-
Notifications
You must be signed in to change notification settings - Fork 10
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fortify Scan Issues #83
Labels
Comments
Fixed with #105 PR. |
@keshav-nangare PR #105 seems to replace #84 which was accidentally merged. However, #84 includes more changes (e.g. 12 changed files). Why is there a difference between those two pull requests? Also, I think it is better if we keep the original commits of @ajanett (git cherry pick can be used) and include those in your new pull request. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Fortify Scan issues are present in this test package. I will submit a pull request with corrections shortly.
Details:
ets-gpkg12-0.7 Release
CWE ID 022 - External input in the construction of a pathname that is not verified.
TestNGController.java line 80
TestRunArguments.java line 42
CDW ID 089 - SQL Injection due to use of external components in the creation of the SQL command that are not verified.
CommonFixture.java line 181, 225, 291
NonLinearTests.java line 160
TableVerifier.java line 82, 184
DataContentsTests.java line 75
ExtensionsTests.java line 177
TiledGriddedCoverageTests.java lines 268, 381, 502, 510
RTreeIndexTests.java, lines 135, 148, 162, 211
SchemaTests.java, lines 190, 326
FeaturesTests.java, lines 1231, 1293, 1476, 1519
The text was updated successfully, but these errors were encountered: