Code

Dwn 51053 semgrep changes 2#1610

Code

Open

jjuaniveson-gresham wants to merge 168 commits intomitreid-connect:1.3.xmitreid-connect/OpenID-Connect-Java-Spring-Server:1.3.xfrom gresham-computing:DWN-51053-semgrep-changes-2gresham-computing/openid-connect-server:DWN-51053-semgrep-changes-2Copy head branch name to clipboard

+819-167

Commits

Commits on Nov 23, 2017

• Add French messages

  

  Patrick Fratczak

  committed
  d13e21d

Commits on Nov 26, 2017

• Merge pull request mitreid-connect#1325 from patfrat/1.3.x

  Show description for 6385fd9
  jricher

  authored
  6385fd9

Commits on May 28, 2018

• Merge remote-tracking branch 'upstream/1.3.x' into 1.3.x

  gkatiyar

  committed
  1cc3b8f

Commits on May 30, 2018

• Upgraded libraries for mitigating known vulnerabilities

  gkatiyar

  committed
  d9d48cb

• Added jenkins file

  gkatiyar

  committed
  67f584f

• Modified Jenkins file

  gkatiyar

  committed
  98021f4

• Modified Jenkins file

  gkatiyar

  committed
  7cab117

• Modified Jenkins file

  gkatiyar

  committed
  2393a4d

• Modified Jenkins file

  gkatiyar

  committed
  65fbca8

• Modified Jenkins file

  gkatiyar

  committed
  6ea19c7

Commits on Sep 26, 2018

• Created internal release for MitreID Connect

  gkatiyar

  committed
  e6b816e

• Jenkinsfile fix for repo address

  gkatiyar

  committed
  6e60beb

• Jenkinsfile and maven build fixes

  gkatiyar

  committed
  34d1425

Commits on Nov 1, 2018

• DWN-26583: Upgraded spring oauth to version 2.1.3 for security

  gkatiyar

  committed
  b13874b

Commits on Nov 13, 2018

• DWN-25303: Bumps a couple versions

  gresham-Carling

  committed
  b7b2c2d

Commits on Nov 14, 2018

• DWN-26566: Added password encoded to the client entity service and changed the Introspection token service to allow parsing of client authorities for api level access

