mirror of
https://github.com/elicpeter/nyx.git
synced 2026-06-09 19:45:13 +02:00
1532 lines
54 KiB
JSON
1532 lines
54 KiB
JSON
{
|
|
"_doc": "Phase 17 cross-lang recall-validation baseline for openmrs (Java/Hibernate). Re-capture by running scripts/validate_recall.sh --lang java openmrs <clone_path> --capture. Heavy JPA-Criteria-API consumer — see project_realrepo_openmrs.md for context. 2026-05-09 session 0011: 94 vendored-asset findings removed (jquery / jquery-ui / jsTree / dataTables minified bundles under WEB-INF/.../scripts/) after engine-level skip in is_vendored_asset_path; the engine no longer parses .min.js / vendor/ / bower_components/ web assets.",
|
|
"target": "openmrs",
|
|
"lang": "java",
|
|
"clone_url": "https://github.com/openmrs/openmrs-core",
|
|
"exercises_recall_items": [],
|
|
"captured_against": "real-scan @ f9c76db207c37f2c728ca3b601ae720b654ab401",
|
|
"captured_on": "2026-05-10",
|
|
"pinned_commit": "f9c76db207c37f2c728ca3b601ae720b654ab401",
|
|
"findings": [
|
|
{
|
|
"rule_id": "taint-unsanitised-flow",
|
|
"path_suffix": "web/src/main/java/org/openmrs/web/filter/StartupFilter.java",
|
|
"line": 169,
|
|
"severity": "High",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "taint-unsanitised-flow",
|
|
"path_suffix": "web/src/main/java/org/openmrs/web/filter/StartupFilter.java",
|
|
"line": 311,
|
|
"severity": "High",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "taint-unsanitised-flow",
|
|
"path_suffix": "web/src/main/java/org/openmrs/web/filter/initialization/TestInstallUtil.java",
|
|
"line": 252,
|
|
"severity": "High",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "taint-xxe",
|
|
"path_suffix": "api/src/main/java/org/openmrs/module/ModuleFileParser.java",
|
|
"line": 248,
|
|
"severity": "High",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-use-after-close",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/AddConceptMapTypesChangeset.java",
|
|
"line": 201,
|
|
"severity": "High",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-use-after-close",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/BooleanConceptChangeSet.java",
|
|
"line": 283,
|
|
"severity": "High",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-use-after-close",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/ConceptValidatorChangeSet.java",
|
|
"line": 736,
|
|
"severity": "High",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-use-after-close",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/GenerateUuid.java",
|
|
"line": 114,
|
|
"severity": "High",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-use-after-close",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/MigrateConceptReferenceTermChangeSet.java",
|
|
"line": 69,
|
|
"severity": "High",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-use-after-close",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/MigrateConceptReferenceTermChangeSet.java",
|
|
"line": 83,
|
|
"severity": "High",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-use-after-close",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/MigrateConceptReferenceTermChangeSet.java",
|
|
"line": 103,
|
|
"severity": "High",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-use-after-close",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/MigrateConceptReferenceTermChangeSet.java",
|
|
"line": 120,
|
|
"severity": "High",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-use-after-close",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/MigrateConceptReferenceTermChangeSet.java",
|
|
"line": 136,
|
|
"severity": "High",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-use-after-close",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/MigrateConceptReferenceTermChangeSet.java",
|
|
"line": 155,
|
|
"severity": "High",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "taint-unsanitised-flow",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/OpenmrsUtil.java",
|
|
"line": 1955,
|
|
"severity": "High",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.cmdi.runtime_exec",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/SourceMySqldiffFile.java",
|
|
"line": 210,
|
|
"severity": "High",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.cmdi.runtime_exec",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/SourceMySqldiffFile.java",
|
|
"line": 211,
|
|
"severity": "High",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.cmdi.runtime_exec",
|
|
"path_suffix": "web/src/main/java/org/openmrs/web/filter/initialization/TestInstallUtil.java",
|
|
"line": 83,
|
|
"severity": "High",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "taint-prototype-pollution",
|
|
"path_suffix": "webapp/src/main/webapp/WEB-INF/view/scripts/jquery-ui/js/jquery-ui-timepicker-addon.js",
|
|
"line": 141,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "taint-prototype-pollution",
|
|
"path_suffix": "webapp/src/main/webapp/WEB-INF/view/scripts/jquery-ui/js/jquery-ui-timepicker-addon.js",
|
|
"line": 88,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "taint-unsanitised-flow",
|
|
"path_suffix": "webapp/src/main/webapp/WEB-INF/view/scripts/jquery-ui/js/jquery-ui-timepicker-addon.js",
|
|
"line": 139,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "taint-unsanitised-flow",
|
|
"path_suffix": "api/src/test/java/org/openmrs/test/TestUtil.java",
|
|
"line": 76,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "taint-prototype-pollution",
|
|
"path_suffix": "webapp/src/main/webapp/WEB-INF/view/scripts/jquery-ui/js/jquery-ui-timepicker-addon.js",
|
|
"line": 145,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-double-close",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/GenerateUuid.java",
|
|
"line": 115,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-double-close",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/GenerateUuid.java",
|
|
"line": 122,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-double-close",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/GenerateUuid.java",
|
|
"line": 175,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-double-close",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/MigrateConceptReferenceTermChangeSet.java",
|
|
"line": 76,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-double-close",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/MigrateConceptReferenceTermChangeSet.java",
|
|
"line": 84,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-double-close",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/MigrateConceptReferenceTermChangeSet.java",
|
|
"line": 164,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "taint-prototype-pollution",
|
|
"path_suffix": "webapp/src/main/webapp/WEB-INF/view/scripts/jquery-ui/js/jquery-ui-timepicker-addon.js",
|
|
"line": 91,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "taint-unsanitised-flow",
|
|
"path_suffix": "webapp/src/main/webapp/WEB-INF/csrfguard.js",
|
|
"line": 426,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "taint-unsanitised-flow",
|
|
"path_suffix": "webapp/src/main/webapp/WEB-INF/csrfguard.js",
|
|
"line": 502,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "taint-unsanitised-flow",
|
|
"path_suffix": "webapp/src/main/webapp/WEB-INF/csrfguard.js",
|
|
"line": 506,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "taint-unsanitised-flow",
|
|
"path_suffix": "webapp/src/main/webapp/WEB-INF/csrfguard.js",
|
|
"line": 507,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "taint-unsanitised-flow",
|
|
"path_suffix": "webapp/src/main/webapp/WEB-INF/csrfguard.js",
|
|
"line": 426,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/hl7/impl/HL7ServiceImpl.java",
|
|
"line": 1133,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/module/ModuleUtil.java",
|
|
"line": 110,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/module/ModuleUtil.java",
|
|
"line": 680,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/module/ModuleUtil.java",
|
|
"line": 1259,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/scheduler/tasks/CheckInternetConnectivityTask.java",
|
|
"line": 44,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUpdater.java",
|
|
"line": 288,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUpdater.java",
|
|
"line": 772,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
|
|
"line": 170,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/HttpClient.java",
|
|
"line": 53,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/OpenmrsUtil.java",
|
|
"line": 1646,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/UpgradeUtil.java",
|
|
"line": 113,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/UpgradeUtil.java",
|
|
"line": 138,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/BooleanConceptChangeSet.java",
|
|
"line": 71,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/CheckDrugOrderUnitAndFrequencyTextNotMappedToConcepts.java",
|
|
"line": 35,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/ConceptValidatorChangeSet.java",
|
|
"line": 78,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/ConceptValidatorChangeSet.java",
|
|
"line": 444,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/ConceptValidatorChangeSet.java",
|
|
"line": 505,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/ConceptValidatorChangeSet.java",
|
|
"line": 524,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/ConceptValidatorChangeSet.java",
|
|
"line": 579,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/CreateCodedOrderFrequencyForDrugOrderFrequencyChangeset.java",
|
|
"line": 36,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/CreateDiscontinueOrders.java",
|
|
"line": 36,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/CreateDiscontinueOrders.java",
|
|
"line": 118,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/DisableTriggersChangeSet.java",
|
|
"line": 33,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/DuplicateEncounterRoleNameChangeSet.java",
