule | Avoid unreferenced Classes (ABAP) | Quality Contribution to 'Dead code (static)' (61027) | critical = false, weight = 1 | Removed | Missing contribution |
7618 | quality-rule | Avoid unreferenced Interfaces (ABAP) | Definition | active = true, detached = true | Removed | Missing |
7618 | quality-rule | Avoid unreferenced Interfaces (ABAP) | Quality Contribution to 'Dead code (static)' (61027) | critical = false, weight = 1 | Removed | Missing contribution |
7620 | quality-rule | Avoid unreferenced Methods (ABAP) | Definition | active = true, detached = true | Removed | Missing |
7620 | quality-rule | Avoid unreferenced Methods (ABAP) | Quality Contribution to 'Dead code (static)' (61027) | critical = false, weight = 1 | Removed | Missing contribution |
7622 | quality-rule | Avoid unreferenced Members (ABAP) | Definition | active = true, detached = true | Removed | Missing |
7622 | quality-rule | Avoid unreferenced Members (ABAP) | Quality Contribution to 'Dead code (static)' (61027) | critical = false, weight = 1 | Removed | Missing contribution |
7632 | quality-rule | Avoid large Methods - too many Lines of Code (ABAP) | Definition | active = true, detached = true | Removed | Missing |
7632 | quality-rule | Avoid large Methods - too many Lines of Code (ABAP) | Quality Contribution to 'Volume - Number of LOC' (61023) | critical = false, weight = 1 | Removed | Missing contribution |
7650 | quality-rule | All types of a serializable Class must be serializable (ASCRM-RLB-2) | Documentation english | name = ...ble Class must be serializable | Updated | name = ...ble Class must be serializable (ASCRM-RLB-2) |
7650 | quality-rule | All types of a serializable Class must be serializable (ASCRM-RLB-2) | Documentation english | Missing | Added | reference = please refer to Pattern definition of ASCRM-RLB-2: Serializable Storable Data El... |
7656 | quality-rule | Avoid SQL queries on XXL Tables that no index can support (AllTechno) | Definition | active = true, detached = true | Removed | Missing |
7656 | quality-rule | Avoid SQL queries on XXL Tables that no index can support (AllTechno) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = true, weight = 9 | Removed | Missing contribution |
7674 | quality-rule | Avoid empty CATCH blocks (ABAP) | Definition | active = true, detached = true | Removed | Missing |
7674 | quality-rule | Avoid empty CATCH blocks (ABAP) | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | critical = true, weight = 7 | Removed | Missing contribution |
7716 | quality-rule | Avoid defining singleton or factory when using Spring | Documentation english | reference = ...63/page/2 http://www.javapassion.com/j2ee/springhelloworld.pdf http://wiki.java.... | Updated | reference = ...63/page/2 http://static.springframework.org/spring/docs/2.0.x/reference/beans.... |
7736 | quality-rule | Avoid SQL queries that no index can support (ABAP) | Definition | active = true, detached = true | Removed | Missing |
7736 | quality-rule | Avoid SQL queries that no index can support (ABAP) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = true, weight = 9 | Removed | Missing contribution |
7738 | quality-rule | Never use SQL queries with a cartesian product (ABAP) | Definition | active = true, detached = true | Removed | Missing |
7738 | quality-rule | Never use SQL queries with a cartesian product (ABAP) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 7 | Removed | Missing contribution |
7740 | quality-rule | CWE-79: Avoid cross-site scripting DOM vulnerabilities | Documentation english | description = ...s (XSS). The list of user input methods can be customized as well as the outp... | Updated | description = ...s (XSS). The list of user input methods can be customized as well as the output... |
7740 | quality-rule | CWE-79: Avoid cross-site scripting DOM vulnerabilities | Documentation english | name = Avoid cross-site scripting DOM vulnerabilities ( CWE-79 ) | Updated | name = CWE-79: Avoid cross-site scripting DOM vulnerabilities |
7740 | quality-rule | CWE-79: Avoid cross-site scripting DOM vulnerabilities | Documentation english | rationale = ...nitization : "Strong output encoding. Ensure that all user-supplied data is appr... | Updated | rationale = ...nitization: "Strong output encoding. Ensure that all user-supplied data is appro... |
7742 | quality-rule | CWE-89: Avoid SQL injection vulnerabilities | Documentation english | description = ...alidation & sanitization. The list of user input methods, SQL execution method... | Updated | description = ...alidation and sanitization. The list of user input methods, SQL execution metho... |
7742 | quality-rule | CWE-89: Avoid SQL injection vulnerabilities | Documentation english | name = Avoid SQL injection vulnerabilities ( CWE-89 ) | Updated | name = CWE-89: Avoid SQL injection vulnerabilities |
7744 | quality-rule | Avoid SQL queries on XXL tables that no index can support (ABAP) | Definition | active = true, detached = true | Removed | Missing |
7744 | quality-rule | Avoid SQL queries on XXL tables that no index can support (ABAP) | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = true, weight = 9 | Removed | Missing contribution |
7746 | quality-rule | CWE-90: Avoid LDAP injection vulnerabilities | Documentation english | name = Avoid LDAP injection vulnerabilities ( CWE-90 ) | Updated | name = CWE-90: Avoid LDAP injection vulnerabilities |
7748 | quality-rule | CWE-78: Avoid OS command injection vulnerabilities | Documentation english | description = ... flaws. The list of user input methods can be customized as well as the targe... | Updated | description = ... flaws. The list of user input methods can be customized as well as the target... |
7748 | quality-rule | CWE-78: Avoid OS command injection vulnerabilities | Documentation english | name = Avoid OS command injection vulnerabilities ( CWE-78 ) | Updated | name = CWE-78: Avoid OS command injection vulnerabilities |
7748 | quality-rule | CWE-78: Avoid OS command injection vulnerabilities | Documentation english | reference = ...2007 CISQ rule: ASCSM-CWE-78. | Updated | reference = ...2007 CISQ: ASCSM-CWE-078 |
7750 | quality-rule | CWE-91: Avoid XPath injection vulnerabilities | Documentation english | description = ...c detects paths from user input methods down to XPath methods, paths which are o... | Updated | description = ...c detects execution paths from user input methods down to file creation methods,... |
7750 | quality-rule | CWE-91: Avoid XPath injection vulnerabilities | Documentation english | name = Avoid XPath injection vulnerabilities ( CWE-91 ) | Updated | name = CWE-91: Avoid XPath injection vulnerabilities |
7752 | quality-rule | CWE-73: Avoid file path manipulation vulnerabilities | Documentation english | name = Avoid file path manipulation vulnerabilities ( CWE-73 ) | Updated | name = CWE-73: Avoid file path manipulation vulnerabilities |
7752 | quality-rule | CWE-73: Avoid file path manipulation vulnerabilities | Documentation english | reference = ...s/73.html Open Web Application Security Project (OWASP) http://www.owasp.org/i... | Updated | reference = ...s/73.html http://cwe.mitre.org/data/definitions/434.html Open Web Application S... |
7752 | quality-rule | CWE-73: Avoid file path manipulation vulnerabilities | Documentation english | Missing | Added | remediation = Validate all the user inputs. |
7756 | quality-rule | Avoid using READ statement without AT END clause or INVALID KEY clause | Documentation english | description = ...he AT END clause. Notes: - READ statements executed against VSAM files are not ... | Updated | description = ...he AT END or INVALID KEY clause. Notes: - READ statements executed against QSAM... |
7756 | quality-rule | Avoid using READ statement without AT END clause or INVALID KEY clause | Documentation english | name = ...tatement without AT END clause | Updated | name = ...tatement without AT END clause or INVALID KEY clause |
7756 | quality-rule | Avoid using READ statement without AT END clause or INVALID KEY clause | Documentation english | rationale = ...ot managed, then invalid data can be read and abnormal behavior can occur. | Updated | rationale = ...ot managed or if a key is not found, then invalid data can be read and abnormal ... |
7756 | quality-rule | Avoid using READ statement without AT END clause or INVALID KEY clause | Documentation english | remediation = ... a AT END clause to READ statements in order to manage errors and end of file si... | Updated | remediation = ... a AT END or INVALID KEY clause to READ statements in order to manage errors and... |
7756 | quality-rule | Avoid using READ statement without AT END clause or INVALID KEY clause | Documentation english | remediationSample = 1000-READ-DATA. READ CARDI... | Updated | remediationSample = * Example 1 SELECT F-CARS ASSIGN TO "CARS". ... |
7756 | quality-rule | Avoid using READ statement without AT END clause or INVALID KEY clause | Documentation english | sample = 1000-READ-DATA. READ CARDI... | Updated | sample = * Example 1 SELECT F-CARS ASSIGN TO "CARS". ... |
7760 | quality-rule | Avoid triggers, functions and procedures with a very low comment/code ratio | Technologies | [DB2 Server, SQL Server, Forms, PL/SQL, Microsoft T-SQL, Sybase T-SQL] | Updated | Added: [SQL Analyzer] |
