Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Close hibernate validator vulnerability #1007

Merged
merged 3 commits into from
Mar 4, 2020
Merged

Close hibernate validator vulnerability #1007

merged 3 commits into from
Mar 4, 2020

Conversation

melowe
Copy link
Contributor

@melowe melowe commented Mar 3, 2020

Sanitise potential nested el expressions in configuration path values. Remove dollar signs from path values before creating validation message,

@codecov-io
Copy link

codecov-io commented Mar 3, 2020

Codecov Report

Merging #1007 into master will increase coverage by <.01%.
The diff coverage is 100%.

Impacted file tree graph

@@             Coverage Diff              @@
##             master    #1007      +/-   ##
============================================
+ Coverage     99.31%   99.31%   +<.01%     
  Complexity     2231     2231              
============================================
  Files           337      337              
  Lines          6100     6103       +3     
  Branches        363      363              
============================================
+ Hits           6058     6061       +3     
  Misses            5        5              
  Partials         37       37
Impacted Files Coverage Δ Complexity Δ
...orum/tessera/config/constraints/PathValidator.java 100% <100%> (ø) 10 <0> (ø) ⬇️

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 58fa9ba...18f9673. Read the comment docs.

@Krish1979 Krish1979 merged commit b3d4699 into master Mar 4, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants