Remediate OWASP A01:2021 Broken access control
Recipe ID
org.openrewrite.java.security.OwaspA01Artifact
org.openrewrite.recipe:rewrite-java-securityOWASP A01:2021 describes failures related to broken access control.
Usage
This recipe has no required configuration options. You’ll need the Moderne CLI configured before running the command below.
mod run . --recipe org.openrewrite.java.security.OwaspA01If the recipe isn’t available locally, install it with:
mod config recipes jar install org.openrewrite.recipe:rewrite-java-security:3.36.0Definition
This recipe runs the following recipes in order.
- Finds uses of
Encryptors.queryableText()org.openrewrite.java.spring.security5.search.FindEncryptorsQueryableTextUses - Zip slip
org.openrewrite.java.security.ZipSlip - Partial path traversal vulnerability
org.openrewrite.java.security.PartialPathTraversalVulnerability - Find Spring MVC handlers missing authorization
org.openrewrite.java.security.search.FindMissingSpringAuthorization
Data tables
Structured output this recipe can produce.
- Method callsThe text of matching method invocations.
org.openrewrite.java.table.MethodCalls - Missing authorizationSpring MVC handler methods reachable to anonymous users without an explicit authorization annotation.
org.openrewrite.java.security.table.MissingAuthorization - Source files that had resultsSource files that were modified by the recipe run.
org.openrewrite.table.SourcesFileResults - Source files that had search resultsSearch results that were found during the recipe run.
org.openrewrite.table.SearchResults - Source files that errored on a recipeThe details of all errors produced by a recipe run.
org.openrewrite.table.SourcesFileErrors - Recipe performanceStatistics used in analyzing the performance of recipes.
org.openrewrite.table.RecipeRunStats