7760 | quality-rule | Avoid triggers, functions and procedures with a very low comment/code ratio | Parameter #1: Minimum % Comment / Code Ratio | values(SQL Analyzer) = No default values | Updated | values(SQL Analyzer) = [5] |
7762 | quality-rule | Avoid undocumented Triggers, Functions and Procedures | Technologies | [DB2 Server, SQL Server, Forms, PL/SQL, Microsoft T-SQL, Sybase T-SQL] | Updated | Added: [SQL Analyzer] |
7766 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity | Technologies | [ASP, ABAP, DB2 Server, SQL Server, Forms, Visual Basic, PowerBuilder, Cobol, C++, C, C#, VB.NET, JavaScript, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL, .NET (Legacy Analyzer)] | Updated | Added: [SQL Analyzer] |
7768 | quality-rule | Avoid Artifacts with High Depth of Code | Technologies | [ASP, ABAP, DB2 Server, SQL Server, Forms, Visual Basic, PowerBuilder, Cobol, C++, C, C#, VB.NET, JavaScript, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL, .NET (Legacy Analyzer)] | Updated | Added: [SQL Analyzer] |
7772 | quality-rule | Avoid Artifacts with High Essential Complexity | Technologies | [ASP, ABAP, DB2 Server, SQL Server, Forms, Visual Basic, PowerBuilder, Cobol, C++, C, C#, VB.NET, JavaScript, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL, .NET (Legacy Analyzer)] | Updated | Added: [SQL Analyzer] |
7774 | quality-rule | Avoid Artifacts with High Integration Complexity | Technologies | [ASP, ABAP, DB2 Server, SQL Server, Forms, Visual Basic, Cobol, C++, C, C#, VB.NET, JavaScript, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL, .NET (Legacy Analyzer)] | Updated | Added: [SQL Analyzer] |
7776 | quality-rule | Avoid Artifacts with High Fan-In | Technologies | [ASP, ABAP, DB2 Server, SQL Server, Forms, Visual Basic, PowerBuilder, Cobol, C++, C, C#, VB.NET, JavaScript, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL, .NET (Legacy Analyzer)] | Updated | Added: [HTML5, SQL Analyzer] |
7778 | quality-rule | Avoid Artifacts with High Fan-Out | Technologies | [ASP, ABAP, DB2 Server, SQL Server, Forms, Visual Basic, PowerBuilder, Cobol, C++, C, C#, VB.NET, JavaScript, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL, .NET (Legacy Analyzer)] | Updated | Added: [HTML5, SQL Analyzer] |
7778 | quality-rule | Avoid Artifacts with High Fan-Out | Documentation english | rationale = ...difficult the maintenance and evolution as all updates in referenced Artifacts w... | Updated | rationale = ...difficult is the maintenance and evolution as all updates in referenced Artifact... |
7778 | quality-rule | Avoid Artifacts with High Fan-Out | Documentation english | Missing | Added | sample = public void MethodWithHightFanOut() { // Call method1 int Val1 = method... |
7782 | quality-rule | Avoid empty finally blocks | Technologies | [ASP, C#, VB.NET, JEE, .NET (Legacy Analyzer)] | Updated | Added: [HTML5] |
7784 | quality-rule | Avoid Artifacts with lines longer than X characters | Technologies | [ASP, DB2 Server, SQL Server, Forms, Visual Basic, C++, C, C#, VB.NET, JavaScript, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL, .NET (Legacy Analyzer)] | Updated | Added: [SQL Analyzer] |
7788 | quality-rule | Avoid empty catch blocks | Technologies | [ABAP, C#, VB.NET, JEE, .NET (Legacy Analyzer)] | Updated | Added: [HTML5] |
7792 | quality-rule | Avoid Classes with a High Number Of Children | Technologies | [ABAP, Visual Basic, PowerBuilder, C++, C#, VB.NET, JEE, .NET (Legacy Analyzer)] | Updated | Added: [HTML5] |
7792 | quality-rule | Avoid Classes with a High Number Of Children | Documentation english | output = ...mation: Class full name, NOC | Updated | output = ...mation: * Class full name, NOC |
7792 | quality-rule | Avoid Classes with a High Number Of Children | Documentation english | reference = A Metrics Suite for Object Oriented Design Chidamber, S.R. and C.F. Kemerer IEEE... | Updated | reference = http://it-cisq.org/ CISQ: ASCMM-MNT-18 A Metrics Suite for Object Oriented Desi... |
7802 | quality-rule | Avoid Classes with a High Depth of Inheritance Tree | Documentation english | description = This rule searches for Classes with a High Depth of Inheritance Tree (DIT greate... | Updated | description = Avoid Classes and Interfaces with a High Depth of Inheritance Tree (DIT greater ... |
7802 | quality-rule | Avoid Classes with a High Depth of Inheritance Tree | Documentation english | output = Associated to each artifact with violations, the Quality Rule provides: - The D... | Updated | output = This report lists all Classes and interfaces with a Depth of Inheritance Tree gr... |
7802 | quality-rule | Avoid Classes with a High Depth of Inheritance Tree | Documentation english | rationale = ...g a class requires prior understanding, which, in turn, is more complicated for ... | Updated | rationale = ...g a class (or interface) requires prior understanding, which, in turn, is more c... |
7802 | quality-rule | Avoid Classes with a High Depth of Inheritance Tree | Documentation english | reference = A Metrics Suite for Object Oriented Design Chidamber, S.R. and C.F. Kemerer IEEE... | Updated | reference = http://it-cisq.org/ CISQ : ASCMM-MNT-17 A Metrics Suite for Object Oriented Des... |
7802 | quality-rule | Avoid Classes with a High Depth of Inheritance Tree | Documentation english | total = Number of Classes | Updated | total = number of classes and interfaces |
7808 | quality-rule | Avoid Artifacts with SQL statement including subqueries | Technologies | [ABAP, DB2 Server, SQL Server, Forms, Visual Basic, Cobol, C++, C, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL] | Updated | Added: [SQL Analyzer] |
7808 | quality-rule | Avoid Artifacts with SQL statement including subqueries | Documentation english | remediation = ... to avoid if possible Subqueries | Updated | remediation = ... to avoid possible Subqueries |
7808 | quality-rule | Avoid Artifacts with SQL statement including subqueries | Documentation english | Missing | Added | reference = http://it-cisq.org/ CISQ: ASCPEM-PRF-04 |
7814 | quality-rule | Avoid Tables not using referential integrity | Technologies | [DB2 Server, SQL Server, PL/SQL, Microsoft T-SQL, Sybase T-SQL] | Updated | Added: [SQL Analyzer] |
7816 | quality-rule | Avoid using GOTO statement | Technologies | [DB2 Server, SQL Server, Forms, C++, C, C#, VB.NET, PL/SQL, Microsoft T-SQL, Sybase T-SQL] | Updated | Added: [SQL Analyzer] |
7828 | quality-rule | Avoid Artifacts with High RAW SQL Complexity | Technologies | [ABAP, DB2 Server, SQL Server, Forms, Visual Basic, PowerBuilder, Cobol, C++, C, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL] | Updated | Added: [SQL Analyzer] |
7842 | quality-rule | Avoid large Artifacts - too many Lines of Code | Technologies | [ABAP, DB2 Server, SQL Server, Forms, Cobol, C++, C, C#, VB.NET, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL, .NET (Legacy Analyzer)] | Updated | Added: [HTML5, SQL Analyzer] |
7842 | quality-rule | Avoid large Artifacts - too many Lines of Code | Parameter #1: Maximum Line Count | values(HTML5) = No default values | Updated | values(HTML5) = [100] |
7842 | quality-rule | Avoid large Artifacts - too many Lines of Code | Parameter #1: Maximum Line Count | values(SQL Analyzer) = No default values | Updated | values(SQL Analyzer) = [50] |
7856 | quality-rule | Avoid Tables with more than 20 columns on an OLTP system | Technologies | [DB2 Server, SQL Server, PL/SQL, Microsoft T-SQL, Sybase T-SQL] | Updated | Added: [SQL Analyzer] |
7860 | quality-rule | Avoid unreferenced Functions | Technologies | [ASP, ABAP, Forms, Visual Basic, C++, C, JavaScript, PL/SQL, JEE, Microsoft T-SQL, Sybase T-SQL] | Updated | Added: [SQL Analyzer] |
7896 | quality-rule | Avoid using Cursors | Activation | active = true, detached = false | Updated | detached = true |
7896 | quality-rule | Avoid using Cursors | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | critical = false, weight = 8 | Removed | Missing contribution |
7902 | quality-rule | Avoid SQL queries that no index can support | Documentation english | description = ... indexes. An SQL Query is using table's indexes if all the following conditions... | Updated | description = ... indexes. An SQL Query is using table's indexes if all the following conditions... |
7902 | quality-rule | Avoid SQL queries that no index can support | Documentation english | reference = Enhancing the Quality of ABAP Development Meijs - Krouwels - Heuvelmans - Sommen... | Updated | reference = http://it-cisq.org/ CISQ: ASCPEM-PRF-05 Enhancing the Quality of ABAP Developme... |
7908 | quality-rule | Avoid unreferenced Methods | Documentation english | Missing | Added | reference = http://it-cisq.org/ CISQ: ASCMM-MNT-20 |
7914 | quality-rule | Avoid direct access to Database Tables | Documentation english | description = Applications should not access directly database Tables | Updated | description = The rules list all artifacts that have direct access to the database table. |
7914 | quality-rule | Avoid direct access to Database Tables | Documentation english | output = ...lists all Objects having direct access to database Tables. It provides the follo... | Updated | output = ...lists all objects having direct access to database Tables. It provides the foll... |
7914 | quality-rule | Avoid direct access to Database Tables | Documentation english | rationale = ... database Table prevents the control at the database level of accesses. E.g.: us... | Updated | rationale = ... database table prevents the control at the database level of accesses. E.g.: us... |
