55 Rules
| ID | Name | Severity |
|---|---|---|
| 1020000 | Avoid Artifacts with High Cyclomatic Complexity (HTML5/Javascript) |
medium
|
| 1020002 | Avoid programs with low comment / code ratio (HTML5/Javascript) |
medium
|
| 1020004 | Avoid using querySelectorAll |
critical
|
| 1020006 | Avoid calling a function in a termination loop (Javascript) |
critical
|
| 1020008 | Avoid using for-in loop |
medium
|
| 1020010 | Avoid using forEach() |
medium
|
| 1020012 | Avoid using a web service with WebSocket inside a loop |
critical
|
| 1020014 | Avoid using a web service with XMLHttpRequest inside a loop |
critical
|
| 1020016 | Avoid using too much dot notation in loop |
medium
|
| 1020018 | Avoid using Web SQL databases |
critical
|
| 1020020 | Avoid blocking page loading with synchronous Javascript import |
medium
|
| 1020022 | Avoid using submitted markup containing "form" and "formaction" attributes |
high
|
| 1020024 | Avoid using submit markup related to "form" with id attribute |
high
|
| 1020026 | Avoid using autofocus and onfocus in submitted markup |
high
|
| 1020028 | Avoid using autofocus and onblur in submitted markup |
high
|
| 1020030 | Avoid using javascript or expression in the CSS file |
high
|
| 1020032 | Avoid using video poster attributes in combination with javascript |
high
|
| 1020034 | Avoid hosting HTML code in iframe srcdoc |
high
|
| 1020036 | Avoid using onscroll event with autofocus input |
high
|
| 1020038 | Avoid defining and calling functions inside loops |
medium
|
| 1020040 | Avoid using delete with no object properties |
medium
|
| 1020042 | Avoid having iframe inside a tag |
high
|
| 1020044 | Avoid using setData in ondragstart with attribute draggable set to true |
high
|
| 1020046 | Avoid using oninput in body containing input autofocus |
high
|
| 1020048 | Avoid using source tag in video/audio with event handler |
high
|
| 1020050 | Avoid white-listing the "dirname" attribute in user generated content |
high
|
| 1020052 | Avoid using import with external URI |
high
|
| 1020054 | Avoid using delete on arrays |
medium
|
| 1020056 | Avoid using Javascript Document.all collection |
medium
|
| 1020058 | Avoid using eval() (Javascript) |
critical
|
| 1020060 | Avoid using console.log() (Javascript) |
medium
|
| 1020062 | Avoid using non thread-safe Javascript singleton pattern |
medium
|
| 1020064 | Avoid Superclass knowing Subclass (Javascript) |
medium
|
| 1020066 | Avoid using Javascript Function constructor |
medium
|
| 1020068 | Avoid return statement in finally block (Javascript) |
high
|
| 1020070 | Avoid hard-coded network resource names (Javascript) |
medium
|
| 1020072 | Avoid direct access to Database Tables in Javascript |
medium
|
| 1020074 | Avoid enabling autocomplete "on" for inputs/forms |
medium
|
| 1020076 | Avoid Artifacts with too many parameters (Javascript) |
medium
|
| 1020078 | Avoid using setTimeout() (Javascript) |
high
|
| 1020080 | Avoid using setInterval() (Javascript) |
high
|
| 1020082 | Avoid undocumented Functions (Javascript) |
medium
|
| 1020084 | Avoid unreferenced Functions (Javascript/HTML5) |
medium
|
| 1020086 | Avoid Functions having a very low Comment/Code ratio (Javascript) |
medium
|
| 1020088 | Avoid Artifacts with lines longer than X characters (Javascript/HTML5) |
medium
|
| 1020090 | Avoid Artifacts with High Depth of Code (Javascript) |
medium
|
| 1020092 | Avoid direct definition of JavaScript Functions in a Web page (Javascript/HTML5) |
medium
|
| 1020094 | Avoid creating cookie without setting httpOnly option (Javascript) |
high
|
| 1020096 | Avoid using unsecured cookie (Javascript) |
high
|
| 1020098 | Avoid creating cookie with overly broad path (Javascript) |
high
|
| 1020100 | Avoid having cookie with an overly broad domain (Javascript) |
high
|
| 1020102 | Always use JSON.parse & JSON.stringify with try/catch block (Javascript) |
medium
|
| 1020104 | Avoid hard-coded passwords (Javascript) |
critical
|
| 1020106 | Avoid hidden form fields to prevent parameter tampering (Javascript/HTML5) |
medium
|
| 1020108 | Avoid dangerous file inclusion (JSTL) (Javascript/HTML5) |
high
|
