Skip to content

Java: CWE-016 Query to detect insecure configuration of Spring Boot Actuator #5384

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
smowton merged 5 commits into from
Apr 12, 2021
Merged

Java: CWE-016 Query to detect insecure configuration of Spring Boot Actuator #5384

Changes from 1 commit
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
eeac7e3
Query to detect insecure configuration of Spring Boot Actuator
luchua-bc Mar 11, 2021
c8b1bc3
Enhance the query
luchua-bc Mar 11, 2021
1a2e341
Refactor the business logic of the query into a separate predicate
luchua-bc Mar 12, 2021
a72b134
Add a comment on how to run the query
luchua-bc Mar 26, 2021
bb23866
Add missing doc comments
smowton Apr 12, 2021
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Add a comment on how to run the query
  • Loading branch information
@luchua-bc
luchua-bc committed Mar 26, 2021
commit a72b1340eb6bb3bdbea9cabd6bdd942a9365b848
8 changes: 8 additions & 0 deletions java/ql/src/experimental/Security/CWE/CWE-016/InsecureSpringActuatorConfig.ql
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,14 @@
* external/cwe-016
*/

/*
* Note this query requires properties files to be indexed before it can produce results.
* If creating your own database with the CodeQL CLI, you should run
* `codeql database index-files --language=properties ...`
* If using lgtm.com, you should add `properties_files: true` to the index block of your
* lgtm.yml file (see https://lgtm.com/help/lgtm/java-extraction)
*/

import java
Comment thread
luchua-bc marked this conversation as resolved.
import semmle.code.configfiles.ConfigFiles
import semmle.code.xml.MavenPom
Expand Down