7914 | quality-rule | Avoid direct access to Database Tables | Documentation english | reference = CISQ rule: ASCPEM-PRF-9. | Updated | reference = http://it-cisq.org/ CISQ rule: ASCPEM-PRF-9. |
7914 | quality-rule | Avoid direct access to Database Tables | Documentation english | remediation = Use Stored Procedures instead | Updated | remediation = Refactor the source code and used stored procedures instead. |
7914 | quality-rule | Avoid direct access to Database Tables | Documentation english | total = ...al number objects accessing the database | Updated | total = ...al number of objects accessing the database |
7914 | quality-rule | Avoid direct access to Database Tables | Documentation english | Missing | Added | remediationSample = SqlConnection sqlConnection1 = new SqlConnection ("Data Source=server;integrated... |
7914 | quality-rule | Avoid direct access to Database Tables | Documentation english | Missing | Added | sample = SqlConnection sqlConnection1 = new SqlConnection("Your Connection String"); SqlC... |
7934 | quality-rule | Avoid Superclass (or Interface) knowing Subclass (or Interface) | Documentation english | description = ...wledge of one of its Subclasses or Interface. The Superclass (or Interface) has ... | Updated | description = ...wledge of any of its subclasses or Interfaces. The Superclass (or Interface) has... |
7934 | quality-rule | Avoid Superclass (or Interface) knowing Subclass (or Interface) | Documentation english | output = ...ll name - referenced Class or Interface full name | Updated | output = ...ll name - Referenced class or interface full name |
7934 | quality-rule | Avoid Superclass (or Interface) knowing Subclass (or Interface) | Documentation english | reference = CISQ rule: ASCRM-RLB-14. | Updated | reference = http://it-cisq.org/ CISQ rule: ASCRM-RLB-14. |
7934 | quality-rule | Avoid Superclass (or Interface) knowing Subclass (or Interface) | Documentation english | total = the number of classes and interfaces | Updated | total = The number of classes and interfaces |
7962 | quality-rule | Avoid direct or indirect remote calls inside a loop(ASCPEM-PRF-8) | Documentation english | name = ...ect remote calls inside a loop | Updated | name = ...ect remote calls inside a loop(ASCPEM-PRF-8) |
7962 | quality-rule | Avoid direct or indirect remote calls inside a loop(ASCPEM-PRF-8) | Documentation english | reference = CISQ rule: ASCPEM-PRF-8. | Updated | reference = Please refer to CISQ rule: ASCPEM-PRF-8 : http://www.omg.org/spec/ASCPEM/1.0/PD... |
7964 | quality-rule | Avoid directly instantiating a Class used as a managed bean | Documentation english | description = Reports managed bean and Java methods that call a constructor of the class used ... | Updated | description = Reports Managed bean and Java methods that call a constructor of the class used ... |
7998 | quality-rule | Avoid local variables that are not initialized at declaration time | Diagnosis | scopeID = 310, propertyID = 139309 | Updated | scopeID = 300, propertyID = 139309 |
8000 | quality-rule | Avoid 'catch-all' statement | Documentation english | description = ...statement). | Updated | description = ...statement), except for 'main()' functions to catch unknown errors. This rule is ... |
8028 | quality-rule | Avoid missing default in switch statements | Technologies | [C++, C, C#, VB.NET, JEE] | Updated | Added: [HTML5] |
8032 | quality-rule | Avoid using a break statement in 'for' loops | Technologies | [C++, C, C#, VB.NET, JEE, .NET (Legacy Analyzer)] | Updated | Added: [HTML5] |
8044 | quality-rule | CWE-117: Avoid Log forging vulnerabilities | Documentation english | name = Avoid Log forging vulnerabilities ( CWE-117 ) | Updated | name = CWE-117: Avoid Log forging vulnerabilities |
8082 | quality-rule | Avoid Tables without Primary Key | Diagnosis | scopeID = 0, propertyID = 0 | Updated | scopeID = 400, propertyID = 140202 |
8082 | quality-rule | Avoid Tables without Primary Key | Operation | localSiteDiagnose = DIA_MANY_TABNOTINPKEY | Updated | localSiteDiagnose = null |
8082 | quality-rule | Avoid Tables without Primary Key | Operation | localSiteCountTotal = DIT_MANY_TABLES | Updated | localSiteCountTotal = null |
8098 | quality-rule | CWE-134: Avoid uncontrolled format string | Technologies | [JEE] | Updated | Added: [C#, VB.NET] |
8098 | quality-rule | CWE-134: Avoid uncontrolled format string | Documentation english | name = Avoid uncontrolled format string (CWE-134) | Updated | name = CWE-134: Avoid uncontrolled format string |
8102 | quality-rule | Avoid hardcoded network resource names | Documentation english | description = ...ardcoded: - URLs (of the form file:///c:/Tmp/Folder/ or http://host.com/folder) ... | Updated | description = ...ardcoded: - URLs (of the form file:///c:/Tmp/Folder/ or http://host.com/folder... |
8108 | quality-rule | Close the outermost stream ASAP | Diagnosis | scopeID = 526, propertyID = 140388 | Updated | scopeID = 699, propertyID = 140388 |
8108 | quality-rule | Close the outermost stream ASAP | Technologies | [JEE] | Updated | Added: [C#, VB.NET] |
8108 | quality-rule | Close the outermost stream ASAP | Documentation english | reference = http://stackoverflow.com/questions/15405396/is-it-necessary-to-close-input-outpu... | Updated | reference = http://it-cisq.org/ CISQ: ASCSM-CWE-772, ASCRM-CWE-772 CWE: CWE-772 |
8110 | quality-rule | Use dedicated stored procedures when multiple data accesses are needed (ASCPEM-PRF-10) | Documentation english | description = ... will. The default value is 2. Note: This quality rule implements the rule ASCP... | Updated | description = ... will. The default value is 2. |
8110 | quality-rule | Use dedicated stored procedures when multiple data accesses are needed (ASCPEM-PRF-10) | Documentation english | output = ...provides: - The number of SQL accesses - Bookmarks for violation patterns foun... | Updated | output = ...provides: - The number of SQL accesses - Bookmarks for violation patterns found ... |
8110 | quality-rule | Use dedicated stored procedures when multiple data accesses are needed (ASCPEM-PRF-10) | Documentation english | reference = ASCPEM 1.0, Automated Source Code Performance Efficiency Measure, Object Managem... | Updated | reference = http://it-cisq.org/ ASCPEM 1.0, Automated Source Code Performance Efficiency Mea... |
8110 | quality-rule | Use dedicated stored procedures when multiple data accesses are needed (ASCPEM-PRF-10) | Documentation english | sample = ... "(100,'JOHN','DOW', {d '2001-12-16'})"; String sql2 = "INSERT INTO STUD... | Updated | sample = ... "(100,'TOTO','TITI', {d '2001-12-16'})"; String sql2 = "INSERT INTO STU... |
8116 | quality-rule | Avoid calling system function (CALL 'cfunc') | Documentation english | name = ...system function (CALL 'cfunc') BETA | Updated | name = ...system function (CALL 'cfunc') |
8118 | quality-rule | Avoid using the RFC_ABAP_INSTALL_AND_RUN function | Documentation english | name = ..._ABAP_INSTALL_AND_RUN function BETA | Updated | name = ..._ABAP_INSTALL_AND_RUN function |
8120 | quality-rule | Avoid using CALL FUNCTION without error handling | Documentation english | name = ...UNCTION without error handling BETA | Updated | name = ...UNCTION without error handling |
8122 | quality-rule | Avoid using CALL METHOD without error handling | Documentation english | name = ... METHOD without error handling BETA | Updated | name = ... METHOD without error handling |
8124 | quality-rule | Do not use function module DB_EXISTS_INDEX (HANA) | Documentation english | name = ... module DB_EXISTS_INDEX (HANA) BETA | Updated | name = ... module DB_EXISTS_INDEX (HANA) |
8126 | quality-rule | Avoid using empty SELECT ... ENDSELECT loop | Documentation english | name = ...mpty SELECT ... ENDSELECT loop BETA | Updated | name = ...mpty SELECT ... ENDSELECT loop |
8128 | quality-rule | Avoid using UPDATE and DELETE without WHERE condition | Documentation english | name = ...DELETE without WHERE condition BETA | Updated | name = ...DELETE without WHERE condition |
8130 | quality-rule | Avoid using database hints | Documentation english | name = Avoid using database hints BETA | Updated | name = Avoid using database hints |
8132 | quality-rule | Avoid using CHECK, EXIT,or RETURN in SELECT ... ENDSELECT loops | Documentation english | name = ... in SELECT ... ENDSELECT loops BETA | Updated | name = ... in SELECT ... ENDSELECT loops |
8134 | quality-rule | Avoid unsorted data after SELECT queries | Documentation english | name = ...rted data after SELECT queries BETA | Updated | name = ...rted data after SELECT queries |
8140 | quality-rule | Subscripts and iterators must be defined with BINARY usage | Definition | Missing | Added | active = true, detached = false |
8140 | quality-rule | Subscripts and iterators must be defined with BINARY usage | Quality Contribution to 'Efficiency - Expensive Calls in Loops' (66068) | Missing contribution | Added | critical = false, weight = 3 |
8142 | quality-rule | Prefer using indexes instead of subscripts | Definition | Missing | Added | active = true, detached = false |
8142 | quality-rule | Prefer using indexes instead of subscripts | Quality Contribution to 'Efficiency - Expensive Calls in Loops' (66068) | Missing contribution | Added | critical = false, weight = 3 |
