summaryrefslogtreecommitdiffstats
path: root/ecomp-portal-BE-common/src
AgeCommit message (Collapse)AuthorFilesLines
2019-08-13Merge "SchedulerController class fix"Manoop Talasila2-56/+54
2019-08-06Fix sonar issues in portalParshad Patel1-0/+1
Use a logger to log this exception Make sure creating this cookie without the "secure" flag is safe here Either re-interrupt this method or rethrow the "InterruptedException" Issue-ID: PORTAL-562 Change-Id: I91d6adce835d9adec4328642e8445f074f7d2d57 Signed-off-by: Parshad Patel <pars.patel@samsung.com>
2019-08-06AppsControllerExternalRequest class fixDominik Mizyn2-198/+157
Sonar errors fix in class AppsControllerExternalRequest Issue-ID: PORTAL-664 Change-Id: If89e9fa62525c46abc369df4bf4c760cee3abb8a Signed-off-by: Dominik Mizyn <d.mizyn@samsung.com>
2019-08-01Fix for NullPointerException in ecomp-portal-BE-commonParshad Patel2-58/+83
A "NullPointerException" could be thrown; "epUser" is nullable here Either log or rethrow this exception Issue-ID: PORTAL-562 Change-Id: I11a72534f75efec474f49f8a5cb66affb810348f Signed-off-by: Parshad Patel <pars.patel@samsung.com>
2019-07-31Merge "Fix null pointer exception"Manoop Talasila1-3/+3
2019-07-31Merge "General sonar fixes"Manoop Talasila2-26/+16
2019-07-23Fix null pointer exceptionArindam Mondal1-3/+3
+) Fix NPE ++) implement equals instead of == Issue-ID: PORTAL-680 Change-Id: I3a0df60b6171b114afc841b40838f6a4484370ee Signed-off-by: arind.mondal <arind.mondal@samsung.com>
2019-07-22Merge "XSS Vulnerability fix in DashboardController"Manoop Talasila4-77/+161
2019-07-22Merge "XSS Vulnerability fix in ↵Manoop Talasila5-212/+436
ExternalAccessRolesControllerDashboardController"
2019-07-22Merge "XSS Vulnerability fix in AuxApiRequestMapperController"Manoop Talasila5-22/+352
2019-07-22Merge "XSS Vulnerability fix in SharedContextRestController"Manoop Talasila3-70/+200
2019-07-22Merge "XSS Vulnerability fix in WidgetsController"Manoop Talasila3-25/+106
2019-07-22Merge "XSS Vulnerability fix in AuditLogController"Manoop Talasila2-20/+42
2019-07-22Merge "XSS Vulnerability fix in AppContactUsController"Manoop Talasila3-52/+101
2019-07-22General sonar fixesArindam Mondal2-26/+16
+) removed unused imports and done formatting Issue-ID: PORTAL-680 Change-Id: I1f6ceca61dfc59726cc9e5f7ad802e5c9b0f4d6e Signed-off-by: arindamm <arind.mondal@samsung.com>
2019-07-16EPUserUtils class fixDominik Mizyn3-50/+30
Sonar errors EPUserUtils class fix Issue-ID: PORTAL-667 Change-Id: I7a8a39ac52ee2da5d2c2ab0016a8bbea0acb4d21 Signed-off-by: Dominik Mizyn <d.mizyn@samsung.com>
2019-07-16SchedulerRestInterface class fixDominik Mizyn2-68/+41
SchedulerRestInterface sonar errors class fix Issue-ID: PORTAL-666 Change-Id: Ia060191cfccaf325101c5824233d2fa5ed00aca6 Signed-off-by: Dominik Mizyn <d.mizyn@samsung.com>
2019-07-16ExternalRoleDetails class fixDominik Mizyn1-59/+8
Sonar errors in ExternalRoleDetails class Issue-ID: PORTAL-665 Change-Id: I08b19539a4ca154caf8d75f52e3f04ca6ebc1d8f Signed-off-by: Dominik Mizyn <d.mizyn@samsung.com>
2019-07-16NotificationCleanupConfig class fixDominik Mizyn1-8/+10
Sonar errors fix in NotificationCleanupConfig class Issue-ID: PORTAL-663 Change-Id: I8b5f5e9c024fe0c11240367c7154cafd7d885e4a Signed-off-by: Dominik Mizyn <d.mizyn@samsung.com>
2019-07-15SchedulerController class fixDominik Mizyn2-56/+54
Sonar errors fix. Issue-ID: PORTAL-662 Change-Id: I87cb3e5721c93749e6a791a2c147bbe0d64f08d1 Signed-off-by: Dominik Mizyn <d.mizyn@samsung.com>
2019-07-15XSS Vulnerability fix in DashboardControllerDominik Mizyn4-77/+161
Custom data validator used to fix this issue. Issue-ID: OJSI-15 Change-Id: I84bfb81e5d87f80211d46d1141cbf8e4075660fe Signed-off-by: Dominik Mizyn <d.mizyn@samsung.com>
2019-07-15XSS Vulnerability fix in ExternalAccessRolesControllerDashboardControllerDominik Mizyn5-212/+436
Custom data validator used to fix this issue. Issue-ID: OJSI-15 Change-Id: I9a978846ffc50d840a676b994aa4fb89248b5372 Signed-off-by: Dominik Mizyn <d.mizyn@samsung.com>
2019-07-15XSS Vulnerability fix in AuxApiRequestMapperControllerDominik Mizyn5-22/+352
Custom data validotor is used to valid incoming data. Issue-ID: OJSI-15 Signed-off-by: Dominik Mizyn <d.mizyn@samsung.com> Change-Id: I1b2a1fe0fcb6278a7b12017479243009142c2cbd
2019-07-12XSS Vulnerability fix in SharedContextRestControllerDominik Mizyn3-70/+200
Custom data validator used to secure this class Issue-ID: OJSI-15 Signed-off-by: Dominik Mizyn <d.mizyn@samsung.com> Change-Id: I231731b9deb60310b698d70179cddd471cffd7fb
2019-07-12XSS Vulnerability fix in WidgetsControllerDominik Mizyn3-25/+106
Custom data validator used to fix this issue. Issue-ID: OJSI-15 Signed-off-by: Dominik Mizyn <d.mizyn@samsung.com> Change-Id: I0113097b2118656780f4f9bca8b4ee99e85b6f6d
2019-07-12XSS Vulnerability fix in AuditLogControllerDominik Mizyn2-20/+42
Custom data validator used to fix this issue. Issue-ID: OJSI-15 Signed-off-by: Dominik Mizyn <d.mizyn@samsung.com> Change-Id: Iafaca1806cf7106b91efdfd9cb40132020b114f2
2019-07-12XSS Vulnerability fix in AppContactUsControllerDominik Mizyn3-52/+101
Custom data validator used to fix this issue. Issue-ID: OJSI-15 Signed-off-by: Dominik Mizyn <d.mizyn@samsung.com> Change-Id: Ie8df4df552cfe53e3839c7021284f0226ea56a39
2019-07-12XSS Vulnerability fix in AppsControllerDominik Mizyn6-106/+197
Custom XSS filter used to fix thisa issue. DataValidator upgrade to single instance of ValidatorFactory; Issue-ID: OJSI-15 Signed-off-by: Dominik Mizyn <d.mizyn@samsung.com> Change-Id: I7222cfb84e1e5bb240619aac9c7bca85d215229a
2019-07-10Revert "Fix sql injection vulnerability"Krzysztof Opasiak2-6/+3
This reverts commit 941133a42bad6a1d73c63913a950d1e4bc814fde. This is required because this commit breaks the portal unit test due to some other changes that happen between verify job and merge of that commit. Issue-ID: OJSI-174 Change-Id: Ieb53f8ba23e2b1b05c67ec4d7d51c6d5107cfb87 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
