Release Notes - 2.1

  • 2.1.7-funcrel
    Improves accuracy for the 💎 1039012 - Avoid using referer header field in HTTP request
    Improve accuracy for the rule: 💎 1039098 - Ensure secure option is enabled when creating session (JEE)
    Improve accuracy for the rule: 💎 1039028 - Avoid weak encryption providing not sufficient key size (JEE) 📝 59017
    Better accuracy for 💎 1039096 - Ensure httpOnly option is enabled when creating session (JEE)
    Better results for the rule: 💎 1039102 - Ensure SameSite option is enabled when creating session (JEE)
    Improve performance for the rule: 💎 1039108 - Avoid leaving temporary files in directory (JEE)
  • 2.1.6-funcrel
    Fixes a harmless traceback due to a bug in old versions of com.castsoftware.jee. No impact on results.
    Updates internal evaluation engine
  • 2.1.5-funcrel
    Updates internal evaluation engine
    Improves analysis speed and accuracy by adding optimized filtering.
  • 2.1.4-funcrel
    Improve stability of rules:
    💎 1039044 - Avoid usage of BannedAPI when using ESAPI library
    💎 1039096 - Ensure httpOnly option is enabled when creating session (JEE)
    💎 1039098 - Ensure secure option is enabled when creating session (JEE)
    💎 1039102 - Ensure SameSite option is enabled when creating session (JEE) |
  • 2.1.3-funcrel
    Updates internal evaluation engine leading to an on overall accuracy of quality rules.
  • 2.1.2-funcrel
    📝 54137 Fixes a harmless traceback due to a bug in old versions of com.castsoftware.jee. No impact on results.
  • 2.1.1-funcrel
    Improve scope of rule: 💎 1039116 - “Ensure setting origins when using @CrossOrigin Spring annotation”.
    Fixes a harmless traceback due to a bug in old versions of com.castsoftware.jee. No impact on results.
  • 2.1.0-funcrel
    Updates embedded libraries.
    Security rules evaluation engine has been updated to provide better/accurate results
  • 2.1.0-beta1
    Improve accuracy of rules: 💎 1039018 “Avoid using cryptography hash with predictable salt (JEE)” and 1039022 “Avoid using Insecure PBE Iteration Count”.
    Improve accuracy of rule: 💎 1039046 “Always use {@code} to wrap code statements or values such as null”.
    Improve accuracy of rule: 💎 1039044 “Avoid usage of BannedAPI when using ESAPI library”.
    Workaround for a bug in old versions of JEE Analyzer which produced an harmless Traceback. No impact on results.
    Workaround for a bug in internal library. No impact on results.
    Updated internal librairies. No impact on results.
  • 2.1.0-alpha1
    💎 1039110 NEW Ensure initializing cryptographic key generators (JEE)
    💎 1039112 NEW Avoid mutable fields inside a class with JCIP @Immutable annotation
    💎 1039114 NEW Avoid predictable initialization vector (JEE)
    💎 1039116 NEW Ensure setting origins when using @CrossOrigin Spring annotation
    💎 1039118 NEW Avoid enabling directory listing (JEE)
    💎 1039120 NEW Avoid weak password requirements (JEE)