8144 | quality-rule | Avoid using INITIALIZE statement on data structures | Definition | Missing | Added | active = true, detached = false |
8144 | quality-rule | Avoid using INITIALIZE statement on data structures | Quality Contribution to 'Efficiency - Memory, Network and Disk Space Management' (61018) | Missing contribution | Added | critical = false, weight = 4 |
8146 | quality-rule | Avoid calling programs statically | Definition | Missing | Added | active = true, detached = false |
8146 | quality-rule | Avoid calling programs statically | Quality Contribution to 'Efficiency - Memory, Network and Disk Space Management' (61018) | Missing contribution | Added | critical = false, weight = 5 |
8148 | quality-rule | Avoid artifacts having Incorrect Type Conversion or Cast | Definition | Missing | Added | active = true, detached = false |
8148 | quality-rule | Avoid artifacts having Incorrect Type Conversion or Cast | Quality Contribution to 'Secure Coding - Encapsulation' (66066) | Missing contribution | Added | critical = true, weight = 8 |
8150 | quality-rule | Avoid using Parse for primitive types and used instead TryParse | Definition | Missing | Added | active = true, detached = false |
8150 | quality-rule | Avoid using Parse for primitive types and used instead TryParse | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | Missing contribution | Added | critical = false, weight = 7 |
8152 | quality-rule | Avoid having transaction with the Thread.Sleep method in a loop | Definition | Missing | Added | active = true, detached = false |
8152 | quality-rule | Avoid having transaction with the Thread.Sleep method in a loop | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | Missing contribution | Added | critical = false, weight = 8 |
8154 | quality-rule | Avoid using GC.Collect() | Definition | Missing | Added | active = true, detached = false |
8154 | quality-rule | Avoid using GC.Collect() | Quality Contribution to 'Efficiency - Memory, Network and Disk Space Management' (61018) | Missing contribution | Added | critical = false, weight = 7 |
8156 | quality-rule | Persistent classes should implement GetHashCode() and Equals() | Definition | Missing | Added | active = true, detached = false |
8156 | quality-rule | Persistent classes should implement GetHashCode() and Equals() | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | Missing contribution | Added | critical = false, weight = 9 |
8158 | quality-rule | Runtime Resource Management Control Element in a Component Built to Run on Application Servers | Definition | Missing | Added | active = true, detached = false |
8158 | quality-rule | Runtime Resource Management Control Element in a Component Built to Run on Application Servers | Quality Contribution to 'Secure Coding - Time and State' (66065) | Missing contribution | Added | critical = true, weight = 8 |
8160 | quality-rule | Check PCB status code after DLI queries | Definition | Missing | Added | active = true, detached = false |
8160 | quality-rule | Check PCB status code after DLI queries | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | Missing contribution | Added | critical = false, weight = 8 |
8162 | quality-rule | CICS return code should be checked | Definition | Missing | Added | active = true, detached = false |
8162 | quality-rule | CICS return code should be checked | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | Missing contribution | Added | critical = false, weight = 8 |
8214 | quality-rule | CWE-672: Expired or Released Resource should not be used | Definition | Missing | Added | active = true, detached = false |
8214 | quality-rule | CWE-672: Expired or Released Resource should not be used | Quality Contribution to 'Efficiency - Memory, Network and Disk Space Management' (61018) | Missing contribution | Added | critical = true, weight = 8 |
8216 | quality-rule | CWE-681: Avoid numerical data corruption during incompatible mutation | Definition | Missing | Added | active = true, detached = false |
8216 | quality-rule | CWE-681: Avoid numerical data corruption during incompatible mutation | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | Missing contribution | Added | critical = true, weight = 9 |
8218 | quality-rule | CWE-434: Content type should be checked when receiving a HTTP Post | Definition | Missing | Added | active = true, detached = false |
8218 | quality-rule | CWE-434: Content type should be checked when receiving a HTTP Post | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | Missing contribution | Added | critical = true, weight = 8 |
8220 | quality-rule | Avoid using deprecated method, constructor, field, type or package | Definition | Missing | Added | active = true, detached = false |
8220 | quality-rule | Avoid using deprecated method, constructor, field, type or package | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | Missing contribution | Added | critical = true, weight = 6 |
8222 | quality-rule | CWE-798 : Use of Hard-coded Credentials | Definition | Missing | Added | active = true, detached = false |
8222 | quality-rule | CWE-798 : Use of Hard-coded Credentials | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
65105 | quality-distribution | Size Distribution | Parameter #1: Average Size Threshold | values(HTML5) = No default values | Updated | values(HTML5) = [100.0] |
65105 | quality-distribution | Size Distribution | Parameter #1: Average Size Threshold | values(SQL Analyzer) = No default values | Updated | values(SQL Analyzer) = [100.0] |
65105 | quality-distribution | Size Distribution | Parameter #2: Large Size Threshold | values(HTML5) = No default values | Updated | values(HTML5) = [500.0] |
65105 | quality-distribution | Size Distribution | Parameter #2: Large Size Threshold | values(SQL Analyzer) = No default values | Updated | values(SQL Analyzer) = [500.0] |
65105 | quality-distribution | Size Distribution | Parameter #3: Very Large Size Threshold | values(HTML5) = No default values | Updated | values(HTML5) = [1000.0] |
65105 | quality-distribution | Size Distribution | Parameter #3: Very Large Size Threshold | values(SQL Analyzer) = No default values | Updated | values(SQL Analyzer) = [1000.0] |
65350 | quality-distribution | Coupling Distribution | Parameter #1: Average Coupling Artifacts Threshold | values(HTML5) = No default values | Updated | values(HTML5) = [4.0] |
65350 | quality-distribution | Coupling Distribution | Parameter #1: Average Coupling Artifacts Threshold | values(SQL Analyzer) = No default values | Updated | values(SQL Analyzer) = [4.0] |
65350 | quality-distribution | Coupling Distribution | Parameter #2: High Coupling Artifacts Threshold | values(HTML5) = No default values | Updated | values(HTML5) = [10.0] |
65350 | quality-distribution | Coupling Distribution | Parameter #2: High Coupling Artifacts Threshold | values(SQL Analyzer) = No default values | Updated | values(SQL Analyzer) = [10.0] |
65350 | quality-distribution | Coupling Distribution | Parameter #3: Very High Coupling Artifacts Threshold | values(HTML5) = No default values | Updated | values(HTML5) = [30.0] |
65350 | quality-distribution | Coupling Distribution | Parameter #3: Very High Coupling Artifacts Threshold | values(SQL Analyzer) = No default values | Updated | values(SQL Analyzer) = [30.0] |
65501 | quality-distribution | Cyclomatic Complexity Distribution | Parameter #1: Average Complexity Artifact Threshold | values(HTML5) = No default values | Updated | values(HTML5) = [5.0] |
65501 | quality-distribution | Cyclomatic Complexity Distribution | Parameter #1: Average Complexity Artifact Threshold | values(SQL Analyzer) = No default values | Updated | values(SQL Analyzer) = [5.0] |
65501 | quality-distribution | Cyclomatic Complexity Distribution | Parameter #2: High Complexity Artifact Threshold | values(HTML5) = No default values | Updated | values(HTML5) = [15.0] |
65501 | quality-distribution | Cyclomatic Complexity Distribution | Parameter #2: High Complexity Artifact Threshold | values(SQL Analyzer) = No default values | Updated | values(SQL Analyzer) = [15.0] |
65501 | quality-distribution | Cyclomatic Complexity Distribution | Parameter #3: Very High Complexity Artifact Threshold | values(HTML5) = No default values | Updated | values(HTML5) = [30.0] |
65501 | quality-distribution | Cyclomatic Complexity Distribution | Parameter #3: Very High Complexity Artifact Threshold | values(SQL Analyzer) = No default values | Updated | values(SQL Analyzer) = [30.0] |
66010 | quality-distribution | Reuse by Call Distribution | Parameter #1: Average Reuse Threshold | values(SQL Analyzer) = No default values | Updated | values(SQL Analyzer) = [4.0] |
66010 | quality-distribution | Reuse by Call Distribution | Parameter #2: High Reuse Threshold | values(SQL Analyzer) = No default values | Updated | values(SQL Analyzer) = [10.0] |
66010 | quality-distribution | Reuse by Call Distribution | Parameter #3: Very High Reuse Threshold | values(SQL Analyzer) = No default values | Updated | values(SQL Analyzer) = [50.0] |
66015 | quality-distribution | Class Complexity Distribution (WMC) | Parameter #1: Average Class Complexity Threshold | values(SQL Analyzer) = No default values | Updated | values(SQL Analyzer) = [100.0] |
