class

Flaw::Rule

Inherits Reference < Object

Constants

METADATA = {"FLAW001" => {cwe: "CWE-78", owasp: "A03:2021"}, "FLAW002" => {cwe: "CWE-798", owasp: "A07:2021"}, "FLAW003" => {cwe: "CWE-89", owasp: "A03:2021"}, "FLAW004" => {cwe: "CWE-338", owasp: "A02:2021"}, "FLAW005" => {cwe: "CWE-502", owasp: "A08:2021"}, "FLAW006" => {cwe: "CWE-22", owasp: "A01:2021"}, "FLAW007" => {cwe: "CWE-601", owasp: "A01:2021"}, "FLAW008" => {cwe: "CWE-502", owasp: "A08:2021"}, "FLAW009" => {cwe: "CWE-328", owasp: "A02:2021"}, "FLAW010" => {cwe: "CWE-295", owasp: "A02:2021"}, "FLAW011" => {cwe: "CWE-918", owasp: "A10:2021"}, "FLAW012" => {cwe: "CWE-208", owasp: "A02:2021"}, "FLAW013" => {cwe: "CWE-377", owasp: "A01:2021"}, "FLAW014" => {cwe: "CWE-611", owasp: "A05:2021"}, "FLAW015" => {cwe: "CWE-915", owasp: "A01:2021"}, "FLAW016" => {cwe: "CWE-326", owasp: "A02:2021"}, "FLAW017" => {cwe: "CWE-1333", owasp: "A05:2021"}, "FLAW018" => {cwe: "CWE-532", owasp: "A09:2021"}, "FLAW019" => {cwe: "CWE-1004", owasp: "A05:2021"}, "FLAW020" => {cwe: "CWE-327", owasp: "A02:2021"}, "FLAW021" => {cwe: "CWE-329", owasp: "A02:2021"}, "FLAW022" => {cwe: "CWE-22", owasp: "A01:2021"}, "FLAW023" => {cwe: "CWE-347", owasp: "A02:2021"}, "FLAW024" => {cwe: "CWE-942", owasp: "A05:2021"}, "FLAW103" => {cwe: "CWE-1163", owasp: nil}, "FLAW104" => {cwe: "CWE-390", owasp: nil}, "FLAW105" => {cwe: "CWE-862", owasp: "A01:2021"}}

CWE / OWASP metadata mirrored from each rule's rules/FLAWNNN/rule.yml. Kept centrally so SARIF output can emit taxa without every Rule class having to reopen itself.

REGISTRY = [] of Rule.class

Class methods

Instance methods

check(source : String, path : String) : Array(Finding)
Source
default_severity
Source
description
Source
owasp
Source
tag

Category for grouping in flaw rules output and the README catalog. Override in rule subclasses. Default: "security".

Source
title
Source