carlspring / carlspring/vertx-codeql-queries

Implement a CodeQL rule for cases where WebClient.create is used without setting a WebClientOptions with an explicit setIdleTimeout

Open
#6 0 comments 1 reaction 2 assignees Claimed by @carlspring View on GitHub
help wanted
Dominant language
Java
Stars
0
Forks
1
PR merge metrics
No merged PRs in 30d

Description

# Task Description

As a follow-up of carlspring/vertx-vulns#18, we need to implement a CodeQL rule for cases where `WebClient.create` is used without setting a `WebClientOptions` with an explicit `setIdleTimeout`.

# Open Questions

* What should be the severity of this?

# Notes

# Task List

The following tasks will need to be carried out:
* [ ] Implement the query.
* [ ] [Set up query annotations](https://codeql.github.com/docs/writing-codeql-queries/metadata-for-codeql-queries/).
* [ ] Provide a help file.
* [ ] Test the fix.
* [ ] Update the documentation.

# Useful Commands

# Incurred Costs

# Task Relationships

This task:
* Is a sub-task of:
* Depends on:
* Is a follow-up of:
* carlspring/vertx-vulns#6
* Is required for:
* #1
* Relates to:

# Resources

# Useful Links

* [CodeQL: Set up query annotations](https://codeql.github.com/docs/writing-codeql-queries/metadata-for-codeql-queries/)
* [CodeQL: Defining the results of a query](https://codeql.github.com/docs/writing-codeql-queries/defining-the-results-of-a-query/#adding-a-link-to-the-similar-file)

# Points of Contact

* @carlspring

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.