66015 | quality-distribution | Class Complexity Distribution (WMC) | Parameter #2: High Class Complexity Threshold | values(SQL Analyzer) = No default values | Updated | values(SQL Analyzer) = [500.0] |
66015 | quality-distribution | Class Complexity Distribution (WMC) | Parameter #3: Very High Class Complexity Threshold | values(SQL Analyzer) = No default values | Updated | values(SQL Analyzer) = [1000.0] |
66020 | quality-distribution | Class Fan-Out Distribution | Parameter #1: Average Class Fan-Out Threshold | values(SQL Analyzer) = No default values | Updated | values(SQL Analyzer) = [5.0] |
66020 | quality-distribution | Class Fan-Out Distribution | Parameter #2: High Class Fan-Out Threshold | values(SQL Analyzer) = No default values | Updated | values(SQL Analyzer) = [15.0] |
66020 | quality-distribution | Class Fan-Out Distribution | Parameter #3: Very High Class Fan-Out Threshold | values(SQL Analyzer) = No default values | Updated | values(SQL Analyzer) = [30.0] |
66021 | quality-distribution | Class Fan-In Distribution | Parameter #1: Average Class Fan-In Threshold | values(SQL Analyzer) = No default values | Updated | values(SQL Analyzer) = [4.0] |
66021 | quality-distribution | Class Fan-In Distribution | Parameter #2: High Class Fan-In Threshold | values(SQL Analyzer) = No default values | Updated | values(SQL Analyzer) = [10.0] |
66021 | quality-distribution | Class Fan-In Distribution | Parameter #3: Very High Class Fan-In Threshold | values(SQL Analyzer) = No default values | Updated | values(SQL Analyzer) = [30.0] |
1020000 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity (HTML5/Javascript) | Definition | Missing | Added | active = true, detached = false |
1020000 | quality-rule | Avoid Artifacts with High Cyclomatic Complexity (HTML5/Javascript) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | Missing contribution | Added | critical = false, weight = 5 |
1020002 | quality-rule | Avoid programs with low comment / code ratio (HTML5/Javascript) | Definition | Missing | Added | active = true, detached = false |
1020002 | quality-rule | Avoid programs with low comment / code ratio (HTML5/Javascript) | Quality Contribution to 'Documentation - Volume of Comments' (61028) | Missing contribution | Added | critical = false, weight = 6 |
1020004 | quality-rule | Avoid to use querySelectorAll | Definition | Missing | Added | active = true, detached = false |
1020004 | quality-rule | Avoid to use querySelectorAll | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = true, weight = 7 |
1020006 | quality-rule | Avoid to call a function in a termination loop | Definition | Missing | Added | active = true, detached = false |
1020006 | quality-rule | Avoid to call a function in a termination loop | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = true, weight = 7 |
1020008 | quality-rule | Avoid for-in loop | Definition | Missing | Added | active = true, detached = false |
1020008 | quality-rule | Avoid for-in loop | Quality Contribution to 'Efficiency - Expensive Calls in Loops' (66068) | Missing contribution | Added | critical = false, weight = 4 |
1020010 | quality-rule | Avoid using forEach() | Definition | Missing | Added | active = true, detached = false |
1020010 | quality-rule | Avoid using forEach() | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = false, weight = 7 |
1020012 | quality-rule | Avoid using a web service with WebSocket inside a loop | Definition | Missing | Added | active = true, detached = false |
1020012 | quality-rule | Avoid using a web service with WebSocket inside a loop | Quality Contribution to 'Efficiency - Expensive Calls in Loops' (66068) | Missing contribution | Added | critical = true, weight = 7 |
1020014 | quality-rule | Avoid using a web service with XMLHttpRequest inside a loop | Definition | Missing | Added | active = true, detached = false |
1020014 | quality-rule | Avoid using a web service with XMLHttpRequest inside a loop | Quality Contribution to 'Efficiency - Expensive Calls in Loops' (66068) | Missing contribution | Added | critical = true, weight = 7 |
1020016 | quality-rule | Avoid using too much dot notation in loop | Definition | Missing | Added | active = true, detached = false |
1020016 | quality-rule | Avoid using too much dot notation in loop | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = false, weight = 4 |
1020018 | quality-rule | Avoid using Web SQL databases | Definition | Missing | Added | active = true, detached = false |
1020018 | quality-rule | Avoid using Web SQL databases | Quality Contribution to 'Architecture - Multi-Layers and Data Access' (61001) | Missing contribution | Added | critical = true, weight = 9 |
1020020 | quality-rule | Avoid JavaScript to block page loading | Definition | Missing | Added | active = true, detached = false |
1020020 | quality-rule | Avoid JavaScript to block page loading | Quality Contribution to 'Efficiency - Memory, Network and Disk Space Management' (61018) | Missing contribution | Added | critical = false, weight = 5 |
1020022 | quality-rule | Avoid using submitted markup containing "form" and "formaction" attributes | Definition | Missing | Added | active = true, detached = false |
1020022 | quality-rule | Avoid using submitted markup containing "form" and "formaction" attributes | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
1020024 | quality-rule | Avoid using submit markup related to "form" with id attribute | Definition | Missing | Added | active = true, detached = false |
1020024 | quality-rule | Avoid using submit markup related to "form" with id attribute | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 7 |
1020026 | quality-rule | Avoid using autofocus and onfocus in submitted markup | Definition | Missing | Added | active = true, detached = false |
1020026 | quality-rule | Avoid using autofocus and onfocus in submitted markup | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 7 |
1020028 | quality-rule | Avoid using autofocus and onblur in submitted markup | Definition | Missing | Added | active = true, detached = false |
1020028 | quality-rule | Avoid using autofocus and onblur in submitted markup | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 7 |
1020030 | quality-rule | Avoid using javascript or expression in the CSS file | Definition | Missing | Added | active = true, detached = false |
1020030 | quality-rule | Avoid using javascript or expression in the CSS file | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
1020032 | quality-rule | Avoid using video poster attributes in combination with javascript | Definition | Missing | Added | active = true, detached = false |
1020032 | quality-rule | Avoid using video poster attributes in combination with javascript | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 7 |
1020034 | quality-rule | Avoid hosting HTML code in iframe srcdoc | Definition | Missing | Added | active = true, detached = false |
1020034 | quality-rule | Avoid hosting HTML code in iframe srcdoc | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 7 |
1020036 | quality-rule | Avoid using onscroll event with autofocus input | Definition | Missing | Added | active = true, detached = false |
1020036 | quality-rule | Avoid using onscroll event with autofocus input | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 7 |
1020038 | quality-rule | Avoid defining and calling functions inside loops | Definition | Missing | Added | active = true, detached = false |
1020038 | quality-rule | Avoid defining and calling functions inside loops | Quality Contribution to 'Efficiency - Expensive Calls in Loops' (66068) | Missing contribution | Added | critical = false, weight = 5 |
1020040 | quality-rule | Avoid using delete with no object properties | Definition | Missing | Added | active = true, detached = false |
1020040 | quality-rule | Avoid using delete with no object properties | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | Missing contribution | Added | critical = false, weight = 5 |
1020042 | quality-rule | Avoid having iframe inside a tag | Definition | Missing | Added | active = true, detached = false |
1020042 | quality-rule | Avoid having iframe inside a tag | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 7 |
1020044 | quality-rule | Avoid using setData in ondragstart with attribute draggable set to true | Definition | Missing | Added | active = true, detached = false |
1020044 | quality-rule | Avoid using setData in ondragstart with attribute draggable set to true | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 7 |
1020046 | quality-rule | Avoid using oninput in body containing input autofocus | Definition | Missing | Added | active = true, detached = false |
1020046 | quality-rule | Avoid using oninput in body containing input autofocus | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 7 |
1020048 | quality-rule | Avoid using source tag in video/audio with event handler | Definition | Missing | Added | active = true, detached = false |
1020048 | quality-rule | Avoid using source tag in video/audio with event handler | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 7 |
1020050 | quality-rule | Avoid white-listing the "dirname" attribute in user generated content | Definition | Missing | Added | active = true, detached = false |
1020050 | quality-rule | Avoid white-listing the "dirname" attribute in user generated content | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 7 |
