pmd / pmd / 800

80%

Build Type

push

github

Committed by web-flow

Commit Message

[java] Fix #7008: HardCodedCryptoKey: False positive when a default value of System.getProperty() is treated as a hard-coded key (#7012)

* Fix HardCodedCryptoKey false positive for System.getProperty() (#7008)

* Handle System.getProperty() as the qualifier of a chained call (#7008)

* Fix release notes formatting per review

* i
   Merge branch 'main' into fix/hardcoded-crypto-key-system-getproperty-7008

* Fix typo: 'treated a' -> 'treated as' in release notes

* Remove already-released entries from Fixed Issues; keep only #7008

* Trigger mergeability recheck

* Update release notes with fixed issues and API changes

Added fixed issues and API changes sections to release notes.

* Fix HardCodedCryptoKey FP: recognize chained/nested System.getProperty() calls (pmd#7008)

* simplify implementation, fix edge cases, add some more tests

---------

Co-authored-by: Lukas Gräf <lukas-graef@web.de>

Coverage Stats

19816 of 25928 branches covered (76.43%)

Branch coverage included in aggregate %.

5 of 5 new or added lines in 1 file covered. (100.0%)

2 existing lines in 1 file now uncovered.

42774 of 52827 relevant lines covered (80.97%)

0.82 hits per line