  gkatiyar

  committed
  028972c

Commits on Nov 28, 2018

• DWN-25861: Manually specifies the scope column name

  gresham-Carling

  committed
  0ae12c2

Commits on Dec 4, 2018

• DWN-27040: Changes when the client secret is given to the UI

  gresham-Carling

  committed
  c12cb18

• DWN-27040: Adds the same secret key limiting to client registration

  Show description for 5abebb7
  gresham-Carling

  committed
  5abebb7

Commits on Dec 5, 2018

• DWN-27040: Bit of refactoring, Protected Resources now protected

  gresham-Carling

  committed
  2008404

Commits on Dec 14, 2018

• Merge pull request #2 from gresham-computing/client-secret-security

  Show description for 12f91b1
  gresham-Carling

  authored
  12f91b1

Commits on Mar 6, 2019

• DWN-27799 - update spring-security-oauth2 for CVE-2019-3778

  dmurch-gresham

  committed
  3aa9cb9

Commits on Mar 14, 2019

• Appends our changes to the CHANGELOG

  gresham-Carling

  committed
  a628162

Commits on Mar 19, 2019

• Merge pull request #3 from gresham-computing/spring-oauth-update

  Show description for 976d439
  dmurch-gresham

  authored
  976d439

Commits on Oct 25, 2019

• DWN-30296 : upgrade jackson to 2.10.0

  hsmith-gresham

  committed
  18c7993

• DWN-30463 : update spring security bom

  hsmith-gresham

  committed
  e91a153

Commits on Oct 29, 2019

• DWN-30574 : upgrade nimbus-jose-jwt to 7.9

  hsmith-gresham

  committed
  df84942

Commits on Dec 4, 2019

• No Jira : alter building mechanism to be independent on Jenkins build numbers

  hsmith-gresham

  committed
  a30b999

• Merge pull request #4 from gresham-computing/nexusIqUpgrades

  Show description for d451075
  hsmith-gresham

  authored
  d451075

Commits on Feb 17, 2020

• DWN-31929 : mitigate open id common XSS vulnerability

  hsmith-gresham

  committed
  28e69c3

• DWN-31929 : updated dependencies and made method void

  hsmith-gresham

  committed
  dd92d84

• DWN-31929 : move whitelist to class level

  hsmith-gresham

  committed
  acaa64b

• DWN-31929 : add further XSS attacks to test

  hsmith-gresham

  committed
  2c8c545

Commits on Mar 25, 2020

• DWN-31921 : bump open id connect to next version

  hsmith-gresham

  committed
  7f75f4d

• Merge pull request #5 from gresham-computing/sanitseUserName

  Show description for e135d67
  hsmith-gresham

  authored
  e135d67

Commits on May 26, 2020

• DWN-33305 : upgrade spring security to 4.2.16.RELEASE

  hsmith-gresham

  committed
  5014043

Commits on Jun 5, 2020

• DWN-32967: compile with JDK 252.

  asheppard-gresham

  committed
  acd47e0

• DWN-32967: update changelog.

  asheppard-gresham

  committed
  642760f

Commits on Jun 9, 2020

• DWN-33428 : improve open id connect release process

  hsmith-gresham

  committed
  8721fdd

• DWN-33428 : fix junitPublisher disabled logic in Jenkinsfile

  hsmith-gresham

  committed
  5cef73d

• DWN-33428 : add batch mode to maven commands

  hsmith-gresham

  committed
  727b62e

• DWN-33428 : review comments to tidy Jenkinsfile

  hsmith-gresham

  committed
  7e6ad70

• DWN-33428 : convert indents to tabs in Jenkinsfile

  hsmith-gresham

  committed
  f745449

Commits on Jun 10, 2020

• Merge pull request #7 from gresham-computing/releaseImprovements

  Show description for 57556d9
  hsmith-gresham

  authored
  57556d9

• No Jira : correct junitPublisher typo

  hsmith-gresham

  committed
  8b03274

• Merge remote-tracking branch 'origin/1.3.x' into jdk252

  asheppard-gresham

  committed
  36784e4

Commits on Jun 11, 2020

• Merge pull request #6 from gresham-computing/jdk252

  Show description for 1c3b5d3
  asheppard-gresham

  authored
  1c3b5d3

Commits on Jun 12, 2020

• Merge remote-tracking branch 'origin/1.3.x' into pcimademedoit

  hsmith-gresham

  committed
  79db814

Commits on Jun 16, 2020

• No jira: specify release repo for master non release builds.

  asheppard-gresham

  committed
  fec4e9e

• No jira: bump to 1.3.3.GRESHAM-20.

  asheppard-gresham

  committed
  3d87a18

• No jira: temporarily remove version discovery.

  asheppard-gresham

  committed
  5ca997f

• Revert "No jira: temporarily remove version discovery."

  Show description for 513ff5f
  asheppard-gresham

  committed
  513ff5f

• New Development Version 1.3.3.GRESHAM-21-SNAPSHOT.

  asheppard-gresham

  committed
  86fb637

Commits on Jun 17, 2020

• Merge remote-tracking branch 'origin/1.3.x' into pcimademedoit

  hsmith-gresham

  committed
  90f9e16

Commits on Jul 16, 2020

• Creating Release 1.3.3.GRESHAM-21

  

  Jenkins

  committed
  2588b12

• New Development Version 1.3.3.GRESHAM-22-SNAPSHOT

  

  Jenkins

  committed
  e2e9f72

Commits on Aug 26, 2020

• DWN-33387 : reinstate spring security bom

  hsmith-gresham

  committed
  6726632

Commits on Aug 28, 2020

• DWN-33387 : bump spring to 4.3.26

  hsmith-gresham

  committed
  bb3edf4

• DWN-33950 : hoise commons-codec

  hsmith-gresham

  committed
  8f4930b

Commits on Sep 22, 2020

• Merge pull request #8 from gresham-computing/DWN-33950_securityUpdates

  Show description for 7e0a871
  hsmith-gresham

  authored
  7e0a871

Commits on Sep 25, 2020

• DWN-34576 : upgrade commons-io

  hsmith-gresham

  committed
  c1886ea

Commits on Sep 30, 2020

• Creating Release 1.3.3.GRESHAM-22

  

