Skip to content

Commit fedeff0

Browse files
committed
Skeleton for use-secure-protocols codemod
1 parent ee4950e commit fedeff0

File tree

2 files changed

+7
-0
lines changed

2 files changed

+7
-0
lines changed

src/codemodder/scripts/generate_docs.py

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -334,6 +334,11 @@ class DocMetadata:
334334
guidance_explained="Our change provides the most secure way to create cookies in Flask. However, it's possible you have configured your Flask application configurations to use secure cookies. In these cases, using the default parameters for `set_cookie` is safe.",
335335
need_sarif="Yes (Sonar)",
336336
),
337+
"use-secure-protocols": DocMetadata(
338+
importance="High",
339+
guidance_explained="While secure protocols are widely supported by a variety of application and server software, it may require explicit configuration to support those protocols.",
340+
need_sarif="Yes (Sonar)",
341+
),
337342
}
338343

339344
SEMGREP_CODEMOD_NAMES = [

src/core_codemods/__init__.py

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -95,6 +95,7 @@
9595
from .sonar.sonar_tempfile_mktemp import SonarTempfileMktemp
9696
from .sonar.sonar_timezone_aware_datetime import SonarTimezoneAwareDatetime
9797
from .sonar.sonar_url_sandbox import SonarUrlSandbox
98+
from .sonar.sonar_use_secure_protocols import SonarUseSecureProtocols
9899
from .sql_parameterization import SQLQueryParameterization
99100
from .str_concat_in_seq_literal import StrConcatInSeqLiteral
100101
from .subprocess_shell_false import SubprocessShellFalse
@@ -206,6 +207,7 @@
206207
SonarTimezoneAwareDatetime,
207208
SonarSandboxProcessCreation,
208209
SonarSecureCookie,
210+
SonarUseSecureProtocols,
209211
],
210212
)
211213

0 commit comments

Comments
 (0)