# This file was generated from template 'codesonar\presets\owasp2021.conf.in' # # Configuration settings required by one or more OWASP Top 10, 2021 checks. # # This part of this file was generated from 'cso_wcmanifest.py' # # At least one of the classes enabled by this preset requires unnormalized C ASTs RETAIN_UNNORMALIZED_C_AST = Yes # OWASP-2021:A8: Software and data integrity failures WARNING_FILTER += allow class="Addition Overflow of Allocation Size" # OWASP-2021:A8: Software and data integrity failures WARNING_FILTER += allow class="Addition Overflow of Size" # OWASP-2021:A2: Cryptographic failures WARNING_FILTER += allow class="Android Message Injection (Java)" # OWASP-2021:A2: Cryptographic failures WARNING_FILTER += allow class="Android URL Injection (Java)" # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Anonymous LDAP Authentication (C#)" # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Anonymous LDAP Authentication (Java)" # OWASP-2021:A8: Software and data integrity failures # This check is enabled by default for the language(s) C, C++, x86, x86_64 # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Buffer Overrun" # OWASP-2021:A8: Software and data integrity failures # This check is enabled by default for the language(s) C, C++, x86, x86_64 # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Buffer Underrun" # OWASP-2021:A7: Identification and authorization failures WARNING_FILTER += allow class="Certificate Added to Root Store (C#)" # OWASP-2021:A7: Identification and authorization failures WARNING_FILTER += allow class="Certificate Added to Root Store (Java)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Code Injection (C#)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Code Injection (Java)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) C, C++, x86, x86_64 # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Command Injection" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Command Injection (C#)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Command Injection (Java)" # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Cryptographic Algorithm with Risky Default Cipher (C#)" # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Cryptographic Algorithm with Risky Default Cipher (Java)" # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Cryptographic Algorithm with Weak Cipher (C#)" # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Cryptographic Algorithm with Weak Cipher (Java)" # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Cryptographic Algorithm with Weak Hash (C#)" # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Cryptographic Algorithm with Weak Hash (Java)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="DLL Injection (C#)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="DLL Injection (Java)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="DOS Injection (C#)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="DOS Injection (Java)" # OWASP-2021:A6: Vulnerable and outdated components # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Deprecated Cryptography Provider (C#)" # OWASP-2021:A6: Vulnerable and outdated components # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Deprecated Cryptography Provider (Java)" # OWASP-2021:A6: Vulnerable and outdated components WARNING_FILTER += allow class="Deprecated Transfer Protocol (C#)" # OWASP-2021:A6: Vulnerable and outdated components WARNING_FILTER += allow class="Deprecated Transfer Protocol (Java)" # OWASP-2021:A8: Software and data integrity failures WARNING_FILTER += allow class="Deserializable Class (C#)" # OWASP-2021:A8: Software and data integrity failures WARNING_FILTER += allow class="Deserializable Class (Java)" # OWASP-2021:A8: Software and data integrity failures WARNING_FILTER += allow class="Deserializing Non-Serializable Class (Java)" # OWASP-2021:A1: Broken access control WARNING_FILTER += allow class="Disabled Input Validation (C#)" # OWASP-2021:A2: Cryptographic failures # OWASP-2021:A5: Security misconfiguration # This check is enabled by default for the language(s) C, C++, x86, x86_64 # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Encryption without Padding" # OWASP-2021:A1: Broken access control # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Fragment Injection (Java)" # OWASP-2021:A1: Broken access control # OWASP-2021:A5: Security misconfiguration # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) C, C++, x86, x86_64 # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Hardcoded Authentication" # OWASP-2021:A1: Broken access control # OWASP-2021:A5: Security misconfiguration # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) C, C++, x86, x86_64 # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Hardcoded Crypto Key" # OWASP-2021:A1: Broken access control # OWASP-2021:A5: Security misconfiguration # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) C, C++, x86, x86_64 # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Hardcoded Crypto Salt" # OWASP-2021:A5: Security misconfiguration WARNING_FILTER += allow class="Hardcoded DNS Name" # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Hardcoded Password (C#)" # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Hardcoded Password (Java)" # OWASP-2021:A5: Security misconfiguration # This check is enabled by default for the language(s) C, C++ # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Hardcoded Seed in PRNG" # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Hostname in Condition (C#)" # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Hostname in Condition (Java)" # OWASP-2021:A7: Identification and authorization failures WARNING_FILTER += allow class="Inadequate Salt (C#)" # OWASP-2021:A7: Identification and authorization failures WARNING_FILTER += allow class="Inadequate Salt (Java)" # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Insecure Key Derivation (C#)" # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Insecure Key Derivation (Java)" # OWASP-2021:A8: Software and data integrity failures # This check is enabled by default for the language(s) C, C++, x86, x86_64 # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Integer Overflow of Allocation Size" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) C, C++, x86, x86_64 # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="LDAP Injection" # OWASP-2021:A5: Security misconfiguration WARNING_FILTER += allow class="Memory Protection Removal" # OWASP-2021:A1: Broken access control WARNING_FILTER += allow class="Method Disables Security Setting (C#)" # OWASP-2021:A1: Broken