1020052 | quality-rule | Avoid using import with external URI | Definition | Missing | Added | active = true, detached = false |
1020052 | quality-rule | Avoid using import with external URI | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 7 |
1020054 | quality-rule | Avoid using delete on arrays | Definition | Missing | Added | active = true, detached = false |
1020054 | quality-rule | Avoid using delete on arrays | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | Missing contribution | Added | critical = false, weight = 5 |
1020056 | quality-rule | Avoid using Javascript Document.all collection | Definition | Missing | Added | active = true, detached = false |
1020056 | quality-rule | Avoid using Javascript Document.all collection | Quality Contribution to 'Efficiency - Memory, Network and Disk Space Management' (61018) | Missing contribution | Added | critical = false, weight = 4 |
1020058 | quality-rule | Avoid using eval() | Definition | Missing | Added | active = true, detached = false |
1020058 | quality-rule | Avoid using eval() | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 7 |
1020060 | quality-rule | Avoid using console.log() | Definition | Missing | Added | active = true, detached = false |
1020060 | quality-rule | Avoid using console.log() | Quality Contribution to 'Secure Coding - Encapsulation' (66066) | Missing contribution | Added | critical = false, weight = 5 |
1020062 | quality-rule | Avoid using non thread-safe Javascript singleton pattern | Definition | Missing | Added | active = true, detached = false |
1020062 | quality-rule | Avoid using non thread-safe Javascript singleton pattern | Quality Contribution to 'Secure Coding - API Abuse' (66063) | Missing contribution | Added | critical = false, weight = 8 |
1020064 | quality-rule | Avoid Superclass knowing Subclass in Javascript | Definition | Missing | Added | active = true, detached = false |
1020064 | quality-rule | Avoid Superclass knowing Subclass in Javascript | Quality Contribution to 'Programming Practices - OO Inheritance and Polymorphism' (61003) | Missing contribution | Added | critical = false, weight = 9 |
1020066 | quality-rule | Avoid using Javascript Function constructor | Definition | Missing | Added | active = true, detached = false |
1020066 | quality-rule | Avoid using Javascript Function constructor | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | Missing contribution | Added | critical = false, weight = 7 |
1020068 | quality-rule | Avoid return statement in finally block | Definition | Missing | Added | active = true, detached = false |
1020068 | quality-rule | Avoid return statement in finally block | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | Missing contribution | Added | critical = true, weight = 8 |
1020070 | quality-rule | Avoid hardcoded network resource names in Javascript | Definition | Missing | Added | active = true, detached = false |
1020070 | quality-rule | Avoid hardcoded network resource names in Javascript | Quality Contribution to 'Architecture - OS and Platform Independence' (61004) | Missing contribution | Added | critical = false, weight = 7 |
1020072 | quality-rule | Avoid direct access to Database Tables in Javascript | Definition | Missing | Added | active = true, detached = false |
1020072 | quality-rule | Avoid direct access to Database Tables in Javascript | Quality Contribution to 'Architecture - Multi-Layers and Data Access' (61001) | Missing contribution | Added | critical = false, weight = 6 |
1020074 | quality-rule | Avoid enabling autocomplete "on" for inputs/forms | Definition | Missing | Added | active = true, detached = false |
1020074 | quality-rule | Avoid enabling autocomplete "on" for inputs/forms | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = false, weight = 7 |
1020076 | quality-rule | Avoid Artifacts with too many parameters (Javascript) | Definition | Missing | Added | active = true, detached = false |
1020076 | quality-rule | Avoid Artifacts with too many parameters (Javascript) | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | Missing contribution | Added | critical = false, weight = 8 |
1020078 | quality-rule | Avoid using setTimeout() | Definition | Missing | Added | active = true, detached = false |
1020078 | quality-rule | Avoid using setTimeout() | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 7 |
1020080 | quality-rule | Avoid using setInterval() | Definition | Missing | Added | active = true, detached = false |
1020080 | quality-rule | Avoid using setInterval() | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 7 |
1020300 | quality-rule | Avoid using the call of web service $.ajax inside a loop | Definition | Missing | Added | active = true, detached = false |
1020300 | quality-rule | Avoid using the call of web service $.ajax inside a loop | Quality Contribution to 'Efficiency - Expensive Calls in Loops' (66068) | Missing contribution | Added | critical = true, weight = 9 |
1020302 | quality-rule | Avoid using element type in jQuery | Definition | Missing | Added | active = true, detached = false |
1020302 | quality-rule | Avoid using element type in jQuery | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = false, weight = 5 |
1020304 | quality-rule | Implement success and error callbacks when using $.ajax interface | Definition | Missing | Added | active = true, detached = false |
1020304 | quality-rule | Implement success and error callbacks when using $.ajax interface | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | Missing contribution | Added | critical = true, weight = 8 |
1020306 | quality-rule | Always use find for Id->Child nested selectors | Definition | Missing | Added | active = true, detached = false |
1020306 | quality-rule | Always use find for Id->Child nested selectors | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = false, weight = 7 |
1020308 | quality-rule | Always cache the returned objects in variables to be reused | Definition | Missing | Added | active = true, detached = false |
1020308 | quality-rule | Always cache the returned objects in variables to be reused | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = false, weight = 7 |
1020310 | quality-rule | Use "type=" to select elements by type | Definition | Missing | Added | active = true, detached = false |
1020310 | quality-rule | Use "type=" to select elements by type | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = false, weight = 5 |
1020312 | quality-rule | Avoid use of anonymous functions to attach events | Definition | Missing | Added | active = true, detached = false |
1020312 | quality-rule | Avoid use of anonymous functions to attach events | Quality Contribution to 'Architecture - Reuse' (66009) | Missing contribution | Added | critical = false, weight = 5 |
1020314 | quality-rule | Avoid using css() of many elements | Definition | Missing | Added | active = true, detached = false |
1020314 | quality-rule | Avoid using css() of many elements | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = false, weight = 7 |
1020316 | quality-rule | Avoid Universal Selectors | Definition | Missing | Added | active = true, detached = false |
1020316 | quality-rule | Avoid Universal Selectors | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = false, weight = 7 |
1020318 | quality-rule | Avoid using jQuery deprecated methods | Definition | Missing | Added | active = true, detached = false |
1020318 | quality-rule | Avoid using jQuery deprecated methods | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | Missing contribution | Added | critical = false, weight = 5 |
1020500 | quality-rule | Avoid the use of the default JavaScript implementation [].forEach in AngularJS web app | Definition | Missing | Added | active = true, detached = false |
1020500 | quality-rule | Avoid the use of the default JavaScript implementation [].forEach in AngularJS web app | Quality Contribution to 'Efficiency - Expensive Calls in Loops' (66068) | Missing contribution | Added | critical = false, weight = 4 |
1020502 | quality-rule | Avoid the use of JSON.parse and JSON.stringify in AngularJS web app | Definition | Missing | Added | active = true, detached = false |
1020502 | quality-rule | Avoid the use of JSON.parse and JSON.stringify in AngularJS web app | Quality Contribution to 'Architecture - Reuse' (66009) | Missing contribution | Added | critical = false, weight = 4 |
1020504 | quality-rule | Avoid using the call of web service with AngularJS $http inside a loop | Definition | Missing | Added | active = true, detached = false |
1020504 | quality-rule | Avoid using the call of web service with AngularJS $http inside a loop | Quality Contribution to 'Efficiency - Expensive Calls in Loops' (66068) | Missing contribution | Added | critical = true, weight = 5 |
1020506 | quality-rule | Avoid using $scope in controllers | Definition | Missing | Added | active = false, detached = false |
1020506 | quality-rule | Avoid using $scope in controllers | Quality Contribution to 'Programming Practices - Structuredness' (61024) | Missing contribution | Added | critical = false, weight = 5 |
1020508 | quality-rule | Use Angular wrapper service $document | Definition | Missing | Added | active = true, detached = false |
1020508 | quality-rule | Use Angular wrapper service $document | Quality Contribution to 'Programming Practices - Structuredness' (61024) | Missing contribution | Added | critical = false, weight = 3 |
