Package io.codemodder.codemods

Class HardenXStreamCodemod

java.lang.Object

io.codemodder.javaparser.JavaParserChanger

io.codemodder.SarifPluginJavaParserChanger<com.github.javaparser.ast.body.VariableDeclarator>

io.codemodder.codemods.HardenXStreamCodemod

All Implemented Interfaces:

io.codemodder.CodeChanger

@Codemod(id="pixee:java/harden-xstream",
         importance=HIGH,
         reviewGuidance=MERGE_WITHOUT_REVIEW)
public final class HardenXStreamCodemod
extends io.codemodder.SarifPluginJavaParserChanger<com.github.javaparser.ast.body.VariableDeclarator>

Adds gadget filtering logic to XStream deserialization.

Field Summary

Fields inherited from class io.codemodder.SarifPluginJavaParserChanger

sarif

Fields inherited from class io.codemodder.javaparser.JavaParserChanger

reporter

Constructor Summary

Constructors

Constructor	Description
HardenXStreamCodemod(io.codemodder.RuleSarif sarif)

Method Summary

Modifier and Type	Method	Description
io.codemodder.javaparser.ChangesResult	onResultFound(io.codemodder.CodemodInvocationContext context, com.github.javaparser.ast.CompilationUnit cu, com.github.javaparser.ast.body.VariableDeclarator newXStreamVariable, com.contrastsecurity.sarif.Result result)

Methods inherited from class io.codemodder.SarifPluginJavaParserChanger

shouldRun, visit

Methods inherited from class io.codemodder.javaparser.JavaParserChanger

getDescription, getIndividualChangeDescription, getReferences, getSummary

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

HardenXStreamCodemod

@Inject
public HardenXStreamCodemod(@SemgrepScan(ruleId="harden-xstream")
 io.codemodder.RuleSarif sarif)

Method Details

onResultFound

public io.codemodder.javaparser.ChangesResult onResultFound(io.codemodder.CodemodInvocationContext context,
 com.github.javaparser.ast.CompilationUnit cu,
 com.github.javaparser.ast.body.VariableDeclarator newXStreamVariable,
 com.contrastsecurity.sarif.Result result)

Specified by:

onResultFound in class io.codemodder.SarifPluginJavaParserChanger<com.github.javaparser.ast.body.VariableDeclarator>