story #15307: add license and linter

[Regzox]

No description provided.

[vitam-prg]

Checkmarx One – Scan Summary & Details – d343617d-57da-47fb-afad-7eb962c176aa

New Issues (29)

Checkmarx found the following issues in this Pull Request

#	Severity	Issue	Source File / Package	Checkmarx Insight
1		Improper_Restriction_of_Stored_XXE_Ref	/sedalib/src/main/java/fr/gouv/vitam/tools/sedalib/inout/importer/SIPToArchiveTransferImporter.java: 239	details The SEDAXMLEventReader loads and parses XML using createXMLEventReader, at line 200 of /sedalib/src/main/java/fr/gouv/vitam/tools/sedalib/xml/SEDAX... Attack Vector
2		Improper_Restriction_of_Stored_XXE_Ref	/sedalib/src/main/java/fr/gouv/vitam/tools/sedalib/inout/importer/DIPToArchiveDeliveryRequestReplyImporter.java: 243	details The SEDAXMLEventReader loads and parses XML using createXMLEventReader, at line 200 of /sedalib/src/main/java/fr/gouv/vitam/tools/sedalib/xml/SEDAX... Attack Vector
3		Improper_Restriction_of_Stored_XXE_Ref	/sedalib/src/main/java/fr/gouv/vitam/tools/sedalib/inout/importer/SIPToArchiveTransferImporter.java: 239	details The SEDAXMLEventReader loads and parses XML using createXMLEventReader, at line 199 of /sedalib/src/main/java/fr/gouv/vitam/tools/sedalib/xml/SEDAX... Attack Vector
4		Improper_Restriction_of_Stored_XXE_Ref	/sedalib/src/main/java/fr/gouv/vitam/tools/sedalib/inout/importer/DIPToArchiveDeliveryRequestReplyImporter.java: 243	details The SEDAXMLEventReader loads and parses XML using createXMLEventReader, at line 199 of /sedalib/src/main/java/fr/gouv/vitam/tools/sedalib/xml/SEDAX... Attack Vector
5		Improper_Restriction_of_XXE_Ref	/resip/src/main/java/fr/gouv/vitam/tools/resip/frame/XmlEditDialog.java: 469	details The indentString loads and parses XML using parse, at line 172 of /sedalib/src/main/java/fr/gouv/vitam/tools/sedalib/xml/IndentXMLTool.java. Thi... Attack Vector
6		Improper_Restriction_of_XXE_Ref	/resip/src/main/java/fr/gouv/vitam/tools/resip/frame/XmlEditDialog.java: 501	details The indentString loads and parses XML using parse, at line 172 of /sedalib/src/main/java/fr/gouv/vitam/tools/sedalib/xml/IndentXMLTool.java. Thi... Attack Vector
7		Improper_Restriction_of_XXE_Ref	/resip/src/main/java/fr/gouv/vitam/tools/resip/frame/XmlEditDialog.java: 528	details The indentString loads and parses XML using parse, at line 172 of /sedalib/src/main/java/fr/gouv/vitam/tools/sedalib/xml/IndentXMLTool.java. Thi... Attack Vector
8		Privacy_Violation	/mailextract/src/main/java/fr/gouv/vitam/tools/mailextract/MailExtractApp.java: 319	details Method main at line 319 of /mailextract/src/main/java/fr/gouv/vitam/tools/mailextract/MailExtractApp.java sends user information outside the appli... Attack Vector
9		Privacy_Violation	/javalibpst/src/main/java/fr/gouv/vitam/tools/javalibpst/PSTRecipient.java: 94	details Method getSmtpAddress at line 94 of /javalibpst/src/main/java/fr/gouv/vitam/tools/javalibpst/PSTRecipient.java sends user information outside the ... Attack Vector
