Package io.codemodder.codemods

Class HardenXMLInputFactoryCodemod

java.lang.Object
io.codemodder.javaparser.JavaParserChanger
io.codemodder.SarifPluginJavaParserChanger<com.github.javaparser.ast.body.VariableDeclarator>
io.codemodder.codemods.HardenXMLInputFactoryCodemod
All Implemented Interfaces:
io.codemodder.CodeChanger
@Codemod(id="pixee:java/harden-xmlinputfactory", reviewGuidance=MERGE_WITHOUT_REVIEW) public final class HardenXMLInputFactoryCodemod extends io.codemodder.SarifPluginJavaParserChanger<com.github.javaparser.ast.body.VariableDeclarator>
Disables external entity resolution in XMLInputFactory use.

  • Field Summary

    Fields inherited from class io.codemodder.SarifPluginJavaParserChanger

    sarif

    Fields inherited from class io.codemodder.javaparser.JavaParserChanger

    reporter

  • Constructor Summary

    Constructors
    Constructor
    Description
    HardenXMLInputFactoryCodemod(io.codemodder.RuleSarif sarif)
     

  • Method Summary

    Modifier and Type
    Method
    Description
    List<io.codemodder.DependencyGAV>
    dependenciesRequired()
     
    boolean
    onResultFound(io.codemodder.CodemodInvocationContext context, com.github.javaparser.ast.CompilationUnit cu, com.github.javaparser.ast.body.VariableDeclarator newFactoryVariable, com.contrastsecurity.sarif.Result result)
     

    Methods inherited from class io.codemodder.SarifPluginJavaParserChanger

    visit

    Methods inherited from class io.codemodder.javaparser.JavaParserChanger

    getDescription, getIndividualChangeDescription, getReferences, getSourceControlUrl, getSummary

    Methods inherited from class java.lang.Object

    clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

  • Constructor Details

    • HardenXMLInputFactoryCodemod

      @Inject public HardenXMLInputFactoryCodemod(@SemgrepScan(ruleId="harden-xmlinputfactory") io.codemodder.RuleSarif sarif)

  • Method Details

    • onResultFound

      public boolean onResultFound(io.codemodder.CodemodInvocationContext context, com.github.javaparser.ast.CompilationUnit cu, com.github.javaparser.ast.body.VariableDeclarator newFactoryVariable, com.contrastsecurity.sarif.Result result)
      Specified by:
      onResultFound in class io.codemodder.SarifPluginJavaParserChanger<com.github.javaparser.ast.body.VariableDeclarator>

    • dependenciesRequired

      public List<io.codemodder.DependencyGAV> dependenciesRequired()
      Overrides:
      dependenciesRequired in class io.codemodder.javaparser.JavaParserChanger