  Jenkins

  committed
  276e934

• New Development Version 1.3.3.GRESHAM-23-SNAPSHOT

  

  Jenkins

  committed
  aefdd91

Commits on Oct 2, 2020

• DWN-34909: use java8 265.

  asheppard-gresham

  committed
  9150018

Commits on Oct 5, 2020

• Merge remote-tracking branch 'origin/1.3.x' into DWN-34575_commonsIOUpgrade

  hsmith-gresham

  committed
  228022d

Commits on Oct 6, 2020

• DWN-34921_implement_guava_upgrade

  sivaschuck

  committed
  8bfebea

Commits on Oct 9, 2020

• Merge pull request #10 from gresham-computing/DWN-34921_implement_guava_upgrade

  Show description for 379737e
  sivaschuck

  authored
  379737e

Commits on Oct 14, 2020

• Merge pull request #9 from gresham-computing/java8265

  Show description for ce3e3f5
  asheppard-gresham

  authored
  ce3e3f5

Commits on Oct 15, 2020

• Merge remote-tracking branch 'origin/1.3.x' into DWN-34575_commonsIOUpgrade

  hsmith-gresham

  committed
  7b27430

Commits on Oct 20, 2020

• Merge pull request #11 from gresham-computing/DWN-34575_commonsIOUpgrade

  Show description for 5e4ee45
  hsmith-gresham

  authored
  5e4ee45

Commits on Oct 21, 2020

• DWN-35241 : upgrade jUnit to 4.13.1

  hsmith-gresham

  committed
  ebff342

• DWN-35242 : bump httpClient to 4.5.13

  hsmith-gresham

  committed
  62dad15

Commits on Oct 23, 2020

• DWN-34963: update spring-bom to 4.3.29.

  asheppard-gresham

  committed
  b4a12b2

Commits on Oct 26, 2020

• DWN-34963: update spring-security-bom to 4.2.19.

  asheppard-gresham

  committed
  08f32be

• DWN-35283 : bump jackson components to 2.11.3

  hsmith-gresham

  committed
  5b009db

Commits on Nov 2, 2020

• Creating Release 1.3.3.GRESHAM-23

  

  Jenkins

  committed
  1b2fa2b

• New Development Version 1.3.3.GRESHAM-24-SNAPSHOT

  

  Jenkins

  committed
  239bd75

Commits on Nov 6, 2020

• Merge remote-tracking branch 'origin/1.3.x' into DWN-35240_octoberSecurity

  hsmith-gresham

  committed
  269711a

Commits on Nov 10, 2020

• Merge pull request #12 from gresham-computing/DWN-35240_octoberSecurity

  Show description for f3df958
  hsmith-gresham

  authored
  f3df958

Commits on Dec 2, 2020

• Creating Release 1.3.3.GRESHAM-24

  

  Jenkins

  committed
  5c9e81f

• Revert "Creating Release 1.3.3.GRESHAM-24"

  Show description for 29ddcd5
  hsmith-gresham

  committed
  29ddcd5

• Creating Release 1.3.3.GRESHAM-24

  

  Jenkins

  committed
  eeaacb2

• No jira: temporarily remove version discovery.

  asheppard-gresham

  committed
  c6345bc

Commits on Dec 3, 2020

• Revert "No jira: temporarily remove version discovery."