10		Privacy_Violation	/mailextract/src/main/java/fr/gouv/vitam/tools/mailextract/MailExtractApp.java: 526	details Method main at line 526 of /mailextract/src/main/java/fr/gouv/vitam/tools/mailextract/MailExtractApp.java sends user information outside the appli... Attack Vector
11		Privacy_Violation	/mailextractlib/src/main/java/fr/gouv/vitam/tools/mailextractlib/store/microsoft/pst/PstStoreMessage.java: 296	details Method getNativeRecipientsEmailAddress at line 296 of /mailextractlib/src/main/java/fr/gouv/vitam/tools/mailextractlib/store/microsoft/pst/PstStore... Attack Vector
12		Privacy_Violation	/mailextract/src/main/java/fr/gouv/vitam/tools/mailextract/MailExtractGraphicApp.java: 364	details Method parseParams at line 364 of /mailextract/src/main/java/fr/gouv/vitam/tools/mailextract/MailExtractGraphicApp.java sends user information out... Attack Vector
13		Privacy_Violation	/mailextract/src/main/java/fr/gouv/vitam/tools/mailextract/MailExtractGraphicApp.java: 364	details Method parseParams at line 364 of /mailextract/src/main/java/fr/gouv/vitam/tools/mailextract/MailExtractGraphicApp.java sends user information out... Attack Vector
14		Privacy_Violation	/mailextractlib/src/main/java/fr/gouv/vitam/tools/mailextractlib/store/microsoft/MicrosoftStoreMessage.java: 358	details Method analyzeFrom at line 358 of /mailextractlib/src/main/java/fr/gouv/vitam/tools/mailextractlib/store/microsoft/MicrosoftStoreMessage.java send... Attack Vector
15		Privacy_Violation	/mailextract/src/main/java/fr/gouv/vitam/tools/mailextract/MailExtractApp.java: 319	details Method main at line 319 of /mailextract/src/main/java/fr/gouv/vitam/tools/mailextract/MailExtractApp.java sends user information outside the appli... Attack Vector
16		Privacy_Violation	/mailextract/src/main/java/fr/gouv/vitam/tools/mailextract/MailExtractApp.java: 319	details Method main at line 319 of /mailextract/src/main/java/fr/gouv/vitam/tools/mailextract/MailExtractApp.java sends user information outside the appli... Attack Vector
17		Privacy_Violation	/mailextractlib/src/main/java/fr/gouv/vitam/tools/mailextractlib/core/StoreExtractor.java: 780	details Method writeTargetLog at line 780 of /mailextractlib/src/main/java/fr/gouv/vitam/tools/mailextractlib/core/StoreExtractor.java sends user informat... Attack Vector
18		Privacy_Violation	/mailextract/src/main/java/fr/gouv/vitam/tools/mailextract/MailExtractApp.java: 319	details Method main at line 319 of /mailextract/src/main/java/fr/gouv/vitam/tools/mailextract/MailExtractApp.java sends user information outside the appli... Attack Vector
19		Privacy_Violation	/javalibpst/src/main/java/fr/gouv/vitam/tools/javalibpst/PSTContact.java: 1221	details Method toString at line 1221 of /javalibpst/src/main/java/fr/gouv/vitam/tools/javalibpst/PSTContact.java sends user information outside the applic... Attack Vector
