Skip to content

Java: Promote Spring Boot Actuators query from experimental #18793

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jcogs33 merged 17 commits into from
Mar 11, 2025
Merged

Java: Promote Spring Boot Actuators query from experimental #18793

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
17 commits
Select commit Hold shift + click to select a range
2ce5920
Java: copy out of experimental
Feb 16, 2025
978834b
Java: remove deprecations
Feb 16, 2025
089a491
Java: fix tests; update for non-experimental directory
Feb 16, 2025
5e5bc2a
Java: remove experimental files
Feb 16, 2025
8064e8f
Java: convert tests to inline expectations
Feb 20, 2025
8dfb920
Java: refactor QL, move code to libraries
Feb 20, 2025
b2469ff
Java: add APIs and tests for more recent Spring versions: authorizeHt…
Feb 20, 2025
9e51b01
Java: handle example in Spring docs
Feb 24, 2025
f65a5b9
Java: add test for qhelp good example
Feb 24, 2025
6fe7c7a
Java: some refactoring
Feb 24, 2025
53cb30d
Java: update metadata, move from CWE-016 to CWE-200
Feb 24, 2025
26e3967
Java: edit qhelp
Feb 24, 2025
c2e859c
Java: add change note
Feb 24, 2025
746f022
Java: add 'Spring' prefix to public class names
Mar 4, 2025
82062e2
Java: update test
Mar 4, 2025
0eec951
Java: update change note to mention removal from Community Packs
Mar 5, 2025
ad63dd9
Apply suggestions from docs review
jcogs33 Mar 10, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Java: remove deprecations
  • Loading branch information
Jami Cogswell authored and Jami Cogswell committed Feb 24, 2025
commit 978834bd9cc0ec542e45988a82613a0c7a14e40e
9 changes: 4 additions & 5 deletions java/ql/src/Security/CWE/CWE-016/SpringBootActuators.ql
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,9 +12,8 @@
*/

import java
deprecated import SpringBootActuators
import SpringBootActuators

deprecated query predicate problems(PermitAllCall permitAllCall, string message) {
permitAllCall.permitsSpringBootActuators() and
message = "Unauthenticated access to Spring Boot actuator is allowed."
}
from PermitAllCall permitAllCall
where permitAllCall.permitsSpringBootActuators()
select permitAllCall, "Unauthenticated access to Spring Boot actuator is allowed."
2 changes: 0 additions & 2 deletions java/ql/src/Security/CWE/CWE-016/SpringBootActuators.qll
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,3 @@
deprecated module;

import java

/** The class `org.springframework.security.config.annotation.web.builders.HttpSecurity`. */
Expand Down