search

OpenLiberty / liberty-language-server

The Liberty Config Language Server provides language server features for Liberty server configuration files through any of the supported client IDEs.
Eclipse Public License 2.0
6 stars 12 forks source link

Sast issue fix 1.0 #294

Closed arunvenmany-ibm closed 3 months ago

arunvenmany-ibm commented 3 months ago
  1. modified try with resources to normal try as try with resources with xml reader shows xml injection error
  2. refactored code, moved XmlEventReader code to a separate private method
  3. Added private static method where factory.createXMLEventReader is called
  4. Added exception handler to return custom message in DocumentUtils#transformer.transform