20		Unchecked_Input_for_Loop_Condition	/resip/src/main/java/fr/gouv/vitam/tools/resip/frame/XmlEditDialog.java: 528	details Method buttonCanonizeXmlEdit at line 528 of /resip/src/main/java/fr/gouv/vitam/tools/resip/frame/XmlEditDialog.java obtains user input from getTex... Attack Vector
21		Unchecked_Input_for_Loop_Condition	/resip/src/main/java/fr/gouv/vitam/tools/resip/frame/XmlEditDialog.java: 469	details Method buttonClean at line 469 of /resip/src/main/java/fr/gouv/vitam/tools/resip/frame/XmlEditDialog.java obtains user input from getText - the r... Attack Vector
22		Unchecked_Input_for_Loop_Condition	/resip/src/main/java/fr/gouv/vitam/tools/resip/frame/XmlEditDialog.java: 501	details Method buttonSaveXmlEdit at line 501 of /resip/src/main/java/fr/gouv/vitam/tools/resip/frame/XmlEditDialog.java obtains user input from getText -... Attack Vector
23		Unchecked_Input_for_Loop_Condition	/resip/src/main/java/fr/gouv/vitam/tools/resip/frame/XmlEditDialog.java: 501	details Method buttonSaveXmlEdit at line 501 of /resip/src/main/java/fr/gouv/vitam/tools/resip/frame/XmlEditDialog.java obtains user input from getText -... Attack Vector
24		Unchecked_Input_for_Loop_Condition	/resip/src/main/java/fr/gouv/vitam/tools/resip/frame/XmlEditDialog.java: 501	details Method buttonSaveXmlEdit at line 501 of /resip/src/main/java/fr/gouv/vitam/tools/resip/frame/XmlEditDialog.java obtains user input from getText -... Attack Vector
25		Unchecked_Input_for_Loop_Condition	/resip/src/main/java/fr/gouv/vitam/tools/resip/frame/XmlEditDialog.java: 528	details Method buttonCanonizeXmlEdit at line 528 of /resip/src/main/java/fr/gouv/vitam/tools/resip/frame/XmlEditDialog.java obtains user input from getTex... Attack Vector
26		Unchecked_Input_for_Loop_Condition	/resip/src/main/java/fr/gouv/vitam/tools/resip/frame/XmlEditDialog.java: 528	details Method buttonCanonizeXmlEdit at line 528 of /resip/src/main/java/fr/gouv/vitam/tools/resip/frame/XmlEditDialog.java obtains user input from getTex... Attack Vector
27		Unchecked_Input_for_Loop_Condition	/resip/src/main/java/fr/gouv/vitam/tools/resip/sedaobjecteditor/AnyXMLTypeEditor.java: 184	details Method editButton at line 184 of /resip/src/main/java/fr/gouv/vitam/tools/resip/sedaobjecteditor/AnyXMLTypeEditor.java obtains user input from get... Attack Vector
28		Unchecked_Input_for_Loop_Condition	/resip/src/main/java/fr/gouv/vitam/tools/resip/frame/XmlEditDialog.java: 469	details Method buttonClean at line 469 of /resip/src/main/java/fr/gouv/vitam/tools/resip/frame/XmlEditDialog.java obtains user input from getText - the r... Attack Vector
29		Heap_Inspection	/mailextract/src/main/java/fr/gouv/vitam/tools/mailextract/MailExtractApp.java: 134	details Method createOptions at line 134 of /mailextract/src/main/java/fr/gouv/vitam/tools/mailextract/MailExtractApp.java defines password, which is desi... Attack Vector

