Package io.codemodder.remediation.jndiinjection

Class ReplaceLimitedLookupStrategy

java.lang.Object

io.codemodder.remediation.jndiinjection.ReplaceLimitedLookupStrategy

All Implemented Interfaces:

RemediationStrategy

public final class ReplaceLimitedLookupStrategy
extends Object
implements RemediationStrategy

Remediates JNDI injection vulnerabilities. It does this by weaving in a check to limit what JNDI resources are available, and users can add more.

Inspiration for this came from logback: https://github.com/qos-ch/logback/blob/979d76f3f2847f1c129bcc6295e69187d02e472c/logback-core/src/main/java/ch/qos/logback/core/util/JNDIUtil.java#L54

Constructor Summary

Constructors

Constructor	Description
ReplaceLimitedLookupStrategy()

Method Summary

Modifier and Type	Method	Description
SuccessOrReason	fix(com.github.javaparser.ast.CompilationUnit cu, com.github.javaparser.ast.Node node)	Apply a fix to the issue detected a given node.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

ReplaceLimitedLookupStrategy

public ReplaceLimitedLookupStrategy()

Method Details

fix

public SuccessOrReason fix(com.github.javaparser.ast.CompilationUnit cu,
 com.github.javaparser.ast.Node node)

Description copied from interface: RemediationStrategy

Apply a fix to the issue detected a given node.

Specified by:

fix in interface RemediationStrategy

Returns:

A SuccessOrReason object containing a list of dependencies if the fix was successful, or a reason for failure otherwise