Fix SonarCloud Blocker/Hight/Maintainability issues by geokar01 · Pull Request #2 · vulnerable-apps/VulnerableApp

geokar01 · 2025-12-03T11:48:29Z

Διόρθωσα τα ζητήματα που εντόπισε το SonarCloud:

Command injection: χρήση whitelist + ProcessBuilder
SQL injection: PreparedStatement
Open redirect: whitelist/host validation
Αφαίρεση ιδιωτικού κλειδιού (private_key.pem) — πρέπει να ανακληθεί/αντικατασταθεί
Accessibility: headings & alt
Refactor: constants, utils
Unit test fix: assert order

fix(security):prevent open redirect by using whitelist and host validation

use preparedStatament to prevent sql injection in errorBasedSQLinjectionVulnerability

add accesible heading and alt attributes in index.html

make early return conditional in JWTVulerability

geokar01 added 7 commits December 3, 2025 13:03

Remove private key

c0799f3

Update CommandInjection.java

d859eef

Update Http3xxStatusCodeBasedInjection.java

495a031

fix(security):prevent open redirect by using whitelist and host validation

Update ErrorBasedSQLInjectionVulnerability.java

0777343

use preparedStatament to prevent sql injection in errorBasedSQLinjectionVulnerability

chore: add keys/ to.gitignore

f581a1f

Update JWTVulnerability.java

6f252a1

add accesible heading and alt attributes in index.html

Update JWTVulnerability.java

d9f75bd

make early return conditional in JWTVulerability

Provide feedback