Fixed Issues (29)

Great job! The following issues were fixed in this Pull Request

Severity	Issue	Source File / Package
	Improper_Restriction_of_Stored_XXE_Ref	/sedalib/src/main/java/fr/gouv/vitam/tools/sedalib/inout/importer/SIPToArchiveTransferImporter.java: 203
	Improper_Restriction_of_Stored_XXE_Ref	/sedalib/src/main/java/fr/gouv/vitam/tools/sedalib/inout/importer/DIPToArchiveDeliveryRequestReplyImporter.java: 206
	Improper_Restriction_of_Stored_XXE_Ref	/sedalib/src/main/java/fr/gouv/vitam/tools/sedalib/inout/importer/SIPToArchiveTransferImporter.java: 203
	Improper_Restriction_of_Stored_XXE_Ref	/sedalib/src/main/java/fr/gouv/vitam/tools/sedalib/inout/importer/DIPToArchiveDeliveryRequestReplyImporter.java: 206
	Improper_Restriction_of_XXE_Ref	/resip/src/main/java/fr/gouv/vitam/tools/resip/frame/XmlEditDialog.java: 490
	Improper_Restriction_of_XXE_Ref	/resip/src/main/java/fr/gouv/vitam/tools/resip/frame/XmlEditDialog.java: 433
	Improper_Restriction_of_XXE_Ref	/resip/src/main/java/fr/gouv/vitam/tools/resip/frame/XmlEditDialog.java: 463
	Privacy_Violation	/javalibpst/src/main/java/fr/gouv/vitam/tools/javalibpst/PSTContact.java: 1145
	Privacy_Violation	/mailextractlib/src/main/java/fr/gouv/vitam/tools/mailextractlib/store/microsoft/MicrosoftStoreMessage.java: 361
	Privacy_Violation	/mailextract/src/main/java/fr/gouv/vitam/tools/mailextract/MailExtractApp.java: 266
	Privacy_Violation	/mailextract/src/main/java/fr/gouv/vitam/tools/mailextract/MailExtractApp.java: 266
	Privacy_Violation	/mailextract/src/main/java/fr/gouv/vitam/tools/mailextract/MailExtractApp.java: 266
	Privacy_Violation	/mailextract/src/main/java/fr/gouv/vitam/tools/mailextract/MailExtractApp.java: 266
	Privacy_Violation	/mailextract/src/main/java/fr/gouv/vitam/tools/mailextract/MailExtractGraphicApp.java: 343
	Privacy_Violation	/mailextract/src/main/java/fr/gouv/vitam/tools/mailextract/MailExtractApp.java: 459
	Privacy_Violation	/mailextractlib/src/main/java/fr/gouv/vitam/tools/mailextractlib/store/microsoft/pst/PstStoreMessage.java: 297
	Privacy_Violation	/javalibpst/src/main/java/fr/gouv/vitam/tools/javalibpst/PSTRecipient.java: 89
	Privacy_Violation	/mailextract/src/main/java/fr/gouv/vitam/tools/mailextract/MailExtractGraphicApp.java: 343
	Privacy_Violation	/mailextractlib/src/main/java/fr/gouv/vitam/tools/mailextractlib/core/StoreExtractor.java: 717
	Unchecked_Input_for_Loop_Condition	/resip/src/main/java/fr/gouv/vitam/tools/resip/frame/XmlEditDialog.java: 433
	Unchecked_Input_for_Loop_Condition	/resip/src/main/java/fr/gouv/vitam/tools/resip/frame/XmlEditDialog.java: 463
	Unchecked_Input_for_Loop_Condition	/resip/src/main/java/fr/gouv/vitam/tools/resip/frame/XmlEditDialog.java: 463
	Unchecked_Input_for_Loop_Condition	/resip/src/main/java/fr/gouv/vitam/tools/resip/frame/XmlEditDialog.java: 463
	Unchecked_Input_for_Loop_Condition	/resip/src/main/java/fr/gouv/vitam/tools/resip/frame/XmlEditDialog.java: 490
	Unchecked_Input_for_Loop_Condition	/resip/src/main/java/fr/gouv/vitam/tools/resip/frame/XmlEditDialog.java: 490
	Unchecked_Input_for_Loop_Condition	/resip/src/main/java/fr/gouv/vitam/tools/resip/frame/XmlEditDialog.java: 490
	Unchecked_Input_for_Loop_Condition	/resip/src/main/java/fr/gouv/vitam/tools/resip/frame/XmlEditDialog.java: 433
	Unchecked_Input_for_Loop_Condition	/resip/src/main/java/fr/gouv/vitam/tools/resip/sedaobjecteditor/AnyXMLTypeEditor.java: 171
	Heap_Inspection	/mailextract/src/main/java/fr/gouv/vitam/tools/mailextract/MailExtractApp.java: 115

---

Use @Checkmarx to interact with Checkmarx PR Assistant.
Examples:
@Checkmarx how are you able to help me?
@Checkmarx rescan this PR