|
|
"line": 75,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/DuplicateEncounterRoleNameChangeSet.java",
|
|
"line": 121,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/DuplicateEncounterTypeNameChangeSet.java",
|
|
"line": 74,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/DuplicateEncounterTypeNameChangeSet.java",
|
|
"line": 120,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/DuplicateLocationAttributeTypeNameChangeSet.java",
|
|
"line": 75,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/DuplicateLocationAttributeTypeNameChangeSet.java",
|
|
"line": 114,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/EnableTriggersChangeSet.java",
|
|
"line": 33,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/EncryptSecretAnswersChangeSet.java",
|
|
"line": 42,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/EncryptSecretAnswersChangeSet.java",
|
|
"line": 48,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/GenerateUuid.java",
|
|
"line": 100,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/GenerateUuid.java",
|
|
"line": 150,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/MigrateAllergiesChangeSet.java",
|
|
"line": 63,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/MigrateAllergiesChangeSet.java",
|
|
"line": 161,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/MigrateConceptReferenceTermChangeSet.java",
|
|
"line": 51,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/MigrateDrugOrderFrequencyToCodedOrderFrequencyChangeset.java",
|
|
"line": 34,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/MigrateDrugOrderUnitsToCodedDoseUnitsChangeset.java",
|
|
"line": 36,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/MoveDeletedHL7sChangeSet.java",
|
|
"line": 38,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/MoveDeletedHL7sChangeSet.java",
|
|
"line": 60,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/SourceMySqldiffFile.java",
|
|
"line": 89,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/UpdateCohortMemberIdsChangeset.java",
|
|
"line": 41,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/UpdateCohortMemberIdsChangeset.java",
|
|
"line": 47,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/UpdateLayoutAddressFormatChangeSet.java",
|
|
"line": 41,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/UpdateLayoutAddressFormatChangeSet.java",
|
|
"line": 47,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "web/src/main/java/org/openmrs/module/web/ModuleResourcesServlet.java",
|
|
"line": 68,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "web/src/main/java/org/openmrs/web/filter/StartupFilter.java",
|
|
"line": 169,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "web/src/main/java/org/openmrs/web/filter/StartupFilter.java",
|
|
"line": 311,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "web/src/main/java/org/openmrs/web/filter/initialization/DatabaseDetective.java",
|
|
"line": 48,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "web/src/main/java/org/openmrs/web/filter/initialization/TestInstallUtil.java",
|
|
"line": 143,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "web/src/main/java/org/openmrs/web/filter/initialization/TestInstallUtil.java",
|
|
"line": 226,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "web/src/main/java/org/openmrs/web/filter/update/UpdateFilter.java",
|
|
"line": 439,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "web/src/main/java/org/openmrs/web/filter/util/FilterUtil.java",
|
|
"line": 134,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "web/src/main/java/org/openmrs/web/filter/util/FilterUtil.java",
|
|
"line": 244,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-unguarded-sink",
|
|
"path_suffix": "api/src/test/java/org/openmrs/test/TestUtil.java",
|
|
"line": 86,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-unguarded-sink",
|
|
"path_suffix": "api/src/test/java/org/openmrs/test/TestUtil.java",
|
|
"line": 94,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/module/ModuleUtil.java",
|
|
"line": 736,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUpdater.java",
|
|
"line": 491,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/HttpClient.java",
|
|
"line": 78,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/HttpUrl.java",
|
|
"line": 36,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/OpenmrsUtil.java",
|
|
"line": 914,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/UpgradeUtil.java",
|
|
"line": 127,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/BooleanConceptChangeSet.java",
|
|
"line": 146,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/BooleanConceptChangeSet.java",
|
|
"line": 159,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/BooleanConceptChangeSet.java",
|
|
"line": 167,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/BooleanConceptChangeSet.java",
|
|
"line": 210,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/DisableTriggersChangeSet.java",
