Package org.sonar.java.checks
Class AbstractHardCodedCredentialChecker
java.lang.Object
org.sonar.java.ast.visitors.SubscriptionVisitor
org.sonar.plugins.java.api.IssuableSubscriptionVisitor
org.sonar.java.checks.AbstractHardCodedCredentialChecker
- All Implemented Interfaces:
JavaCheck,JavaFileScanner
- Direct Known Subclasses:
HardCodedPasswordCheck,HardCodedSecretCheck
-
Field Summary
FieldsModifier and TypeFieldDescriptionprotected static final MethodMatchersprotected static final MethodMatchersFields inherited from class org.sonar.java.ast.visitors.SubscriptionVisitor
context -
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionprotected abstract Stringprotected voidprotected voidhandleEqualsMethod(MethodInvocationTree mit, MemberSelectExpressionTree methodSelect) protected voidprotected voidhandleVariable(VariableTree tree) protected booleanprotected abstract booleanisCredentialContainingPattern(ExpressionTree expression) Determine if the actual hardcoded credential from the expression, contains one of the credentials pattern.isCredentialLikeName(String name) isCredentialVariable(ExpressionTree variable) protected booleanisPotentialCredential(String literal) protected booleanisPotentialCredential(ExpressionTree expression) protected abstract voidMethods inherited from class org.sonar.plugins.java.api.IssuableSubscriptionVisitor
addIssue, addIssueOnFile, leaveFile, reportIssue, reportIssue, reportIssue, scanFile, scanTree, setContextMethods inherited from class org.sonar.java.ast.visitors.SubscriptionVisitor
leaveNode, nodesToVisit, visitNode, visitToken, visitTriviaMethods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, waitMethods inherited from interface org.sonar.plugins.java.api.JavaFileScanner
scanWithoutParsing
-
Field Details
-
STRING_TO_CHAR_ARRAY
-
EQUALS_MATCHER
-
-
Constructor Details
-
AbstractHardCodedCredentialChecker
public AbstractHardCodedCredentialChecker()
-
-
Method Details
-
getCredentialWords
-
isCredentialContainingPattern
Determine if the actual hardcoded credential from the expression, contains one of the credentials pattern. This is typically used to ignore constant declaration. -
report
-
isSettingCredential
-
isCredentialLikeName
-
isCredentialVariable
-
isCallOnStringLiteral
-
handleStringLiteral
-
isPotentialCredential
-
handleVariable
-
handleAssignment
-
isPotentialCredential
-
handleEqualsMethod
protected void handleEqualsMethod(MethodInvocationTree mit, MemberSelectExpressionTree methodSelect)
-