access control WARNING_FILTER += allow class="Method Disables Security Setting (Java)" # OWASP-2021:A1: Broken access control # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Missing Authentication Annotation (C#)" # OWASP-2021:A1: Broken access control # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Missing Authentication Annotation (Java)" # OWASP-2021:A1: Broken access control # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Missing isValidFragment Override (Java)" # OWASP-2021:A8: Software and data integrity failures WARNING_FILTER += allow class="Multiplication Overflow of Allocation Size" # OWASP-2021:A8: Software and data integrity failures WARNING_FILTER += allow class="Multiplication Overflow of Size" # OWASP-2021:A9: Security logging and monitoring failures WARNING_FILTER += allow class="Not Enough Assertions" # OWASP-2021:A1: Broken access control # This check is enabled by default for the language(s) C, C++, x86, x86_64 # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Null Security Descriptor" # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Password in Property File (C#)" # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Password in Property File (Java)" # OWASP-2021:A1: Broken access control # OWASP-2021:A2: Cryptographic failures # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) C, C++, x86, x86_64 # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Plaintext Storage of Password" # OWASP-2021:A8: Software and data integrity failures WARNING_FILTER += allow class="Pointer Arithmetic" # OWASP-2021:A8: Software and data integrity failures WARNING_FILTER += allow class="Pointer Before Beginning of Object" # OWASP-2021:A8: Software and data integrity failures WARNING_FILTER += allow class="Pointer Past End of Object" # OWASP-2021:A5: Security misconfiguration # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Possible XML External Entity Reference (C#)" # OWASP-2021:A5: Security misconfiguration # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Possible XML External Entity Reference (Java)" # OWASP-2021:A2: Cryptographic failures # This check is enabled by default for the language(s) C, C++ # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Redundant Condition" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Reflection Injection (C#)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Reflection Injection (Java)" # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Risky Cipher Algorithm (C#)" # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Risky Cipher Algorithm (Java)" # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Risky Cipher Field (C#)" # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Risky Cipher Field (Java)" # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Risky Cryptographic Algorithm (C#)" # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Risky Cryptographic Algorithm (Java)" # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Risky Cryptographic Field (C#)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) C, C++, x86, x86_64 # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="SQL Injection" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="SQL Injection (C#)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="SQL Injection (Java)" # OWASP-2021:A1: Broken access control # OWASP-2021:A7: Identification and authorization failures WARNING_FILTER += allow class="Security Annotation Conflict (C#)" # OWASP-2021:A1: Broken access control # OWASP-2021:A7: Identification and authorization failures WARNING_FILTER += allow class="Security Annotation Conflict (Java)" # OWASP-2021:A2: Cryptographic failures WARNING_FILTER += allow class="Sensitive Data Cached (Java)" # OWASP-2021:A2: Cryptographic failures WARNING_FILTER += allow class="Sensitive Data Written to External Storage (Java)" # OWASP-2021:A2: Cryptographic failures WARNING_FILTER += allow class="Sensitive Data Written to Local File (Java)" # OWASP-2021:A8: Software and data integrity failures WARNING_FILTER += allow class="Subtraction Underflow of Allocation Size" # OWASP-2021:A8: Software and data integrity failures WARNING_FILTER += allow class="Subtraction Underflow of Size" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted @Trusted Value (C#)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted @Trusted Value (Java)" # OWASP-2021:A8: Software and data integrity failures # This check is enabled by default for the language(s) C, C++ # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted Buffer Access" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted Bundle (C#)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted Bundle (Java)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted Control (C#)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted Control (Java)" # OWASP-2021:A1: Broken access control # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted Data in Vulnerable Method (Java)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted Expression Evaluation (C#)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted Expression Evaluation (Java)" # OWASP-2021:A1: Broken access control WARNING_FILTER += allow class="Tainted Filename" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted HTTP Response (C#)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted HTTP Response (Java)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted Hardware Device Property (C#)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted Hardware Device Property (Java)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted LDAP Attribute (C#)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted LDAP Attribute (Java)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted Log (C#)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted Log (Java)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted Message (C#)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted Message (Java)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted Network Address (C#)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted Network Address (Java)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted Path (C#)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted Path (Java)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted Regular Expression (C#)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted Regular Expression (Java)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted Resource (C#)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted Resource (Java)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted Session (C#)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted Session (Java)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted URL (C#)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted URL (Java)" # OWASP-2021:A1: Broken access control # OWASP-2021:A2: Cryptographic failures WARNING_FILTER += allow class="Tainted Write" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted XAML (C#)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted XAML (Java)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted XML (C#)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted XML (Java)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted Xpath (C#)" # OWASP-2021:A3: Injection # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Tainted Xpath (Java)" # OWASP-2021:A8: Software and data integrity failures # This check is enabled by default for the language(s) C, C++ # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Type Overrun" # OWASP-2021:A8: Software and data integrity failures # This check is enabled by default for the language(s) C, C++ # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Type Underrun" # OWASP-2021:A7: Identification and authorization failures WARNING_FILTER += allow class="Unsafe Base64 Encoding (C#)" # OWASP-2021:A7: Identification and authorization failures WARNING_FILTER += allow class="Unsafe Base64 Encoding (Java)" # OWASP-2021:A3: Injection WARNING_FILTER += allow class="Untrusted Process Creation" # OWASP-2021:A1: Broken access control # OWASP-2021:A6: Vulnerable and outdated components WARNING_FILTER += allow class="Use of AddAccessAllowedAce" # OWASP-2021:A1: Broken access control # OWASP-2021:A6: Vulnerable and outdated components WARNING_FILTER += allow class="Use of AddAccessDeniedAce" # OWASP-2021:A6: Vulnerable and outdated components WARNING_FILTER += allow class="Use of AfxLoadLibrary" # OWASP-2021:A6: Vulnerable and outdated components WARNING_FILTER += allow class="Use of CoLoadLibrary" # OWASP-2021:A6: Vulnerable and outdated components WARNING_FILTER += allow class="Use of CreateFile" # OWASP-2021:A6: Vulnerable and outdated components WARNING_FILTER += allow class="Use of CreateProcess" # OWASP-2021:A6: Vulnerable and outdated components WARNING_FILTER += allow class="Use of CreateThread" # OWASP-2021:A6: Vulnerable and outdated components WARNING_FILTER += allow class="Use of FormatMessage" # OWASP-2021:A6: Vulnerable and outdated components # This check is enabled by default for the language(s) C, C++, x86, x86_64 # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Use of GetTempFileName" # OWASP-2021:A6: Vulnerable and outdated components WARNING_FILTER += allow class="Use of LoadLibrary" # OWASP-2021:A6: Vulnerable and outdated components WARNING_FILTER += allow class="Use of LoadModule" # OWASP-2021:A6: Vulnerable and outdated components WARNING_FILTER += allow class="Use of MoveFile" # OWASP-2021:A6: Vulnerable and outdated components WARNING_FILTER += allow class="Use of OemToAnsi" # OWASP-2021:A6: Vulnerable and outdated components WARNING_FILTER += allow class="Use of OemToChar" # OWASP-2021:A5: Security misconfiguration WARNING_FILTER += allow class="Use of XML_ExternalEntityParserCreate" # OWASP-2021:A1: Broken access control # OWASP-2021:A2: Cryptographic failures # OWASP-2021:A6: Vulnerable and outdated components # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) C, C++, x86, x86_64 # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Use of crypt" # OWASP-2021:A1: Broken access control WARNING_FILTER += allow class="Use of cuserid" # OWASP-2021:A1: Broken access control WARNING_FILTER += allow class="Use of getlogin" # OWASP-2021:A6: Vulnerable and outdated components # This check is enabled by default for the language(s) C, C++, x86, x86_64 # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Use of gets" # OWASP-2021:A6: Vulnerable and outdated components WARNING_FILTER += allow class="Use of mkstemp" # OWASP-2021:A6: Vulnerable and outdated components # This check is enabled by default for the language(s) C, C++, x86, x86_64 # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Use of mktemp" # OWASP-2021:A6: Vulnerable and outdated components WARNING_FILTER += allow class="Use of rand" # OWASP-2021:A6: Vulnerable and outdated components WARNING_FILTER += allow class="Use of rand48 Function" # OWASP-2021:A6: Vulnerable and outdated components WARNING_FILTER += allow class="Use of random" # OWASP-2021:A3: Injection WARNING_FILTER += allow class="Use of system" # OWASP-2021:A6: Vulnerable and outdated components # This check is enabled by default for the language(s) C, C++, x86, x86_64 # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Use of tmpfile" # OWASP-2021:A6: Vulnerable and outdated components WARNING_FILTER += allow class="Use of tmpfile_s" # OWASP-2021:A6: Vulnerable and outdated components # This check is enabled by default for the language(s) C, C++, x86, x86_64 # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Use of tmpnam" # OWASP-2021:A6: Vulnerable and outdated components WARNING_FILTER += allow class="Use of tmpnam_s" # OWASP-2021:A2: Cryptographic failures # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Weak Cryptographic Value (C#)" # OWASP-2021:A2: Cryptographic failures # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Weak Cryptographic Value (Java)" # OWASP-2021:A1: Broken access control # OWASP-2021:A2: Cryptographic failures # OWASP-2021:A6: Vulnerable and outdated components # OWASP-2021:A7: Identification and authorization failures WARNING_FILTER += allow class="Weak Cryptography" # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Weak Hash Algorithm (C#)" # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Weak Hash Algorithm (Java)" # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Weak Hash Algorithm Field (C#)" # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Weak Hash Algorithm Field (Java)" # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Weak Initialization Vector Field (C#)" # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Weak Initialization Vector Field (Java)" # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) C# # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Weak Initialization Vector Value (C#)" # OWASP-2021:A7: Identification and authorization failures # This check is enabled by default for the language(s) Java # It may remain in effect even if the following line is commented out. WARNING_FILTER += allow class="Weak Initialization Vector Value (Java)" # # The remainder of this file was generated from template 'codesonar\presets\owasp2021.conf.in' #