wcm.ioSpotBugs Bug Detector Report
The following document contains the results of SpotBugs
SpotBugs Version is 4.8.5
Threshold is medium
Effort is default
Summary
| Classes | Bugs | Errors | Missing Classes |
|---|---|---|---|
| 178 | 3 | 0 | 8 |
Files
| Class | Bugs |
|---|---|
| io.wcm.handler.media.impl.ipeconfig.PathParser | 2 |
| io.wcm.handler.mediasource.ngdm.impl.metadata.NextGenDynamicMediaMetadataServiceImpl | 1 |
io.wcm.handler.media.impl.ipeconfig.PathParser
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| The regular expression "^.*/plugins/crop(/aspectRatios(/([^/]+))?)?$" is vulnerable to a denial of service attack (ReDOS) | SECURITY | REDOS | 42 | Medium |
| The regular expression "^/wcmio:mediaHandler/ipeConfig((/[^/]+)+)/wcmio:mediaFormat((/[^/]+)+)/wcmio:config(/.*)?$" is vulnerable to a denial of service attack (ReDOS) | SECURITY | REDOS | 37 | Medium |
io.wcm.handler.mediasource.ngdm.impl.metadata.NextGenDynamicMediaMetadataServiceImpl
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Concatenating user-controlled input into a URL | SECURITY | HTTP_PARAMETER_POLLUTION | 173 | Medium |