search

JanusGraph / janusgraph

JanusGraph: an open-source, distributed graph database
https://janusgraph.org
Other
5.27k stars 1.16k forks source link

Fortify: mitigate command injection in AbstractJanusGraphAssemblyIT:118 #799

Open amcp opened 6 years ago

amcp commented 6 years ago

encapsulate the command line that the test requires in the abstract class, so that we do not have to pass in a string to ProcessBuilder. This was marked critical by Fortify.

sjudeng commented 6 years ago

Is it necessary to scan tests? The test code is not included in JanusGraph distributions and we exclude test code in Coverity scans (see https://scan.coverity.com/projects/janusgraph-janusgraph?tab=overview).