swift

Semgrep

Author

unknown

Download Count*

LGPL Commons Clause

License

Default ruleset for Swift, curated by Semgrep.

Run Locally

Rules (64)

swift.biometrics-and-auth.acl-changes.keychain-acl-allows-biometry-changes

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.biometrics-and-auth.keychain-always-accessible.keychain-accessible-always

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.biometrics-and-auth.keychain-sync.keychain-device-sync

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.biometrics-and-auth.local-biometrics.insecure-biometrics

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.biometrics-and-auth.missing-user-auth.keychain-without-user-auth

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.biometrics-and-auth.no-verify.verify-biometric-changes

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.biometrics-and-auth.pass-fallback.keychain-passcode-fallback

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.commoncrypto.hardcoded-iv.hardcoded-iv

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.commoncrypto.hardcoded-pbkdf2-passphrase.hardcoded-pbkdf2-passphrase

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.commoncrypto.hardcoded-realm.swift-hardcoded-realm-key

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.commoncrypto.hardcoded-salt.hardcoded-salt

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.commoncrypto.hardcoded-symmetric-key.hardcoded-symmetric-key

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.commoncrypto.insecure-crypto-aes-keysize.insecure-crypto-aes-keysize

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.commoncrypto.insecure-crypto-algorithm-blowfish.insecure-crypto-algorithm-blowfish

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.commoncrypto.insecure-crypto-algorithm-des.insecure-crypto-algorithm-des

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.commoncrypto.insecure-crypto-algorithm-rc4.insecure-crypto-algorithm-rc4

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.commoncrypto.insecure-crypto-cbc-mode.insecure-crypto-cbc-mode

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.commoncrypto.insecure-crypto-ecb-mode.insecure-crypto-ecb-mode

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.commoncrypto.insecure-crypto-keystorage.insecure-crypto-keystorage

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.commoncrypto.insecure-crypto-rsa-keysize.insecure-crypto-rsa-keysize

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.commoncrypto.insecure-hashing-algorithm-md2.insecure-hashing-algorithm-md2

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.commoncrypto.insecure-hashing-algorithm-md4.insecure-hashing-algorithm-md4

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.commoncrypto.insecure-hashing-algorithm-md5.insecure-hashing-algorithm-md5

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.commoncrypto.insecure-hashing-algorithm-sha1.insecure-hashing-algorithm-sha1

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.commoncrypto.insufficient-pbkdf2-work-factor-sha1.insufficient-pbkdf2-work-factor-sha1

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.commoncrypto.insufficient-pbkdf2-work-factor-sha256.insufficient-pbkdf2-work-factor-sha256

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.commoncrypto.insufficient-pbkdf2-work-factor-sha512.insufficient-pbkdf2-work-factor-sha512

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.commoncrypto.realmstate-encryption-missing.swift-hardcoded-realm-without-encryption

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.cryptoswift.aes-hardcoded-secret.aes-hardcoded-secret

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.cryptoswift.blowfish-hardcoded-secret.blowfish-hardcoded-secret

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.cryptoswift.chacha20-hardcoded-secret.chacha20-hardcoded-secret

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.cryptoswift.hkdf-hardcoded-secret.hkdf-hardcoded-secret

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.cryptoswift.pkcs5-hardcoded-secret.pkcs5-hardcoded-secret

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.cryptoswift.rabbit-hardcoded-secret.rabbit-hardcoded-secret

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.cryptoswift.scrypt-hardcoded-secret.scrypt-hardcoded-secret

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.insecure-communication.ats.ats-ct.ATS-consider-ct

semgrep

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.insecure-communication.ats.ats-insecure-website-load.ATS-insecure-webview-loads

semgrep

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.insecure-communication.ats.ats-load.ATS-arbitrary-loads

semgrep

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.insecure-communication.ats.ats-local.ATS-local-networking

semgrep

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.insecure-communication.ats.ats-media-load.ATS-insecure-media-loads

semgrep

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.insecure-communication.ats.ats-pfs.ATS-disables-PFS

semgrep

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.insecure-communication.ats.ats-pinning.ATS-consider-pinning

semgrep

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.insecure-communication.ats.ats-pins.ATS-CA-pins

semgrep

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.insecure-communication.ats.ats-tls.ATS-minimum-tls-version

semgrep

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.insecure-communication.sect.sect-misuse.sectrustevaluate-misuse

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.lang.clipboard.named-pasteboard.swift-named-persistent-pasteboards

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.lang.forbidden.forbidden-ios-api.swift-forbidden-ios-apis

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.lang.ns.keyedarchiver.swift-keyedarchiver

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.lang.ns.nscoding.swift-nscoding

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.lang.storage.sensitive-storage-userdefaults.swift-user-defaults

semgrep

swift

Potentially sensitive data was observed to be stored in UserDefaults, which is not adequate protection of sensitive information. For data of a sensitive nature, applications should leverage the Keychain.

swift.lang.storage.storage-protections.swift-data-protection

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.lang.string.format-string.swift-format-string

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.lang.xml.should-resolve-xxe.swift-xxe-prevention

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.pathtraversal.filemanager-pathtraversal.swift-path-traversal

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.sql.sqlilite-injection.swift-sqlite-injection

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.webview.webview-allow-js.swift-webview-config-allows-js

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.webview.webview-baseurl.swift-webview-config-base-url

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.webview.webview-evaluatejavascript-xss.swift-evaluate-js

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.webview.webview-fileaccess.swift-webview-config-allows-file-access

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.webview.webview-fraudulent.swift-webview-config-fraudulent-site-warning

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.webview.webview-https.swift-webview-config-https-upgrade

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.webview.webview-js-window.swift-webview-config-allows-js-open-windows

semgrep

swift

Webviews were observed that explictly allow JavaScript in an WKWebview to open windows automatically. Consider disabling this functionality if not required, following the principle of least privelege.

swift.webview.webview-loadhtmlstring-xss.swift-webview-xss

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.

swift.webview.webview-universal-fileaccess.swift-webview-config-allows-universal-file-access

semgrep

swift

Insufficient permissions to view rule definition. This rule is only visible to logged in users. Log in to see this rule.