Remediate OWASP A02:2025 Security misconfiguration
Recipe ID
org.openrewrite.java.security.Owasp2025A02Artifact
org.openrewrite.recipe:rewrite-java-securityOWASP A02:2025 describes failures related to security misconfiguration. Previously A05:2021, this category moved up to #2 in 2025.
Usage
This recipe has no required configuration options. You’ll need the Moderne CLI configured before running the command below.
mod run . --recipe org.openrewrite.java.security.Owasp2025A02If the recipe isn’t available locally, install it with:
mod config recipes jar install org.openrewrite.recipe:rewrite-java-security:3.36.0Definition
This recipe runs the following recipes in order.
- Remediate OWASP A05:2021 Security misconfiguration
org.openrewrite.java.security.OwaspA05 - Insecure cookies
org.openrewrite.java.security.servlet.CookieSetSecure - Cookies missing HttpOnly flag
org.openrewrite.java.security.servlet.CookieSetHttpOnly - Find permissive CORS configuration
org.openrewrite.java.security.search.FindPermissiveCorsConfiguration - Remove debug mode from Spring Security
org.openrewrite.java.security.spring.RemoveEnableWebSecurityDebug
Data tables
Structured output this recipe can produce.
- Source files that had resultsSource files that were modified by the recipe run.
org.openrewrite.table.SourcesFileResults - Source files that had search resultsSearch results that were found during the recipe run.
org.openrewrite.table.SearchResults - Source files that errored on a recipeThe details of all errors produced by a recipe run.
org.openrewrite.table.SourcesFileErrors - Recipe performanceStatistics used in analyzing the performance of recipes.
org.openrewrite.table.RecipeRunStats