Skip to content

Releases: pixee/codemodder-java

v0.98.0

24 Nov 20:05
9e68b29
Compare
Choose a tag to compare
Add tests and more stable behavior when seeing Maven failure (#476)

v0.97.9

23 Nov 18:55
e261a7f
Compare
Choose a tag to compare
Don't throw exceptions if dependencies can't be pre-calculated (#475)

We observed this issue:

```
INFO - 4abaf6cf-c5e6-4f48-b198-edc124aedf71 - Problem scanning file /tmp/codemodder-project6927415874030968841/app/src/main/java/org/apache/roller/weblogger/util/PasswordUtility.java
INFO - 4abaf6cf-c5e6-4f48-b198-edc124aedf71 - io.codemodder.plugins.maven.MavenProvider$DependencyUpdateException: Failure when retrieving dependencies
INFO - 4abaf6cf-c5e6-4f48-b198-edc124aedf71 - at io.codemodder.plugins.maven.MavenProvider.getAllDependencies(MavenProvider.java:146)
INFO - 4abaf6cf-c5e6-4f48-b198-edc124aedf71 - at io.codemodder.DefaultCodemodExecutor.lambda$execute$0(DefaultCodemodExecutor.java:187)
INFO - 4abaf6cf-c5e6-4f48-b198-edc124aedf71 - at java.base/java.util.stream.ReferencePipeline$7$1.accept(ReferencePipeline.java:273)
INFO - 4abaf6cf-c5e6-4f48-b198-edc124aedf71 - at java.base/java.util.ArrayList$ArrayListSpliterator.forEachRemaining(ArrayList.java:1625)
INFO - 4abaf6cf-c5e6-4f48-b198-edc124aedf71 - at java.base/java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:509)
...
io.codemodder.DefaultCodemodExecutor.lambda$execute$1(DefaultCodemodExecutor.java:188)
edc124aedf71 - Caused by: org.dom4j.DocumentException: Error on line 781 of document  : The element type "sequential" must be terminated by the matching end-tag "</sequential>".
```

This error is preventing _analysis_ from occurring, not the updating of
Maven dependencies. We should still run our codemods, even if
dependencies can't be pre-calculated.

v0.97.8

22 Nov 01:33
3b5d693
Compare
Choose a tag to compare
Improve CodeQL handling of multiple rules (#474)

Also fixed incidental bug in header injection remediation when applied
to interfaces.

v0.97.7

21 Nov 17:01
4e332a1
Compare
Choose a tag to compare
Normalize Maven codemod ID (#472)

v0.97.6

20 Nov 15:11
dd84751
Compare
Choose a tag to compare
Limit `ResponseEntity` call changes (#470)

We can only safely make this change when the first argument value is a
`String` -- this adds that change and tests it.

v0.97.5

20 Nov 06:51
2c4bb17
Compare
Choose a tag to compare
New remediation code shapes (#469)

Adding other form of ZipSlip remediation
Added XSS reported in `ResponseEntity`

v0.97.4

18 Nov 02:04
0fd8818
Compare
Choose a tag to compare
Single codemod execution performance improvements (#468)

* Only load codemod resources if needed (a codemod for the provider is
active)
* Cache AppScan location data

v0.97.3

11 Nov 04:18
3ee3ad9
Compare
Choose a tag to compare
Filter `DocumentBuilder#parse()` calls more accurately (#465)

.. so it doesn't recognize `XMLReader#parse()` calls as well.

v0.97.2

11 Nov 00:50
0ecf40e
Compare
Choose a tag to compare
Respect order when `--codemod-includes` are set (#464)

v0.97.1

08 Nov 18:44
882f436
Compare
Choose a tag to compare
Adds new transformation for SQL injection/parameterization codemods (…