Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Minor JNLP parsing improving, mostly in testing #375

Merged
merged 2 commits into from
Apr 20, 2020

Conversation

jeffret-b
Copy link
Contributor

This was improved during findsecbugs processing. Now that I've dug into it a little bit I'm adding some minor improvements. The findsecbugs documentation suggests two feature settings to resolve the issue. They both yield essentially the same result. This one is a little cleaner and more thorough.

Mostly, this change involves adding several tests to demonstrate the processing behavior. These aren't essential but they are good documentation.

Don't process meaningless arguments.
A few simple tests for XXE, etc., during jnlp processing.
The result is essentially the same, but this form is a little clearer and more thorough.
@jeffret-b jeffret-b requested a review from jvz April 7, 2020 17:27
@jeffret-b jeffret-b added the chore For changelog: A maintenance chore with no functional changes label Apr 7, 2020
@jeffret-b jeffret-b merged commit 70eb743 into jenkinsci:master Apr 20, 2020
@jeffret-b jeffret-b deleted the jnlpParseTest branch April 20, 2020 16:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
chore For changelog: A maintenance chore with no functional changes ready-to-merge
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants