Test of PR Annotation via Fortify GitHub Actions #28
Conversation
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
|
|
||
| String retContent = "Backdoor search using: " + keywords; | ||
|
|
||
| return ResponseEntity.ok().body(retContent); |
Check warning
Code scanning / Fortify on Demand
Cross-Site Scripting: Reflected Warning
|
|
||
| String retContent = "Product search using: " + keywords; | ||
|
|
||
| return ResponseEntity.ok().body(retContent); |
Check warning
Code scanning / Fortify on Demand
Cross-Site Scripting: Reflected Warning
| @@ -63,7 +63,7 @@ | |||
| default-encoding: UTF-8 | |||
| host: smtp.sendgrid.net | |||
| username: apikey | |||
| password: # Your API Password | |||
| password: password | |||
Check warning
Code scanning / Fortify on Demand
Password Management: Hardcoded Password Warning
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
There was a problem hiding this comment.
Fortify vulnerability summary
Any issues listed below are based on comparing the latest scan results against the previous scan results in FoD release IWA-PharmacyDirect [KAL] - 28/merge. This is for informational purposes only and, depending on workflow, may not be an accurate representation of what issues will be introduced into or removed from the target branch when merging this PR.
New Issues
- New (Static) - Cross-Site Scripting: Reflected:
src/main/java/com/microfocus/example/web/controllers/ProductController.java:106 - New (Static) - Cross-Site Scripting: Reflected:
src/main/java/com/microfocus/example/web/controllers/DefaultController.java:280 - New (Static) - Password Management: Hardcoded Password:
src/main/resources/application.yml:68
Removed Issues
- No removed issues were detected
No description provided.