{"id":2625,"date":"2017-12-09T08:25:08","date_gmt":"2017-12-09T08:25:08","guid":{"rendered":"http:\/\/www.scmgalaxy.com\/tutorials\/?p=2625"},"modified":"2020-01-09T07:40:10","modified_gmt":"2020-01-09T07:40:10","slug":"sonar-support-with-jsp-html","status":"publish","type":"post","link":"https:\/\/www.devopsschool.com\/blog\/sonar-support-with-jsp-html\/","title":{"rendered":"Sonar Support with JSP & HTML"},"content":{"rendered":"

rajeshkumar created the topic: Sonar Support with JSP & HTML<\/strong><\/p>\n

JSP\/HTML land, usefull tests could be done via some regexp, ie
\ncheck if style\/css are used (to avoid dirty colors\/fonts hard-coded
\nfor example).<\/p>\n

If we want to build something pretty robust and extensible, I think we should integrate a java library which is able to transform a XHTML or badly formatted HTML document into a DOM :<\/p>\n

htmlparser.sourceforge.net\/ <\/a>
\njtidy.sourceforge.net\/ <\/a>
\nsourceforge.net\/projects\/nekohtml\/ <\/a><\/p>\n

a complete list of available libraries is available here : java-source.net\/open-source\/html-parsers <\/a><\/p>\n

With a DOM we could then imagine to implement a visitor pattern in order to let users create new rules.<\/p>\n

Some very simple rules in order to start.
\n[code language=”css”]
\nRule 1: disallow scriptlets
\nRule 2: disallow some taglibs (JSTL SQL comes to mind). Could be parametrized by Taglib URL to list all disallowed taglibs.
\nRule 3: enforce JSP style (XML syntax)
\nRule 4: disallow hard coded labels
\nRule 5: disallow dynamic JSP includes (<jsp:include>)
\nRule 6: disallow external file in page attribute of dynamic JSP include
\nRule 7: disallow TLD location for URI in taglib declaration
\nFor HTML
\nRule 8: enforce <script> at the end of the body
\nRule 9: disallow <style>
\nRule 10: disallow non empty <script> content
\nRule 11: enforce a limit on the number of called external files (js and css)
\n[\/code]<\/p>\n

Regards,
\nRajesh Kumar
\nTwitt me @ twitter.com\/RajeshKumarIn<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

rajeshkumar created the topic: Sonar Support with JSP & HTML JSP\/HTML land, usefull tests could be done via some regexp, ie check if style\/css are used (to avoid dirty colors\/fonts… <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_joinchat":[],"footnotes":""},"categories":[2],"tags":[520],"class_list":["post-2625","post","type-post","status-publish","format-standard","hentry","category-uncategorised","tag-support"],"_links":{"self":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts\/2625","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/comments?post=2625"}],"version-history":[{"count":4,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts\/2625\/revisions"}],"predecessor-version":[{"id":8524,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts\/2625\/revisions\/8524"}],"wp:attachment":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/media?parent=2625"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/categories?post=2625"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/tags?post=2625"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}