Moderne licensed

Fix permissive `HostnameVerifier` implementations

Recipe IDorg.openrewrite.java.security.FixPermissiveHostnameVerifier

Artifactorg.openrewrite.recipe:rewrite-java-security

Replaces javax.net.ssl.HostnameVerifier implementations whose verify(String, SSLSession) method unconditionally returns true (matching return true;, return Boolean.TRUE;, or return Boolean.valueOf(true);) with a delegation to HttpsURLConnection.getDefaultHostnameVerifier(), restoring proper hostname verification.

Single recipeRSPEC-S5527CWE-295Proprietary

Usage

This recipe has no required configuration options. You’ll need the Moderne CLI configured before running the command below.

mod run . --recipe org.openrewrite.java.security.FixPermissiveHostnameVerifier

If the recipe isn’t available locally, install it with:

mod config recipes jar install org.openrewrite.recipe:rewrite-java-security:3.36.0

Data tables

Structured output this recipe can produce.

Source files that had resultsSource files that were modified by the recipe run.org.openrewrite.table.SourcesFileResults
Source files that had search resultsSearch results that were found during the recipe run.org.openrewrite.table.SearchResults
Source files that errored on a recipeThe details of all errors produced by a recipe run.org.openrewrite.table.SourcesFileErrors
Recipe performanceStatistics used in analyzing the performance of recipes.org.openrewrite.table.RecipeRunStats