Remove javascript rules (!198) · Merge requests · GitLab.org / security-products / sast-rules

Isaac Dawson requested to merge remove_javascript_rules into main Aug 28, 2023

Remove poor JavaScript rules (!198 (merged))
- javascript/csrf/rule-no_csrf_before_method_override.yml - Deprecated and no way of testing, see http://blog.nibblesec.org/2014/05/nodejs-connect-csrf-bypass-abusing.html
- javascript/react/rule-missing_noopener.yml - Browsers no longer allow this by default, see gitlab-org/gitlab#233079 (comment 513860690)

Edited Aug 28, 2023 by Isaac Dawson

Remove javascript rules