|
|
"line": 42,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/EnableTriggersChangeSet.java",
|
|
"line": 42,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-resource-leak",
|
|
"path_suffix": "web/src/main/java/org/openmrs/web/filter/initialization/InitializationFilter.java",
|
|
"line": 1976,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-resource-leak",
|
|
"path_suffix": "web/src/main/java/org/openmrs/web/filter/initialization/TestInstallUtil.java",
|
|
"line": 270,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-resource-leak",
|
|
"path_suffix": "web/src/main/java/org/openmrs/web/filter/update/UpdateFilter.java",
|
|
"line": 372,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-resource-leak",
|
|
"path_suffix": "web/src/main/java/org/openmrs/web/filter/util/FilterUtil.java",
|
|
"line": 200,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-unguarded-sink",
|
|
"path_suffix": "api/src/main/java/org/openmrs/api/db/hibernate/DbSession.java",
|
|
"line": 112,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-unguarded-sink",
|
|
"path_suffix": "api/src/main/java/org/openmrs/api/db/hibernate/DbSession.java",
|
|
"line": 122,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-unguarded-sink",
|
|
"path_suffix": "api/src/main/java/org/openmrs/api/db/hibernate/DbSession.java",
|
|
"line": 176,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-unguarded-sink",
|
|
"path_suffix": "api/src/main/java/org/openmrs/api/db/hibernate/HibernateOrderDAO.java",
|
|
"line": 390,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-unguarded-sink",
|
|
"path_suffix": "api/src/main/java/org/openmrs/api/db/hibernate/HibernatePatientDAO.java",
|
|
"line": 966,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-unguarded-sink",
|
|
"path_suffix": "api/src/main/java/org/openmrs/api/db/hibernate/type/StringEnumType.java",
|
|
"line": 49,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-unguarded-sink",
|
|
"path_suffix": "api/src/main/java/org/openmrs/api/impl/PatientServiceImpl.java",
|
|
"line": 1238,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-unguarded-sink",
|
|
"path_suffix": "api/src/main/java/org/openmrs/module/ModuleFileParser.java",
|
|
"line": 587,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-unguarded-sink",
|
|
"path_suffix": "api/src/main/java/org/openmrs/serialization/SimpleXStreamSerializer.java",
|
|
"line": 104,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-unguarded-sink",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUpdater.java",
|
|
"line": 490,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-unguarded-sink",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
|
|
"line": 86,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-unguarded-sink",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
|
|
"line": 89,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-unguarded-sink",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
|
|
"line": 92,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-unguarded-sink",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
|
|
"line": 95,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-unguarded-sink",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
|
|
"line": 98,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-unguarded-sink",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
|
|
"line": 101,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-unguarded-sink",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
|
|
"line": 104,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-unguarded-sink",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
|
|
"line": 107,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-unguarded-sink",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/AddConceptMapTypesChangeset.java",
|
|
"line": 198,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-unguarded-sink",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/BooleanConceptChangeSet.java",
|
|
"line": 279,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-unguarded-sink",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/ConceptValidatorChangeSet.java",
|
|
"line": 505,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-unguarded-sink",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/ConceptValidatorChangeSet.java",
|
|
"line": 524,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-unguarded-sink",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/ConceptValidatorChangeSet.java",
|
|
"line": 733,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-unguarded-sink",
|
|
"path_suffix": "web/src/main/java/org/openmrs/web/filter/initialization/InitializationFilter.java",
|
|
"line": 1218,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-unguarded-sink",
|
|
"path_suffix": "web/src/main/java/org/openmrs/web/filter/initialization/TestInstallUtil.java",
|
|
"line": 83,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "taint-data-exfiltration",
