StaticCodeAudit — Audit Report - JeecgBoot

FROM node:20-alpine
RUN npm install
USER node
CMD ["node", app.js ]

logger.info("Token: [REDACTED]");

private char[] password;
// After use:
// Arrays.fill(password, \0 );

PreparedStatement ps = conn.prepareStatement("SELECT * FROM users WHERE id=?");
ps.setInt(1, id);

private static final Set<String> ALLOWED = Set.of(".jpg", .png , .pdf );
public String upload(@RequestParam MultipartFile file) {
String ext = FilenameUtils.getExtension(file.getOriginalFilename()).toLowerCase();
if (!ALLOWED.contains("." + ext)) throw new IllegalArgumentException("Type non autorisé");
String safe = UUID.randomUUID() + . + ext;
file.transferTo(new File(UPLOAD_DIR + safe));
return ok ;
}

Cipher.getInstance("AES/GCM/NoPadding");

ProcessBuilder pb = new ProcessBuilder("cmd", validatedArg);
pb.start();

// Use JSON or validated deserialization
Object obj = objectMapper.readValue(json, SafeType.class);

ProcessBuilder pb = new ProcessBuilder("cmd", validatedArg);
pb.start();

DocumentBuilderFactory dbf = DocumentBuilderFactory.newInstance();
dbf.setFeature("http://apache.org/xml/features/disallow-doctype-decl", true);
dbf.newDocumentBuilder().parse(input);

PreparedStatement ps = conn.prepareStatement("SELECT * FROM users WHERE id=?");
ps.setInt(1, id);

Path safe = Path.of(base, name).normalize();
if (safe.startsWith(base)) new FileInputStream(safe.toFile());

url = request.args.get('url').replace('\r',  ).replace('\n',  )
response.headers['Location'] = url

filename = request.args.get("file")
safe = os.path.realpath(os.path.join(BASE, filename))
if not safe.startswith(os.path.realpath(BASE)):
abort(403)
content = open(safe).read()

user_id = request.args.get("id")
db.execute("SELECT * FROM users WHERE id = %s", (user_id,))

from markupsafe import escape
name = request.args.get("name")
return Markup(f"<h1>Hello {escape(name)}</h1>")

next_url = request.args.get("next", / )
if not is_safe_url(next_url, request.host):
next_url = /
return redirect(next_url)