Update rule metadata (#321)

Co-authored-by: thomas-serre-sonarsource <118730793+thomas-serre-sonarsource@users.noreply.github.com>
GitOrigin-RevId: 09e4dfb7a6a00e0c22b5e0d05747e5f6ede4c376

Author: 2 people

python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S2876.html

@@ -11,8 +11,8 @@ <h2>Why is this an issue?</h2>
 <code>__iter__</code> methods generated automatically.</p>
 <h2>How to fix it</h2>
 <p>Make sure that the <code>__iter__</code> method returns a valid iterator.</p>
-<h2>Code examples</h2>
-<h3>Noncompliant code example</h3>
+<h3>Code examples</h3>
+<h4>Noncompliant code example</h4>
 <pre data-diff-id="1" data-diff-type="noncompliant">
 class MyIterable:
     def __init__(self, values):
@@ -21,7 +21,7 @@ <h3>Noncompliant code example</h3>
     def __iter__(self):
         return None  # Noncompliant: Not a valid iterator
 </pre>
-<h3>Compliant solution</h3>
+<h4>Compliant solution</h4>
 <pre data-diff-id="1" data-diff-type="compliant">
 class MyIterable:
     def __init__(self, values):

python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S4784.html

@@ -1,4 +1,4 @@
-<p>This rule is deprecated; use {rule:python:S5852}, {rule:pythonsecurity:S2631} instead.</p>
+<p>This rule is deprecated; use {rule:python:S5852} instead.</p>
 <p>Using regular expressions is security-sensitive. It has led in the past to the following vulnerabilities:</p>
 <ul>
   <li> <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16021">CVE-2017-16021</a> </li>

python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S4790.html

@@ -1,7 +1,9 @@
 <p>Cryptographic hash algorithms such as <code>MD2</code>, <code>MD4</code>, <code>MD5</code>, <code>MD6</code>, <code>HAVAL-128</code>,
-<code>HMAC-MD5</code>, <code>DSA</code> (which uses <code>SHA-1</code>), <code>RIPEMD</code>, <code>RIPEMD-128</code>, <code>RIPEMD-160</code>,
-<code>HMACRIPEMD160</code> and <code>SHA-1</code> are no longer considered secure, because it is possible to have <code>collisions</code> (little
-computational effort is enough to find two or more different inputs that produce the same hash).</p>
+<code>DSA</code> (which uses <code>SHA-1</code>), <code>RIPEMD</code>, <code>RIPEMD-128</code>, <code>RIPEMD-160</code>and <code>SHA-1</code> are no
+longer considered secure, because it is possible to have <code>collisions</code> (little computational effort is enough to find two or more different
+inputs that produce the same hash).</p>
+<p>Message authentication code (MAC) algorithms such as <code>HMAC-MD5</code> or <code>HMAC-SHA1</code> use weak hash functions as building blocks.
+Although they are not all proven to be weak, they are considered legacy algorithms and should be avoided.</p>
 <h2>Ask Yourself Whether</h2>
 <p>The hashed value is used in a security context like:</p>
 <ul>

python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S5445.html

@@ -70,8 +70,6 @@ <h3>Documentation</h3>
 <h3>Standards</h3>
 <ul>
   <li> OWASP - <a href="https://owasp.org/Top10/A01_2021-Broken_Access_Control/">Top 10 2021 Category A1 - Broken Access Control</a> </li>
-  <li> OWASP - <a href="https://owasp.org/www-project-top-ten/2017/A9_2017-Using_Components_with_Known_Vulnerabilities">Top 10 2017 Category A9 -
-  Using Components with Known Vulnerabilities</a> </li>
   <li> CWE - <a href="https://cwe.mitre.org/data/definitions/377">CWE-377 - Insecure Temporary File</a> </li>
   <li> CWE - <a href="https://cwe.mitre.org/data/definitions/379">CWE-379 - Creation of Temporary File in Directory with Incorrect Permissions</a>
   </li>

python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S5445.json

@@ -24,9 +24,6 @@
       377,
       379
     ],
-    "OWASP": [
-      "A9"
-    ],
     "OWASP Top 10 2021": [
       "A1"
     ],

python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S5642.html

@@ -8,8 +8,8 @@ <h2>Why is this an issue?</h2>
 <code>__contains__</code>, <code>__iter__</code>, <code>__getitem__</code>.</p>
 <p>If none of these methods is implemented, a <code>TypeError</code> will be raised when performing a membership test.</p>
 <h2>How to fix it</h2>
-<h2>Code examples</h2>
-<h3>Noncompliant code example</h3>
+<h3>Code examples</h3>
+<h4>Noncompliant code example</h4>
 <pre>
 myint = 42
 
@@ -23,7 +23,7 @@ <h3>Noncompliant code example</h3>
 if "mystring" in A(["mystring"]):  # Noncompliant: class A doesn't support membership protocol
     ...
 </pre>
-<h3>Compliant solution</h3>
+<h4>Compliant solution</h4>
 <pre>
 mylist = [42]
 

python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6554.html

@@ -26,7 +26,5 @@ <h4>Compliant solution</h4>
 </pre>
 <h2>Resources</h2>
 <h3>Documentation</h3>
-<p><a
-href="https://docs.djangoproject.com/en/4.1/ref/models/instances/#django.db.models.Model">https://docs.djangoproject.com/en/4.1/ref/models/instances/#django.db.models.Model</a>.<em>str</em>[Django
-Model.<em>str</em>()]</p>
+<p><a href="https://docs.djangoproject.com/en/4.1/ref/models/instances/#django.db.models.Model.<em>str</em>">Django Model.<em>str</em>()</a></p>
 

python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6662.html

@@ -31,8 +31,7 @@ <h4>Compliant solution</h4>
 <h2>Resources</h2>
 <h3>Documentation</h3>
 <ul>
-  <li> Python Documentation - <a
-  href="https://docs.python.org/3/reference/datamodel.html#object">https://docs.python.org/3/reference/datamodel.html#object</a>.<em>hash</em>[object.<em>hash</em>] </li>
+  <li> Python Documentation - <a href="https://docs.python.org/3/reference/datamodel.html#object.<em>hash</em>">object.<em>hash</em></a> </li>
   <li> Python Documentation - <a href="https://docs.python.org/3/library/functions.html#hash">the hash built-in function</a> </li>
 </ul>
 

python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6663.html

@@ -34,7 +34,5 @@ <h4>Compliant solution</h4>
 </pre>
 <h2>Resources</h2>
 <h3>Documentation</h3>
-<p>Python Documentation - <a
-href="https://docs.python.org/3/library/operator.html#operator">https://docs.python.org/3/library/operator.html#operator</a>.<em>index</em>[<em>index</em>
-method]</p>
+<p>Python Documentation - <a href="https://docs.python.org/3/library/operator.html#operator.<em>index</em>"><em>index</em> method</a></p>
 

python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6969.json

@@ -17,7 +17,7 @@
   "quickfix": "targeted",
   "code": {
     "impacts": {
-      "RELIABILITY": "LOW"
+      "MAINTAINABILITY": "LOW"
     },
     "attribute": "EFFICIENT"
   }