|
|
"path_suffix": "webapp/src/main/webapp/WEB-INF/csrfguard.js",
|
|
"line": 111,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.cmdi.runtime_exec",
|
|
"path_suffix": "api/src/test/java/org/openmrs/test/MigrateDataSet.java",
|
|
"line": 182,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.cmdi.runtime_exec",
|
|
"path_suffix": "api/src/test/java/org/openmrs/test/MigrateDataSet.java",
|
|
"line": 182,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.deser.readobject",
|
|
"path_suffix": "api/src/test/java/org/openmrs/util/ThreadSafeCircularFifoQueueTest.java",
|
|
"line": 384,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.deser.readobject",
|
|
"path_suffix": "api/src/test/java/org/openmrs/util/ThreadSafeCircularFifoQueueTest.java",
|
|
"line": 483,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.reflection.class_forname",
|
|
"path_suffix": "api/src/main/java/org/openmrs/api/context/ServiceContext.java",
|
|
"line": 779,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.reflection.class_forname",
|
|
"path_suffix": "api/src/main/java/org/openmrs/api/db/hibernate/type/StringEnumType.java",
|
|
"line": 49,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.reflection.class_forname",
|
|
"path_suffix": "api/src/main/java/org/openmrs/api/impl/PatientServiceImpl.java",
|
|
"line": 1238,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.reflection.class_forname",
|
|
"path_suffix": "api/src/main/java/org/openmrs/module/ModuleFileParser.java",
|
|
"line": 587,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.reflection.class_forname",
|
|
"path_suffix": "api/src/main/java/org/openmrs/serialization/SimpleXStreamSerializer.java",
|
|
"line": 104,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.reflection.class_forname",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUpdater.java",
|
|
"line": 490,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.reflection.class_forname",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
|
|
"line": 82,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.reflection.class_forname",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
|
|
"line": 86,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.reflection.class_forname",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
|
|
"line": 89,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.reflection.class_forname",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
|
|
"line": 92,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.reflection.class_forname",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
|
|
"line": 95,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.reflection.class_forname",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
|
|
"line": 98,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.reflection.class_forname",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
|
|
"line": 101,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.reflection.class_forname",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
|
|
"line": 104,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.reflection.class_forname",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
|
|
"line": 107,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.reflection.class_forname",
|
|
"path_suffix": "web/src/main/java/org/openmrs/web/filter/initialization/InitializationFilter.java",
|
|
"line": 1191,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.reflection.class_forname",
|
|
"path_suffix": "web/src/main/java/org/openmrs/web/filter/initialization/InitializationFilter.java",
|
|
"line": 1193,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.reflection.class_forname",
|
|
"path_suffix": "web/src/main/java/org/openmrs/web/filter/initialization/InitializationFilter.java",
|
|
"line": 1195,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.reflection.method_invoke",
|
|
"path_suffix": "api/src/main/java/org/openmrs/PatientIdentifier.java",
|
|
"line": 146,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.reflection.method_invoke",
|
|
"path_suffix": "api/src/main/java/org/openmrs/PatientIdentifier.java",
|
|
"line": 147,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.reflection.method_invoke",
|
|
"path_suffix": "api/src/main/java/org/openmrs/PersonAttribute.java",
|
|
"line": 172,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.reflection.method_invoke",
|
|
"path_suffix": "api/src/main/java/org/openmrs/PersonAttribute.java",
|
|
"line": 173,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.reflection.method_invoke",
|
|
"path_suffix": "api/src/main/java/org/openmrs/aop/RequiredDataAdvice.java",
|
|
"line": 361,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.reflection.method_invoke",
|
|
"path_suffix": "api/src/main/java/org/openmrs/api/impl/DomainServiceImpl.java",
|
|
"line": 179,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.reflection.method_invoke",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/OpenmrsUtil.java",
