Skip to content

Commit f05b2af

Browse files
committed
Move to experimental
1 parent cffe89f commit f05b2af

File tree

6 files changed

+4
-1
lines changed

6 files changed

+4
-1
lines changed

java/ql/src/Security/CWE/CWE-016/SpringBootActuators.qhelp renamed to java/ql/src/experimental/Security/CWE/CWE-016/SpringBootActuators.qhelp

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -32,5 +32,8 @@ the actuator endpoints.</p>
3232
Spring Boot documentation:
3333
<a href="https://docs.spring.io/spring-boot/docs/current/reference/html/production-ready-features.html">Actuators</a>.
3434
</li>
35+
<li>
36+
<a href="https://www.veracode.com/blog/research/exploiting-spring-boot-actuators">Exploiting Spring Boot Actuators</a>
37+
</li>
3538
</references>
3639
</qhelp>

java/ql/test/query-tests/security/CWE-016/SpringBootActuators.java renamed to java/ql/test/experimental/query-tests/security/CWE-016/SpringBootActuators.java

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
import org.springframework.boot.actuate.autoconfigure.security.servlet.EndpointRequest;
22
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
33

4-
public class ActuatorSecurityConfig {
4+
public class SpringBootActuators {
55
protected void configure(HttpSecurity http) throws Exception {
66
http.requestMatcher(EndpointRequest.toAnyEndpoint()).authorizeRequests(requests -> requests.anyRequest().permitAll());
77
}

0 commit comments

Comments
 (0)