Releases: pixee/codemodder-java
Releases · pixee/codemodder-java
v0.98.0
v0.97.9
Don't throw exceptions if dependencies can't be pre-calculated (#475) We observed this issue: ``` INFO - 4abaf6cf-c5e6-4f48-b198-edc124aedf71 - Problem scanning file /tmp/codemodder-project6927415874030968841/app/src/main/java/org/apache/roller/weblogger/util/PasswordUtility.java INFO - 4abaf6cf-c5e6-4f48-b198-edc124aedf71 - io.codemodder.plugins.maven.MavenProvider$DependencyUpdateException: Failure when retrieving dependencies INFO - 4abaf6cf-c5e6-4f48-b198-edc124aedf71 - at io.codemodder.plugins.maven.MavenProvider.getAllDependencies(MavenProvider.java:146) INFO - 4abaf6cf-c5e6-4f48-b198-edc124aedf71 - at io.codemodder.DefaultCodemodExecutor.lambda$execute$0(DefaultCodemodExecutor.java:187) INFO - 4abaf6cf-c5e6-4f48-b198-edc124aedf71 - at java.base/java.util.stream.ReferencePipeline$7$1.accept(ReferencePipeline.java:273) INFO - 4abaf6cf-c5e6-4f48-b198-edc124aedf71 - at java.base/java.util.ArrayList$ArrayListSpliterator.forEachRemaining(ArrayList.java:1625) INFO - 4abaf6cf-c5e6-4f48-b198-edc124aedf71 - at java.base/java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:509) ... io.codemodder.DefaultCodemodExecutor.lambda$execute$1(DefaultCodemodExecutor.java:188) edc124aedf71 - Caused by: org.dom4j.DocumentException: Error on line 781 of document : The element type "sequential" must be terminated by the matching end-tag "</sequential>". ``` This error is preventing _analysis_ from occurring, not the updating of Maven dependencies. We should still run our codemods, even if dependencies can't be pre-calculated.
v0.97.8
Improve CodeQL handling of multiple rules (#474) Also fixed incidental bug in header injection remediation when applied to interfaces.
v0.97.7
Normalize Maven codemod ID (#472)
v0.97.6
Limit `ResponseEntity` call changes (#470) We can only safely make this change when the first argument value is a `String` -- this adds that change and tests it.
v0.97.5
New remediation code shapes (#469) Adding other form of ZipSlip remediation Added XSS reported in `ResponseEntity`
v0.97.4
Single codemod execution performance improvements (#468) * Only load codemod resources if needed (a codemod for the provider is active) * Cache AppScan location data
v0.97.3
Filter `DocumentBuilder#parse()` calls more accurately (#465) .. so it doesn't recognize `XMLReader#parse()` calls as well.
v0.97.2
Respect order when `--codemod-includes` are set (#464)
v0.97.1
Adds new transformation for SQL injection/parameterization codemods (…