Releases: pixee/codemodder-java
Releases · pixee/codemodder-java
v0.97.6
Limit `ResponseEntity` call changes (#470) We can only safely make this change when the first argument value is a `String` -- this adds that change and tests it.
v0.97.5
New remediation code shapes (#469) Adding other form of ZipSlip remediation Added XSS reported in `ResponseEntity`
v0.97.4
Single codemod execution performance improvements (#468) * Only load codemod resources if needed (a codemod for the provider is active) * Cache AppScan location data
v0.97.3
Filter `DocumentBuilder#parse()` calls more accurately (#465) .. so it doesn't recognize `XMLReader#parse()` calls as well.
v0.97.2
Respect order when `--codemod-includes` are set (#464)
v0.97.1
Adds new transformation for SQL injection/parameterization codemods (…
v0.97.0
Refactors SQL Remediator and Codemods & HQL Transformation Bugfix (#456) Refactors SQL injection codemods to use the new remediator API and fixes a HQL transformation bug.
v0.96.0
New Sonar SSRF codemod (#449) /close #work Could not find any examples of sonar findings for SSRF vulnerabilities using `Url` or `HTTPUrlConnection`. This codemod only covers vulnerabilities found using the `RestTemplate` class from spring.
v0.95.0
:sparkles: Open Source Semgrep codemods (#448) - **:truck: open source semgrep codemods** - **:sparkles: add semgrep codemods**
v0.94.1
Added check for existing overrides in add-missing-override (#447) If you have multiple findings of the same rule for the same location, some codemods will duplicate their fixes. This PR adds a patch to stop this for the `add-missing-override` codemod.