ApexDangerousMethods - lpohl-Reply/pmd-github-action GitHub Wiki

Rule: ApexDangerousMethods

Message

Calling potentially dangerous method

Description

Checks against calling dangerous methods.

For the time being, it reports:

  • Against FinancialForce's Configuration.disableTriggerCRUDSecurity(). Disabling CRUD security opens the door to several attacks and requires manual validation, which is unreliable.
  • Calling System.debug passing sensitive data as parameter, which could lead to exposure of private data.

Priority

2 (was 3)

Example

public class Foo {
    public Foo() {
        Configuration.disableTriggerCRUDSecurity();
    }
}