  Show description for 4276fc6
  asheppard-gresham

  committed
  4276fc6

• New Development Version 1.3.3.GRESHAM-25-SNAPSHOT

  asheppard-gresham

  committed
  af5c763

• DWN-35825: remove jacoco.

  asheppard-gresham

  committed
  646601d

Commits on Dec 8, 2020

• Merge pull request #13 from gresham-computing/DWN-35825_removeJacoco

  Show description for a4afa9f
  asheppard-gresham

  authored
  a4afa9f

Commits on Feb 12, 2021

• DWN-36607 Upgrade Corretto version in Jenkinsfiles

  ahinorapl

  committed
  6f066d1

Commits on Feb 18, 2021

• Merge pull request #14 from gresham-computing/DWN-36507_Corretto275

  Show description for 7f5432e
  hsmith-gresham

  authored
  7f5432e

Commits on Feb 26, 2021

• Creating Release 1.3.3.GRESHAM-25

  

  Jenkins

  committed
  182f02e

• New Development Version 1.3.3.GRESHAM-26-SNAPSHOT

  

  Jenkins

  committed
  9d99c51

Commits on Mar 25, 2021

• DWN-37025 : mitigate vulnerability in client logo and unauthorised endpoints

  hsmith-gresham

  committed
  dd9eb26

Commits on Apr 1, 2021

• DWN-37110: CCI migration openid-connect-server (#15)

  Show description for f443981
  sivaschuck

  authored
  f443981

• DWN-37110: attempting to fix upload

  sivaschuck

  committed
  674a822

Commits on Apr 9, 2021

• DWN-37183 : apply mitigation from PR mitreid-connect#1548 on Open Id base repo

  hsmith-gresham

  committed
  7bc12d5

Commits on Apr 12, 2021

• Merge remote-tracking branch 'origin/DWN-37025_openIdServer' into 1.3.x

  asheppard-gresham

  committed
  689f38e

Commits on Apr 16, 2021

• Merge pull request #16 from gresham-computing/DWN-37183_openIdAgain

  Show description for ea7d75c
  hsmith-gresham

  authored
  ea7d75c

Commits on May 4, 2021

• New openid-connect-server release: 1.3.3.GRESHAM-26

  

  CircleCI

  committed
  dfbe777

• Next openid-connect-server snapshot: 1.3.3.GRESHAM-27-SNAPSHOT

  

  CircleCI

  committed
  2053b0f

Commits on May 20, 2021

• Updated security groups

  sivaschuck

  authored
  922d8da

Commits on Aug 26, 2021

• DWN-38621 : bump JSoup to 1.14.2

  hsmith-gresham

  committed
  fc6c3e9

Commits on Sep 2, 2021

• Updated circle to new Corretto and removed jenkinsfile

  fmayo-gresham

  committed
  fe938f6

Commits on Sep 10, 2021

• Merge pull request #18 from gresham-computing/DWN-38621_jsoup

  Show description for 536c845
  hsmith-gresham

  authored
  536c845

Commits on Sep 29, 2021

• Updated json-smart to 2.4.7

  fmayo-gresham

  committed
  d367d43

Commits on Oct 6, 2021

• New openid-connect-server release: 1.3.3.GRESHAM-27

  

  CircleCI

  committed
  cec7fbd

• Next openid-connect-server snapshot: 1.3.3.GRESHAM-28-SNAPSHOT

  

  CircleCI

  committed
  6891d10

Commits on Oct 7, 2021

• Merge pull request #17 from gresham-computing/DWN-38686_UpdateCorretto302

  Show description for c53570b
  fmayo-gresham

  authored
  c53570b

Commits on Oct 18, 2021

• DWN-37825: Upgrade bouncycastle to 1.68

  matt-gresham

  committed
  d1b249d

Commits on Oct 19, 2021

• Merge pull request #19 from gresham-computing/DWN-37827-upgrade-json-smart

  Show description for df3433b
  fmayo-gresham

  authored
  df3433b

Commits on Nov 2, 2021

• Merge branch '1.3.x' into DWN-37825-upgrade-bouncycastle

  matt-gresham

  committed
  da2aa30

Commits on Nov 19, 2021

• Merge pull request #20 from gresham-computing/DWN-37825-upgrade-bouncycastle

  Show description for b5ff33f
  matt-gresham

  authored
  b5ff33f

Commits on Dec 10, 2021

• DWN-39058 : upgrade gson to 2.8.9

  hsmith-gresham

  committed
  aabbe2d

Commits on Dec 23, 2021

• Merge pull request #21 from gresham-computing/DWN-39058_gson

  Show description for 623557e
  hsmith-gresham

  authored
  623557e

Commits on Jan 17, 2022

• DWN-39567 : upgrade jackson components to 2.13.1

  hsmith-gresham

  committed
  2aad651

Commits on Feb 1, 2022

• Merge pull request #22 from gresham-computing/DWN-39567_jackson

  Show description for 20ad418
  hsmith-gresham

  authored
  20ad418

Commits on Feb 14, 2022

• DWN-39716 : bump postgres driver to latest version

  hsmith-gresham

  committed
  61865e5

Commits on Feb 21, 2022

• Merge pull request #23 from gresham-computing/DWN-39716_postgres

  Show description for 6798b90
  hsmith-gresham

  authored
  6798b90

Commits on Feb 25, 2022

• feature/DWN-39743 - Upgrade Corretto version to 8.322.06.2

  jasontse-greshamtech

  committed
  6fd0548

Commits on Mar 3, 2022

• Merge pull request #25 from gresham-computing/DWN-39743_corretto_circleci

  Show description for 9961a80
  jasontse-greshamtech

  authored
  9961a80

Commits on Apr 28, 2022

• DWN-40025: corretto 8 332.

  asheppard-gresham

  committed
  877d955

Commits on Apr 29, 2022

• Bump bouncy castle

  fmayo-gresham

  committed
  025225e

Commits on May 5, 2022

• Merge pull request #26 from gresham-computing/corretto8.332

  Show description for d494901
  asheppard-gresham

  authored
  d494901

Commits on May 9, 2022

• DWN-39872: updated jackson-databind version to fix vulnerability

  jjuaniveson-gresham

  committed
  6b31059

Commits on May 17, 2022

• DWN-39872 : upgrade jackson components to 2.13.3

  hsmith-gresham

  committed
  22a2cb8

Commits on May 19, 2022

• Merge remote-tracking branch 'origin/DWN-39974_bouncy-castle' into 1.3.x

  asheppard-gresham

  committed
  a4b482c

Commits on May 20, 2022

• Merge pull request #27 from gresham-computing/DWN-39872_Jackson_Databind

  Show description for a963114
  hsmith-gresham

  authored
  a963114

Commits on Sep 2, 2022

• No JIRA: prepare for 2208 release

  hsmith-gresham

  committed
  d4f84ed

Commits on Sep 6, 2022

• Merge pull request #28 from gresham-computing/2208

  Show description for 517cdcb
  hsmith-gresham

  authored
  517cdcb

• New openid-connect-server release: 1.3.3.GRESHAM-28

  

  CircleCI

  committed
  f2491ce

• Next openid-connect-server snapshot: 1.3.3.GRESHAM-29-SNAPSHOT

  

  CircleCI

  committed
  19eb4bf

Commits on Sep 13, 2022

• DWN-41034 : upgrade JSoup to 1.15.3

  hsmith-gresham

  committed
  6d102fb

Commits on Sep 15, 2022

• DWN-41040 corretto 8u342 (#29)

