Skip to content

Added FileDisclosure vulnerability enhancements

Chathumina Vimukthi requested to merge feat/issue-433056/FileDisclosure into main

What does this MR do?

Enhanced sast-rule java/inject/rule-FileDisclosure.yml

  • Removed org.apache.struts.action.ActionForward patterns because it is struts 1 which was EOL'd in 2008.
  • Splited the rules into two files: rule-FileDisclosureRequestDispatcher and rule-FileDisclosureSpringFramework
  • Fixed descriptions for each rule file
  • Fixed mappings
  • Added new pattern-sources
  • Updated the sample java code files

What are the relevant issue numbers?

Issue - 433056

Does this MR meet the acceptance criteria?

Merge request reports

Loading