1020510 | quality-rule | Use Angular wrapper service $window | Definition | Missing | Added | active = true, detached = false |
1020510 | quality-rule | Use Angular wrapper service $window | Quality Contribution to 'Programming Practices - Structuredness' (61024) | Missing contribution | Added | critical = false, weight = 3 |
1020512 | quality-rule | Use Angular wrapper service $timeout | Definition | Missing | Added | active = true, detached = false |
1020512 | quality-rule | Use Angular wrapper service $timeout | Quality Contribution to 'Programming Practices - Structuredness' (61024) | Missing contribution | Added | critical = false, weight = 3 |
1020514 | quality-rule | Only use the angular.isUndefined or angular.isDefined methods in AngularJS application | Definition | Missing | Added | active = true, detached = false |
1020514 | quality-rule | Only use the angular.isUndefined or angular.isDefined methods in AngularJS application | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | Missing contribution | Added | critical = false, weight = 3 |
1020516 | quality-rule | Avoid using Javascript Array typecheck in AngularJS application | Definition | Missing | Added | active = true, detached = false |
1020516 | quality-rule | Avoid using Javascript Array typecheck in AngularJS application | Quality Contribution to 'Programming Practices - Structuredness' (61024) | Missing contribution | Added | critical = false, weight = 5 |
1020518 | quality-rule | Avoid using Javascript Date typecheck in AngularJS application | Definition | Missing | Added | active = true, detached = false |
1020518 | quality-rule | Avoid using Javascript Date typecheck in AngularJS application | Quality Contribution to 'Programming Practices - Structuredness' (61024) | Missing contribution | Added | critical = false, weight = 5 |
1020520 | quality-rule | Avoid using Javascript Function typecheck in AngularJS application | Definition | Missing | Added | active = true, detached = false |
1020520 | quality-rule | Avoid using Javascript Function typecheck in AngularJS application | Quality Contribution to 'Programming Practices - Structuredness' (61024) | Missing contribution | Added | critical = false, weight = 5 |
1020522 | quality-rule | Avoid using Javascript String typecheck in AngularJS application | Definition | Missing | Added | active = true, detached = false |
1020522 | quality-rule | Avoid using Javascript String typecheck in AngularJS application | Quality Contribution to 'Programming Practices - Structuredness' (61024) | Missing contribution | Added | critical = false, weight = 5 |
1020524 | quality-rule | Avoid using Javascript Object typecheck in AngularJS application | Definition | Missing | Added | active = true, detached = false |
1020524 | quality-rule | Avoid using Javascript Object typecheck in AngularJS application | Quality Contribution to 'Programming Practices - Structuredness' (61024) | Missing contribution | Added | critical = false, weight = 5 |
1020526 | quality-rule | Avoid using Javascript Number typecheck in AngularJS application | Definition | Missing | Added | active = true, detached = false |
1020526 | quality-rule | Avoid using Javascript Number typecheck in AngularJS application | Quality Contribution to 'Programming Practices - Structuredness' (61024) | Missing contribution | Added | critical = false, weight = 5 |
1020528 | quality-rule | Avoid using Javascript Regexp typecheck in AngularJS application | Definition | Missing | Added | active = true, detached = false |
1020528 | quality-rule | Avoid using Javascript Regexp typecheck in AngularJS application | Quality Contribution to 'Programming Practices - Structuredness' (61024) | Missing contribution | Added | critical = false, weight = 5 |
1020530 | quality-rule | Avoid using !angular.isUndefined() and !angular.isDefined() in AngularJS application | Definition | Missing | Added | active = true, detached = false |
1020530 | quality-rule | Avoid using !angular.isUndefined() and !angular.isDefined() in AngularJS application | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | Missing contribution | Added | critical = false, weight = 3 |
1020532 | quality-rule | Use Angular factory() instead of service() | Definition | Missing | Added | active = true, detached = false |
1020532 | quality-rule | Use Angular factory() instead of service() | Quality Contribution to 'Programming Practices - Structuredness' (61024) | Missing contribution | Added | critical = false, weight = 5 |
1020534 | quality-rule | Avoid using a web service with AngularJS $resource inside a loop | Definition | Missing | Added | active = true, detached = false |
1020534 | quality-rule | Avoid using a web service with AngularJS $resource inside a loop | Quality Contribution to 'Efficiency - Expensive Calls in Loops' (66068) | Missing contribution | Added | critical = true, weight = 5 |
1020536 | quality-rule | Avoid using $ or jQuery, use angular.element instead | Definition | Missing | Added | active = true, detached = false |
1020536 | quality-rule | Avoid using $ or jQuery, use angular.element instead | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | Missing contribution | Added | critical = false, weight = 5 |
1020538 | quality-rule | Avoid wrapping angular.element objects with jQuery or $ | Definition | Missing | Added | active = true, detached = false |
1020538 | quality-rule | Avoid wrapping angular.element objects with jQuery or $ | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | Missing contribution | Added | critical = false, weight = 5 |
1020540 | quality-rule | Avoid using $http success and error function | Definition | Missing | Added | active = true, detached = false |
1020540 | quality-rule | Avoid using $http success and error function | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | Missing contribution | Added | critical = false, weight = 8 |
1020542 | quality-rule | Enable Content Security Policy when creating an AngularJS application | Definition | Missing | Added | active = true, detached = false |
1020542 | quality-rule | Enable Content Security Policy when creating an AngularJS application | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
1020544 | quality-rule | Avoid disabling Strict Contextual Escaping (SCE) when created | Definition | Missing | Added | active = true, detached = false |
1020544 | quality-rule | Avoid disabling Strict Contextual Escaping (SCE) when created | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 7 |
1020546 | quality-rule | Avoid using unsanitized AngularJS application | Definition | Missing | Added | active = true, detached = false |
1020546 | quality-rule | Avoid using unsanitized AngularJS application | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 7 |
1020548 | quality-rule | Avoid disabling withCredentials option for the httpProvider | Definition | Missing | Added | active = true, detached = false |
1020548 | quality-rule | Avoid disabling withCredentials option for the httpProvider | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 7 |
1020700 | quality-rule | Avoid the lack of error handling in the Node.js callbacks | Definition | Missing | Added | active = true, detached = false |
1020700 | quality-rule | Avoid the lack of error handling in the Node.js callbacks | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | Missing contribution | Added | critical = false, weight = 5 |
1020702 | quality-rule | Avoid using process.exit() | Definition | Missing | Added | active = true, detached = false |
1020702 | quality-rule | Avoid using process.exit() | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | Missing contribution | Added | critical = false, weight = 7 |
1020704 | quality-rule | Avoid using string concatenation when using __dirname and __filename | Definition | Missing | Added | active = true, detached = false |
1020704 | quality-rule | Avoid using string concatenation when using __dirname and __filename | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | Missing contribution | Added | critical = false, weight = 5 |
1020706 | quality-rule | Ensure the Content-Security-Policy is activated | Definition | Missing | Added | active = true, detached = false |
1020706 | quality-rule | Ensure the Content-Security-Policy is activated | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
1020708 | quality-rule | Ensure the X-Powered-By header is disabled | Definition | Missing | Added | active = true, detached = false |
1020708 | quality-rule | Ensure the X-Powered-By header is disabled | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
1020710 | quality-rule | Ensure the X-XSS-Protection header is enabled | Definition | Missing | Added | active = true, detached = false |
1020710 | quality-rule | Ensure the X-XSS-Protection header is enabled | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
1020712 | quality-rule | Ensure the X-Frame-Options header is setup | Definition | Missing | Added | active = true, detached = false |
1020712 | quality-rule | Ensure the X-Frame-Options header is setup | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
1020714 | quality-rule | Avoid having multiple routes for the same path with Node.js Express App | Definition | Missing | Added | active = true, detached = false |
