added new vuln code

Author: nahsra

pom.xml

@@ -31,7 +31,7 @@
       <dependency>
         <groupId>io.github.pixee</groupId>
         <artifactId>java-security-toolkit</artifactId>
-        <version>1.1.2</version>
+        <version>1.2.0</version>
       </dependency>
     </dependencies>
   </dependencyManagement>

src/main/java/com/acme/jndi/JNDIVulnFixed2.java

@@ -0,0 +1,23 @@
+package com.acme.jndi;
+
+import io.github.pixee.security.JNDI;
+import jakarta.ws.rs.GET;
+import jakarta.ws.rs.Path;
+import jakarta.ws.rs.QueryParam;
+
+import javax.naming.Context;
+import javax.naming.InitialContext;
+import javax.naming.NamingException;
+
+@Path("/unsafe-jndi-lookup")
+public class JNDIVulnFixed2 {
+
+    @GET
+    public String lookupResource(@QueryParam("resource") final String resource) throws NamingException {
+        Context ctx = new InitialContext();
+        Object obj = JNDI.limitedContext(ctx).lookup(resource);
+        return String.valueOf(obj);
+    }
+
+
+}

src/main/java/com/acme/jndi/JNDIVulnFixed3.java

@@ -0,0 +1,26 @@
+package com.acme.jndi;
+
+import jakarta.ws.rs.GET;
+import jakarta.ws.rs.Path;
+import jakarta.ws.rs.QueryParam;
+
+import javax.naming.Context;
+import javax.naming.InitialContext;
+import javax.naming.NamingException;
+import java.util.Set;
+import java.util.regex.Pattern;
+
+@Path("/unsafe-jndi-lookup")
+public class JNDIVulnFixed3 {
+
+    @GET
+    public String lookupResource(@QueryParam("resource") final String resource) throws NamingException {
+        Context ctx = new InitialContext();
+
+        if(Pattern.compile("^ldap://$").matcher(resource).matches()) {
+            throw new SecurityException("Illegal JNDI resource name: " + resource);
+        }
+        Object obj = ctx.lookup(resource);
+        return String.valueOf(obj);
+    }
+}

src/main/java/com/acme/sql/SQLInjectionVuln.java

@@ -0,0 +1,19 @@
+package com.acme.sql;
+
+import jakarta.ws.rs.GET;
+import jakarta.ws.rs.Path;
+import jakarta.ws.rs.QueryParam;
+
+import java.sql.Connection;
+import java.sql.SQLException;
+import java.sql.Statement;
+
+@Path("/unsafe-sql-injection")
+public class SQLInjectionVuln {
+    @GET
+    public String lookupResource(Connection connection, @QueryParam("resource") final String resource) throws SQLException {
+        Statement statement = connection.createStatement();
+        statement.executeQuery("select * from users where name = '" + resource + "'");
+        return "ok";
+    }
+}

src/main/java/com/acme/sql/SQLInjectionVulnFixed.java

@@ -0,0 +1,21 @@
+package com.acme.sql;
+
+import jakarta.ws.rs.GET;
+import jakarta.ws.rs.Path;
+import jakarta.ws.rs.QueryParam;
+
+import java.sql.Connection;
+import java.sql.PreparedStatement;
+import java.sql.SQLException;
+import java.sql.Statement;
+
+@Path("/unsafe-sql-injection")
+public class SQLInjectionVulnFixed {
+    @GET
+    public String lookupResource(Connection connection, @QueryParam("resource") final String resource) throws SQLException {
+        PreparedStatement statement = connection.prepareStatement("select * from users where name = ?");
+        statement.setString(1, resource);
+        statement.executeQuery();
+        return "ok";
+    }
+}