security.xml

<?xml version="1.0"?>

<ruleset name="Security" xmlns="http://pmd.sourceforge.net/ruleset/2.0.0"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://pmd.sourceforge.net/ruleset/2.0.0 http://pmd.sourceforge.net/ruleset_2_0_0.xsd">

  <description>
These rules deal with different security problems that can occur within Apex.
  </description>

    <rule ref="category/apex/security.xml/ApexBadCrypto" deprecated="true" />
    <rule ref="category/apex/security.xml/ApexCRUDViolation" deprecated="true" />
    <rule ref="category/apex/security.xml/ApexCSRF" deprecated="true" />
    <rule ref="category/apex/security.xml/ApexDangerousMethods" deprecated="true" />
    <rule ref="category/apex/security.xml/ApexInsecureEndpoint" deprecated="true" />
    <rule ref="category/apex/security.xml/ApexOpenRedirect" deprecated="true" />
    <rule ref="category/apex/security.xml/ApexSharingViolations" deprecated="true" />
    <rule ref="category/apex/security.xml/ApexSOQLInjection" deprecated="true" />
    <rule ref="category/apex/security.xml/ApexSuggestUsingNamedCred" deprecated="true" />
    <rule ref="category/apex/security.xml/ApexXSSFromEscapeFalse" deprecated="true" />
    <rule ref="category/apex/security.xml/ApexXSSFromURLParam" deprecated="true" />

</ruleset>