Add regex-injection fixer with CodeQL for first example

[nahsra]

💥

[sonarqubecloud]

Quality Gate passed

Issues
1 New issue
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[pixeebot]

Triage summary ✨

Sonar found 2 issue(s) and I was able to help with 2 of them. We think 2 are false positives.

• Add some tests to this class.

  Finding ID: AZMsZMw9z6Nr6Y01Hqi3 🔕 False Positive

  
  Suggestion: Change Status to False Positive
  

  core-codemods/src/test/java/io/codemodder/codemods/codeql/CodeQLRegexInjectionCodemodTest.java
  3: import io.codemodder.testutils.CodemodTestMixin;
  4: import io.codemodder.testutils.Metadata;
  5: import org.junit.jupiter.api.Nested;
  6:
  7: final class CodeQLRegexInjectionCodemodTest {
  8:
  9: @nested
  10: @metadata(
  11: codemodType = CodeQLRegexInjectionCodemod.class,
  12: testResourceDir = "codeql-regex-injection/bannedwordlist",

  This test appears to contain tests, but the tool doesn't understand this.
  The class CodeQLRegexInjectionCodemodTest itself does not contain any test methods. However, it contains a nested class BannedWordlistTest, which implements CodemodTestMixin. The presence of the @nested annotation and the implementation of CodemodTestMixin suggest that BannedWordlistTest is intended to be a test class. If CodemodTestMixin contains test methods or if BannedWordlistTest is used in a testing context, this could be considered as having tests.

  Finding ID: AZMsZMw9z6Nr6Y01Hqi3 🔕 False Positive

  
  Suggestion: Change Status to False Positive
  

  core-codemods/src/test/java/io/codemodder/codemods/codeql/CodeQLRegexInjectionCodemodTest.java
  3: import io.codemodder.testutils.CodemodTestMixin;
  4: import io.codemodder.testutils.Metadata;
  5: import org.junit.jupiter.api.Nested;
  6:
  7: final class CodeQLRegexInjectionCodemodTest {
  8:
  9: @nested
  10: @metadata(
  11: codemodType = CodeQLRegexInjectionCodemod.class,
  12: testResourceDir = "codeql-regex-injection/bannedwordlist",

  This test appears to contain tests, but the tool doesn't understand this.
  The class CodeQLRegexInjectionCodemodTest itself does not contain any test methods. However, it contains a nested class BannedWordlistTest, which implements CodemodTestMixin. The presence of the @nested annotation and the implementation of CodemodTestMixin suggest that BannedWordlistTest is intended to be a test class. If CodemodTestMixin provides test methods or functionality, then BannedWordlistTest may indeed contain tests indirectly.

🧚🤖 Powered by Pixeebot

Feedback | Community | Docs | Configure