Skip to content

Releases: pixee/codemodder-java

v0.97.6

20 Nov 15:11
dd84751
Compare
Choose a tag to compare
Limit `ResponseEntity` call changes (#470)

We can only safely make this change when the first argument value is a
`String` -- this adds that change and tests it.

v0.97.5

20 Nov 06:51
2c4bb17
Compare
Choose a tag to compare
New remediation code shapes (#469)

Adding other form of ZipSlip remediation
Added XSS reported in `ResponseEntity`

v0.97.4

18 Nov 02:04
0fd8818
Compare
Choose a tag to compare
Single codemod execution performance improvements (#468)

* Only load codemod resources if needed (a codemod for the provider is
active)
* Cache AppScan location data

v0.97.3

11 Nov 04:18
3ee3ad9
Compare
Choose a tag to compare
Filter `DocumentBuilder#parse()` calls more accurately (#465)

.. so it doesn't recognize `XMLReader#parse()` calls as well.

v0.97.2

11 Nov 00:50
0ecf40e
Compare
Choose a tag to compare
Respect order when `--codemod-includes` are set (#464)

v0.97.1

08 Nov 18:44
882f436
Compare
Choose a tag to compare
Adds new transformation for SQL injection/parameterization codemods (…

v0.97.0

15 Oct 13:19
364702d
Compare
Choose a tag to compare
Refactors SQL Remediator and Codemods & HQL Transformation Bugfix (#456)

Refactors SQL injection codemods to use the new remediator API and fixes
a HQL transformation bug.

v0.96.0

02 Oct 13:17
6fc81f2
Compare
Choose a tag to compare
New Sonar SSRF codemod (#449)

/close #work

Could not find any examples of sonar findings for SSRF vulnerabilities
using `Url` or `HTTPUrlConnection`. This codemod only covers
vulnerabilities found using the `RestTemplate` class from spring.

v0.95.0

19 Sep 00:07
9196cb2
Compare
Choose a tag to compare
:sparkles: Open Source Semgrep codemods (#448)

- **:truck: open source semgrep codemods**
- **:sparkles: add semgrep codemods**

v0.94.1

18 Sep 19:51
50cf515
Compare
Choose a tag to compare
Added check for existing overrides in add-missing-override (#447)

If you have multiple findings of the same rule for the same location,
some codemods will duplicate their fixes.

This PR adds a patch to stop this for the `add-missing-override`
codemod.