  Show description for f647a49
  lrundellgresham

  authored
  f647a49

Commits on Sep 26, 2022

• Merge remote-tracking branch 'origin/1.3.x' into DWN-41034_jsoup

  hsmith-gresham

  committed
  7aa191b

Commits on Sep 27, 2022

• Merge pull request #30 from gresham-computing/DWN-41034_jsoup

  Show description for 8ad0c43
  hsmith-gresham

  authored
  8ad0c43

Commits on Jan 3, 2023

• DWN-39926 : validate whitelist scopes are alphabet characters

  hsmith-gresham

  committed
  b6f361b

Commits on Jan 4, 2023

• DWN-39926 : amend exception name in log messages

  hsmith-gresham

  committed
  0bea906

• DWN-39926 : use put rather than addAttribute for updating whitelists

  hsmith-gresham

  committed
  32240a5

Commits on Jan 18, 2023

• DWN-39926 : validate create and update scope directly

  hsmith-gresham

  committed
  9325917

Commits on Jan 23, 2023

• DWN-39926 : use patterns to avoid multiple compilation

  hsmith-gresham

  committed
  42b6aa5

Commits on Jan 26, 2023

• DWN-39926 : validate scopes on manage client page

  hsmith-gresham

  committed
  9119ddd

• DWN-39926 : pass whole exception not just the message

  hsmith-gresham

  committed
  46b0312

Commits on Feb 1, 2023

• Merge pull request #31 from gresham-computing/DWN-39926_inputValidation

  Show description for d9d1df3
  hsmith-gresham

  authored
  d9d1df3

Commits on Apr 28, 2023

• DWN-42625 : introduce Gresham Orb and update build executor image

  hsmith-gresham

  committed
  c51ffb4

• Revert "DWN-42625 : introduce Gresham Orb and update build executor image"

  Show description for 40e6740
  hsmith-gresham

  committed
  40e6740

• DWN-42625 : introduce Gresham Orb and update build executor image

  hsmith-gresham

  committed
  15c310d

Commits on May 2, 2023

• Merge pull request #32 from gresham-computing/orbUpgrade

  Show description for 0eb7a45
  hsmith-gresham

  authored
  0eb7a45

Commits on Sep 13, 2023

• DWN-42070: bumped jackson-databind version

  jjuaniveson-gresham

  committed
  88856da

Commits on Sep 14, 2023

• DWN-42070: changelog updated

  jjuaniveson-gresham

  committed
  8fd42f7

• DWN-42070: core version

  jjuaniveson-gresham

  committed
  10647b3

Commits on Sep 15, 2023

• DWN-42070: update core version

  jjuaniveson-gresham

  committed
  79638b8

• DWN-42070: update core version

  jjuaniveson-gresham

  committed
  4b82762

• Update corretto version (#33)

  wgoddard-gresham

  authored
  898a352

Commits on Sep 18, 2023

• DWN-42070: update core version

  jjuaniveson-gresham

  committed
  d65db96

Commits on Sep 19, 2023

• Merge branch '1.3.x' into DWN-42070-Jackson-databind

  jjuaniveson-gresham

  authored
  e83bf64

Commits on Sep 26, 2023

• Merge pull request #35 from gresham-computing/DWN-42070-Jackson-databind

  Show description for 18cf5c7
  jjuaniveson-gresham

  authored
  18cf5c7

Commits on Oct 3, 2023

• DWN-42084: bumped jackson versions to latest + Changelog

  jjuaniveson-gresham

  committed
  4cc50cf

• DWN-42084: Changelog

  jjuaniveson-gresham

  committed
  8cb7cef

Commits on Oct 5, 2023

• DWN-45433: update bouncy castle to 1.76. (#34)

  asheppard-gresham

  authored
  b0bea3d

• DWN-42084: Changelog fix resolving Harry's comment

  jjuaniveson-gresham

  committed
  e9cf078

Commits on Oct 6, 2023

• Merge pull request #36 from gresham-computing/DWN-42084-Jackson-Bump

  Show description for 7e400bf
  jjuaniveson-gresham

  authored
  7e400bf

Commits on Oct 24, 2023

• Update json-smart to 2.4.11 (#37)

  wgoddard-gresham

  authored
  0456b59

Commits on Nov 1, 2023

• New openid-connect-server release: 1.3.3.GRESHAM-29

  

  CircleCI

  committed
  258e47e

• Next openid-connect-server snapshot: 1.3.3.GRESHAM-30-SNAPSHOT

  

  CircleCI

  committed
  fae4cc4

Commits on Mar 11, 2024

• DWN-51053: Added semgrep to new config.yml

  jjuaniveson-gresham

  committed
  19ceb20

• DWN-51053: Added semgrep parameter

  jjuaniveson-gresham

  committed
  955bb66

• DWN-51053: Added semgrep parameter

  jjuaniveson-gresham

  committed
  85dc002

• DWN-51053: removed build and test on semgrep run

  jjuaniveson-gresham

  committed
  ad302c6

• DWN-51053: point schedule scan to default

  jjuaniveson-gresham

  committed
  bf5b229