1020714 | quality-rule | Avoid having multiple routes for the same path with Node.js Express App | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = true, weight = 8 |
1020716 | quality-rule | Avoid using the call of web service with Node.js http.get or http.request inside a loop | Definition | Missing | Added | active = true, detached = false |
1020716 | quality-rule | Avoid using the call of web service with Node.js http.get or http.request inside a loop | Quality Contribution to 'Efficiency - Expensive Calls in Loops' (66068) | Missing contribution | Added | critical = true, weight = 8 |
1020718 | quality-rule | Ensure that browser cannot cache or store a page | Definition | Missing | Added | active = true, detached = false |
1020718 | quality-rule | Ensure that browser cannot cache or store a page | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = false, weight = 7 |
1020720 | quality-rule | Allow only HTTPS communication | Definition | Missing | Added | active = true, detached = false |
1020720 | quality-rule | Allow only HTTPS communication | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
1020722 | quality-rule | Ensure to use secure HTTPS protocol | Definition | Missing | Added | active = true, detached = false |
1020722 | quality-rule | Ensure to use secure HTTPS protocol | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
1020724 | quality-rule | Ensure that marked is sanitized | Definition | Missing | Added | active = true, detached = false |
1020724 | quality-rule | Ensure that marked is sanitized | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 7 |
1020726 | quality-rule | Ensure that CSRF Protection is enabled | Definition | Missing | Added | active = true, detached = false |
1020726 | quality-rule | Ensure that CSRF Protection is enabled | Quality Contribution to 'Secure Coding - Input Validation' (66062) | Missing contribution | Added | critical = true, weight = 9 |
1020728 | quality-rule | Avoid creating cookie without setting httpOnly option | Definition | Missing | Added | active = true, detached = false |
1020728 | quality-rule | Avoid creating cookie without setting httpOnly option | Quality Contribution to 'Secure Coding - Encapsulation' (66066) | Missing contribution | Added | critical = true, weight = 7 |
1020730 | quality-rule | Ensure Node.js filesystem are closed | Definition | Missing | Added | active = true, detached = false |
1020730 | quality-rule | Ensure Node.js filesystem are closed | Quality Contribution to 'Secure Coding - API Abuse' (66063) | Missing contribution | Added | critical = false, weight = 7 |
1101000 | quality-rule | Never use SQL queries with a cartesian product | Definition | Missing | Added | active = true, detached = false |
1101000 | quality-rule | Never use SQL queries with a cartesian product | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = false, weight = 7 |
1101002 | quality-rule | Never use SQL queries with a cartesian product on XXL Tables | Definition | Missing | Added | active = true, detached = false |
1101002 | quality-rule | Never use SQL queries with a cartesian product on XXL Tables | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = true, weight = 9 |
1101004 | quality-rule | Avoid non-indexed SQL queries | Definition | Missing | Added | active = true, detached = false |
1101004 | quality-rule | Avoid non-indexed SQL queries | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = false, weight = 9 |
1101006 | quality-rule | Avoid non-indexed XXL SQL queries | Definition | Missing | Added | active = true, detached = false |
1101006 | quality-rule | Avoid non-indexed XXL SQL queries | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = true, weight = 9 |
1101008 | quality-rule | Avoid non-SARGable queries | Definition | Missing | Added | active = true, detached = false |
1101008 | quality-rule | Avoid non-SARGable queries | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = false, weight = 3 |
1101010 | quality-rule | Avoid NATURAL JOIN queries | Definition | Missing | Added | active = true, detached = false |
1101010 | quality-rule | Avoid NATURAL JOIN queries | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = false, weight = 5 |
1101012 | quality-rule | Specify column names instead of column numbers in ORDER BY clauses | Definition | Missing | Added | active = true, detached = false |
1101012 | quality-rule | Specify column names instead of column numbers in ORDER BY clauses | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = false, weight = 3 |
1101014 | quality-rule | Avoid queries using old style join convention instead of ANSI-Standard joins | Definition | Missing | Added | active = true, detached = false |
1101014 | quality-rule | Avoid queries using old style join convention instead of ANSI-Standard joins | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = false, weight = 4 |
1101016 | quality-rule | Avoid Artifacts with too many parameters | Definition | Missing | Added | active = true, detached = false |
1101016 | quality-rule | Avoid Artifacts with too many parameters | Quality Contribution to 'Complexity - Algorithmic and Control Structure Complexity' (61009) | Missing contribution | Added | critical = false, weight = 4 |
1101018 | quality-rule | Avoid using the GROUP BY clause | Definition | Missing | Added | active = true, detached = false |
1101018 | quality-rule | Avoid using the GROUP BY clause | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = false, weight = 5 |
1101020 | quality-rule | Avoid using quoted identifiers | Definition | Missing | Added | active = true, detached = false |
1101020 | quality-rule | Avoid using quoted identifiers | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | Missing contribution | Added | critical = false, weight = 3 |
1101022 | quality-rule | Avoid Tables without Primary Key | Definition | Missing | Added | active = true, detached = false |
1101022 | quality-rule | Avoid Tables without Primary Key | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = true, weight = 5 |
1101024 | quality-rule | Avoid using dynamic SQL in SQL Artifacts | Definition | Missing | Added | active = true, detached = false |
1101024 | quality-rule | Avoid using dynamic SQL in SQL Artifacts | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = false, weight = 5 |
1101026 | quality-rule | Always define column names when inserting values | Definition | Missing | Added | active = true, detached = false |
1101026 | quality-rule | Always define column names when inserting values | Quality Contribution to 'Programming Practices - Unexpected Behavior' (66069) | Missing contribution | Added | critical = false, weight = 5 |
1101028 | quality-rule | Use MINUS or EXCEPT operator instead of NOT EXISTS and NOT IN subqueries | Definition | Missing | Added | active = true, detached = false |
1101028 | quality-rule | Use MINUS or EXCEPT operator instead of NOT EXISTS and NOT IN subqueries | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = false, weight = 5 |
1101030 | quality-rule | Avoid Artifacts with queries on too many Tables and or Views | Definition | Missing | Added | active = true, detached = false |
1101030 | quality-rule | Avoid Artifacts with queries on too many Tables and or Views | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = false, weight = 7 |
1101032 | quality-rule | Avoid exists and not exists independent clauses | Definition | Missing | Added | active = true, detached = false |
1101032 | quality-rule | Avoid exists and not exists independent clauses | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = true, weight = 6 |
1101034 | quality-rule | DISTINCT should not be used in SQL SELECT statements | Definition | Missing | Added | active = true, detached = false |
1101034 | quality-rule | DISTINCT should not be used in SQL SELECT statements | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = false, weight = 5 |
1101036 | quality-rule | Use ANSI standard operators in SQL WHERE clauses | Definition | Missing | Added | active = true, detached = false |
1101036 | quality-rule | Use ANSI standard operators in SQL WHERE clauses | Quality Contribution to 'Architecture - OS and Platform Independence' (61004) | Missing contribution | Added | critical = false, weight = 3 |
1101038 | quality-rule | Replace OR conditions testing equality on the same identifier in SQL WHERE clauses by an IN test condition | Definition | Missing | Added | active = true, detached = false |
1101038 | quality-rule | Replace OR conditions testing equality on the same identifier in SQL WHERE clauses by an IN test condition | Quality Contribution to 'Efficiency - SQL and Data Handling Performance' (61019) | Missing contribution | Added | critical = false, weight = 5 |
1101040 | quality-rule | Avoid empty catch blocks | Definition | Missing | Added | active = true, detached = false |
1101040 | quality-rule | Avoid empty catch blocks | Quality Contribution to 'Programming Practices - Error and Exception Handling' (61014) | Missing contribution | Added | critical = true, weight = 7 |
Note that the large number of differences between 8.2.6 and 8.3.0 is mainly due to the removal of all "non-unified" Quality Rules from the standard Assessment Model delivered in 8.3.x. These Quality Rules were not triggered by default, had to be manually enabled and all had "unified" (i.e. multi technology) equivalent Quality Rules.