Skip to content

Java: Promote Spring Boot Actuators query from experimental #18793

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jcogs33 merged 17 commits into from
Mar 11, 2025
Merged

Java: Promote Spring Boot Actuators query from experimental #18793

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
17 commits
Select commit Hold shift + click to select a range
2ce5920
Java: copy out of experimental
Feb 16, 2025
978834b
Java: remove deprecations
Feb 16, 2025
089a491
Java: fix tests; update for non-experimental directory
Feb 16, 2025
5e5bc2a
Java: remove experimental files
Feb 16, 2025
8064e8f
Java: convert tests to inline expectations
Feb 20, 2025
8dfb920
Java: refactor QL, move code to libraries
Feb 20, 2025
b2469ff
Java: add APIs and tests for more recent Spring versions: authorizeHt…
Feb 20, 2025
9e51b01
Java: handle example in Spring docs
Feb 24, 2025
f65a5b9
Java: add test for qhelp good example
Feb 24, 2025
6fe7c7a
Java: some refactoring
Feb 24, 2025
53cb30d
Java: update metadata, move from CWE-016 to CWE-200
Feb 24, 2025
26e3967
Java: edit qhelp
Feb 24, 2025
c2e859c
Java: add change note
Feb 24, 2025
746f022
Java: add 'Spring' prefix to public class names
Mar 4, 2025
82062e2
Java: update test
Mar 4, 2025
0eec951
Java: update change note to mention removal from Community Packs
Mar 5, 2025
ad63dd9
Apply suggestions from docs review
jcogs33 Mar 10, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Java: update metadata, move from CWE-016 to CWE-200
  • Loading branch information
Jami Cogswell authored and Jami Cogswell committed Feb 24, 2025
commit 53cb30dcd00a7f7a1d32f2694781ecc598b8a9af
0 ...rity/CWE/CWE-016/SpringBootActuators.java → ...rity/CWE/CWE-200/SpringBootActuators.java
View file
Open in desktop
File renamed without changes.
0 ...ity/CWE/CWE-016/SpringBootActuators.qhelp → ...ity/CWE/CWE-200/SpringBootActuators.qhelp
View file
Open in desktop
File renamed without changes.
4 changes: 2 additions & 2 deletions ...curity/CWE/CWE-016/SpringBootActuators.ql → ...curity/CWE/CWE-200/SpringBootActuators.ql
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,11 +4,11 @@
* or even to remote code execution.
* @kind problem
* @problem.severity error
* @security-severity 6.5
* @precision high
* @id java/spring-boot-exposed-actuators
* @tags security
* experimental
* external/cwe/cwe-16
* external/cwe/cwe-200
*/

import java
Expand Down
0 .../CWE-016/SpringBootActuatorsTest.expected → ...ctuators/SpringBootActuatorsTest.expected
View file
Open in desktop
File renamed without changes.
0 ...rity/CWE-016/SpringBootActuatorsTest.java → ...ootActuators/SpringBootActuatorsTest.java
View file
Open in desktop
File renamed without changes.
0 ...curity/CWE-016/SpringBootActuatorsTest.ql → ...gBootActuators/SpringBootActuatorsTest.ql
View file
Open in desktop
File renamed without changes.
2 changes: 1 addition & 1 deletion ...test/query-tests/security/CWE-016/options → .../semmle/tests/SpringBootActuators/options
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1 +1 @@
//semmle-extractor-options: --javac-args -cp ${testdir}/../../../stubs/springframework-5.3.8
//semmle-extractor-options: --javac-args -cp ${testdir}/../../../../../../stubs/springframework-5.3.8