|
|
"line": 1374,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.xss.getwriter_print",
|
|
"path_suffix": "web/src/main/java/org/openmrs/web/filter/update/UpdateFilter.java",
|
|
"line": 278,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "js.code_exec.eval",
|
|
"path_suffix": "webapp/src/main/webapp/WEB-INF/view/scripts/jquery-ui/js/jquery-ui-timepicker-addon.js",
|
|
"line": 139,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/ConvertOrderersToProviders.java",
|
|
"line": 37,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.sqli.execute_concat",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/ConceptValidatorChangeSet.java",
|
|
"line": 505,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.sqli.execute_concat",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/ConceptValidatorChangeSet.java",
|
|
"line": 524,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.sqli.execute_concat",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/DuplicateLocationAttributeTypeNameChangeSet.java",
|
|
"line": 86,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "java.sqli.execute_concat",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/ConvertOrderersToProviders.java",
|
|
"line": 86,
|
|
"severity": "Medium",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/test/java/org/openmrs/module/ModuleFileParserUnitTest.java",
|
|
"line": 121,
|
|
"severity": "Low",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/test/java/org/openmrs/module/ModuleUtilTest.java",
|
|
"line": 600,
|
|
"severity": "Low",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/test/java/org/openmrs/test/MigrateDataSet.java",
|
|
"line": 107,
|
|
"severity": "Low",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/test/java/org/openmrs/test/jupiter/BaseContextSensitiveNonTransactionalTest.java",
|
|
"line": 698,
|
|
"severity": "Low",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/test/java/org/openmrs/util/databasechange/Database1_9_7UpgradeIT.java",
|
|
"line": 464,
|
|
"severity": "Low",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "api/src/test/java/org/openmrs/util/databasechange/DatabaseUpgradeTestUtil.java",
|
|
"line": 106,
|
|
"severity": "Low",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak",
|
|
"path_suffix": "web/src/test/java/org/openmrs/web/filter/update/GZIPFilterTest.java",
|
|
"line": 76,
|
|
"severity": "Low",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-resource-leak",
|
|
"path_suffix": "api/src/test/java/org/openmrs/module/ModuleFileParserTest.java",
|
|
"line": 165,
|
|
"severity": "Low",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-resource-leak",
|
|
"path_suffix": "api/src/test/java/org/openmrs/test/CreateConceptDictionaryDataSet.java",
|
|
"line": 50,
|
|
"severity": "Low",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-resource-leak",
|
|
"path_suffix": "api/src/test/java/org/openmrs/test/CreateInitialDataSet.java",
|
|
"line": 101,
|
|
"severity": "Low",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-resource-leak",
|
|
"path_suffix": "api/src/test/java/org/openmrs/test/TestUtil.java",
|
|
"line": 86,
|
|
"severity": "Low",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-resource-leak",
|
|
"path_suffix": "api/src/test/java/org/openmrs/util/DatabaseIT.java",
|
|
"line": 121,
|
|
"severity": "Low",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-resource-leak",
|
|
"path_suffix": "api/src/test/java/org/openmrs/util/HttpClientTest.java",
|
|
"line": 40,
|
|
"severity": "Low",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-unguarded-sink",
|
|
"path_suffix": "api/src/test/java/org/openmrs/test/DbUtil.java",
|
|
"line": 111,
|
|
"severity": "Low",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "cfg-unguarded-sink",
|
|
"path_suffix": "test-suite/performance/src/test/java/org/openmrs/StartupPerformanceIT.java",
|
|
"line": 251,
|
|
"severity": "Low",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak-possible",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUpdater.java",
|
|
"line": 429,
|
|
"severity": "Low",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak-possible",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
|
|
"line": 163,
|
|
"severity": "Low",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak-possible",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/OpenmrsUtil.java",
|
|
"line": 243,
|
|
"severity": "Low",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak-possible",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/UpgradeUtil.java",
|
|
"line": 83,
|
|
"severity": "Low",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
},
|
|
{
|
|
"rule_id": "state-resource-leak-possible",
|
|
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/AddConceptMapTypesChangeset.java",
|
|
"line": 90,
|
|
"severity": "Low",
|
|
"verdict": "needs_review",
|
|
"note": "captured by validate_recall.sh --capture"
|
|
}
|
|
]
|
|
}
|