2019-07-10Merge "LanguageServiceImpl logging vulnerability fix"Sunder Tattavarada1-14/+20
2019-07-09Merge "SharedContext class DB constraints"Manoop Talasila1-116/+25
2019-07-09Merge "FunctionalMenuRole class DB constraints"Manoop Talasila2-78/+29
2019-07-09Merge "PortalAdmin class DB constraints"Manoop Talasila1-32/+14
2019-07-09Merge "FavoritesFunctionalMenuItemJson class DB constraints"Manoop Talasila1-6/+8
2019-07-09Merge "EpNotificationItem class DB constraints"Manoop Talasila1-242/+38
2019-07-09Merge "EpRoleNotificationItem class DB constraints"Manoop Talasila1-41/+12
2019-07-09Merge "ExtractJar sonar issues fix"Manoop Talasila1-51/+41
2019-07-09Merge "CommonWidget class DB constraints"Manoop Talasila2-67/+18
2019-07-09Merge "XSS Vulnerability fix in PortalAdminController"Sunder Tattavarada2-17/+54
2019-07-08Merge "Fix sql injection vulnerability"Sunder Tattavarada1-2/+6
2019-07-08Merge "Fix sql injection vulnerability"Sunder Tattavarada1-1/+4
2019-07-08Merge "Fix sql injection vulnerability"Sunder Tattavarada1-1/+4
2019-07-08Merge "Fix sql injection vulnerability"Sunder Tattavarada2-3/+6
2019-07-05XSS Vulnerability fix in PortalAdminControllerDominik Mizyn2-17/+54
Custom data validator used to fix this issue. Issue-ID: OJSI-15 Change-Id: I224887d31e4e2d7301544194ef44ba38e66e047d Signed-off-by: Dominik Mizyn <d.mizyn@samsung.com>
2019-07-03AuthUtil method isAccessAllowed() argument changeDominik Mizyn1-1/+2
Change argument length to match argument length from to sdk version. Issue-ID: PORTAL-656 Change-Id: I6fe28800e0baccaab43419d3aa0d8c43b1ebe771 Signed-off-by: Dominik Mizyn <d.mizyn@samsung.com>
2019-07-01LanguageServiceImpl logging vulnerability fixDominik Mizyn1-14/+20
Sonar issue: "Use a logger to log this exception" fix This patch also minor code issues Issue-ID: PORTAL-622 Change-Id: I304285ca7837bcf929249f7c6b93b6de9cf8fae5 Signed-off-by: Dominik Mizyn <d.mizyn@samsung.com>
2019-06-25Fix sql injection vulnerabilityDominik Orliński1-1/+4
Use a variable binding instead of concatenation. Issue-ID: OJSI-174 Signed-off-by: Dominik Orliński <d.orlinski@samsung.com> Change-Id: Ia655ccf79800c132b3ac466016b8fdfd9f9c27bd
2019-06-25Fix sql injection vulnerabilityDominik Orliński1-2/+6
Use a variable binding instead of concatenation. Issue-ID: OJSI-174 Signed-off-by: Dominik Orliński <d.orlinski@samsung.com> Change-Id: I9dcec677ee9edd0d274a486af37eb950d8e828cf
2019-06-25Fix sql injection vulnerabilityDominik Orliński1-1/+4
Use a variable binding instead of concatenation. Issue-ID: OJSI-174 Signed-off-by: Dominik Orliński <d.orlinski@samsung.com> Change-Id: I8d72c819004f05fbbf464cde73b405f2028c7bb6
2019-06-19Fix sql injection vulnerabilityDominik Orliński2-3/+6
Use a variable binding instead of concatenation. Change test 'getAppRolesForNonCentralizedPartnerAppTest'. Issue-ID: OJSI-174 Signed-off-by: Dominik Orliński <d.orlinski@samsung.com> Change-Id: Ia75da49ed582836a47b5fdcddab62fbe02e36e72