2.13.0.5938

Release notes - SonarXML - 2.13

---

This release brings a new rule from the M8 category of OWASP Mobile Top 10 to SonarXML: S7207.

What's Changed

• SONARXML-236 Rule S7207: Components should be explicitly exported by @antonioaversa in #337

Full Changelog: 2.12.0.5749...2.13.0.5938

2.12.1.5881

Release notes - SonarXML - 2.12.1

Task

SONARXML-219 Allow usage of Java 17 in sonar-xml source code

SONARXML-227 Prepare next development iteration 2.12.1

SONARXML-230 Restrict ITs to run only against [20]25.1 LTA

Improvement

SONARXML-226 Fix discrepancies between MQR and severity for XML rules

2.12.0.5749

Release notes - SonarXML - 2.12

Task

SONARXML-200 Add Jira integration

SONARXML-201 Add Jira integration

SONARXML-204 Add ToggleLockBranch.yml

SONARXML-205 Add ToggleLockBranch.yml

SONARXML-206 Remove subnet-related config from .cirrus.yml

SONARXML-209 Support Multi-Quality Rule (MQR) mode

SONARXML-211 Update parent pom

Improvement

SONARXML-208 Update to SONAR Source-Available License v1.0 (SSALv1)

2.11.0.5671

Release notes - SonarXML - 2.11

Documentation

SONARXML-189 Update license headers

SONARXML-194 S3422: Add Compliant code examples

False Negative

SONARXML-146 Rule S6358: {{android:fullBackupContent}} will be ignore for Android API is 22 or lower

SONARXML-195 FN S125: Rule does not raise an issue when two (or more) tags following each other are commented

False Positive

SONARXML-145 Rule S5332: clear-text traffic is disabled by default for Android API level 28 and above

Task

SONARXML-160 Move IT tests to JUnit 5

SONARXML-198 Update rule metadata

Improvement

SONARXML-185 Support on-demand plugin downloading

SONARXML-192 [S2647] Deprecate rule

2.10.0.4108

Release notes - SonarXML - 2.10

Task

SONARXML-178 Update rules metadata

SONARXML-179 Update sonar-analyzer-commons to 2.7.0.1482

2.9.0.4055

Release notes - SonarXML - 2.9

False Negative

SONARXML-169 [S2068] Add support for form based authentication in web.config

SONARXML-172 [S4507] Add support for web.config customErrors parameter

Task

SONARXML-176 Update rules metadata

2.8.1.4006

Release notes - SonarXML - 2.8.1

Documentation

SONARXML-174 Rule S140 (XPathCheck) metadata are not up to date and do not follow LayC format.

2.8.0.3982

Release notes - SonarXML - 2.8

Task

SONARXML-170 Upgrade sonar-analyzer-commons 2.5.0.1358

SONARXML-173 Update rule metadata

2.7.0.3820

Release notes - SonarXML - 2.7.0.3820

Bug

• SONARXML-163 xml:XPathCheck does not support correctly "::" syntax
• SONARXML-164 NumberFormatException for "*" in S3417, unable to build dependency from "*:.*log4j"

Documentation

• SONARXML-166 Update rules metadata

Task

• SONARXML-165 Upgrade sonar-analyzer-commons to 2.1.0.1111

2.6.1.3686

Release notes - SonarXML - Version 2.6.1.3686

Bug

SONARXML-162 XPathCheck supports schemeless namespace-uri() in xpath expressions