Security |
Checks for ascertaining security level of the solution
Index
| Rule | Description | Type | Severity |
|---|---|---|---|
| SPF020701: Don't load Web Parts from unapproved locations | Web Part is loaded from a location that hasn't been approved | Web Part Manifest | CriticalError |
| SPF020702: Don't reference scripts from unapproved locations | Web Part references script from a location that hasn't been approved | Web Part Manifest | CriticalError |
| SPF020703: Don't reference JavaScript libraries with known vulnerabilities in client-side web part manifest | JavaScript libraries with known vulnerabilities expose your solution to exploits and you shouldn't use them until the vulnerability has been fixed. | Web Part Manifest | CriticalError |
| SPF020801: Don't load scripts from unapproved locations | Web Part loads script from a location that hasn't been approved | JavaScriptFile | CriticalError |
| SPF020802: Don't use component properties without escaping | Component properties values should be escaped before using them | JavaScriptFile | CriticalError |
| SPF020803: Don't load JavaScript libraries with known vulnerabilities in JavaScript file | JavaScript libraries with known vulnerabilities expose your solution to exploits and you shouldn't use them until the vulnerability has been fixed. | SharePoint Framework JavaScript file | CriticalError |
| SPF021301: Don't reference scripts from unapproved locations | Web Part references script from a location that hasn't been approved | ProjectConfig | CriticalError |
| SPF021302: Don't reference JavaScript libraries with known vulnerabilities in project | JavaScript libraries with known vulnerabilities expose your solution to exploits and you shouldn't use them until the vulnerability has been fixed. | ProjectConfig | CriticalError |
| SPF021401: Don't reference JavaScript libraries with known vulnerabilities in client-side extension manifest | JavaScript libraries with known vulnerabilities expose your solution to exploits and you shouldn't use them until the vulnerability has been fixed. | Extension Manifest | CriticalError |
Disclaimer: The views and opinions expressed in this documentation and in SPCAF do not necessarily reflect the opinions and recommendations of Microsoft or any member of Microsoft. SPCAF and RENCORE are registered trademarks of Rencore. All other trademarks, service marks, collective marks, copyrights, registered names, and marks used or cited by this documentation are the property of their respective owners.