Remediate OWASP A01:2025 Broken access control
Recipe ID
org.openrewrite.java.security.Owasp2025A01Artifact
org.openrewrite.recipe:rewrite-java-securityOWASP A01:2025 describes failures related to broken access control.
Usage
This recipe has no required configuration options. You’ll need the Moderne CLI configured before running the command below.
mod run . --recipe org.openrewrite.java.security.Owasp2025A01If the recipe isn’t available locally, install it with:
mod config recipes jar install org.openrewrite.recipe:rewrite-java-security:3.36.0Definition
This recipe runs the following recipes in order.
- Remediate OWASP A01:2021 Broken access control
org.openrewrite.java.security.OwaspA01 - Enable CSRF attack prevention
org.openrewrite.java.security.spring.CsrfProtection - Insecure cookies
org.openrewrite.java.security.servlet.CookieSetSecure - Remediate server-side request forgery (SSRF)
org.openrewrite.java.security.FixCwe918
Data tables
Structured output this recipe can produce.
- Method callsThe text of matching method invocations.
org.openrewrite.java.table.MethodCalls - Missing authorizationSpring MVC handler methods reachable to anonymous users without an explicit authorization annotation.
org.openrewrite.java.security.table.MissingAuthorization - Source files that had resultsSource files that were modified by the recipe run.
org.openrewrite.table.SourcesFileResults - Source files that had search resultsSearch results that were found during the recipe run.
org.openrewrite.table.SearchResults - Source files that errored on a recipeThe details of all errors produced by a recipe run.
org.openrewrite.table.SourcesFileErrors - Recipe performanceStatistics used in analyzing the performance of recipes.
org.openrewrite.table.RecipeRunStats