Skip to content

Commit

Permalink
Fix msg and findbugs.xml
Browse files Browse the repository at this point in the history
  • Loading branch information
JuditKnoll committed Oct 17, 2023
1 parent 809eafa commit ffca00d
Show file tree
Hide file tree
Showing 2 changed files with 4 additions and 4 deletions.
2 changes: 1 addition & 1 deletion spotbugs/etc/findbugs.xml
Original file line number Diff line number Diff line change
Expand Up @@ -682,7 +682,7 @@
<Detector class="edu.umd.cs.findbugs.detect.DontReusePublicIdentifiers" speed="fast"
reports="PI_DO_NOT_REUSE_PUBLIC_IDENTIFIERS_CLASS_NAMES,PI_DO_NOT_REUSE_PUBLIC_IDENTIFIERS_FIELD_NAMES,PI_DO_NOT_REUSE_PUBLIC_IDENTIFIERS_METHOD_NAMES,PI_DO_NOT_REUSE_PUBLIC_IDENTIFIERS_LOCAL_VARIABLE_NAMES"
disabled="true"/>
<Detector class="edu.umd.cs.findbugs.detect.UnnecessaryEnvUsage"
<Detector class="edu.umd.cs.findbugs.detect.UnnecessaryEnvUsage" speed="fast"
reports="ENV_USE_PROPERTY_INSTEAD_OF_ENV"/>
<!-- Bug Categories -->
<BugCategory category="NOISE" hidden="true"/>
Expand Down
6 changes: 3 additions & 3 deletions spotbugs/etc/messages.xml
Original file line number Diff line number Diff line change
Expand Up @@ -9143,15 +9143,15 @@ Using floating-point variables should not be used as loop counters, as they are
<LongDescription>It is safer to use validated Java property '{3}' instead of insecure environment variable '{2}' in class {4} (method {1}).</LongDescription>
<Details>
<![CDATA[<p>
Environment variables may be accidently or maliciously altered suring process execution. This makes them unsafe to be relied
Environment variables may be accidentally or maliciously altered during process execution. This makes them unsafe to be relied
upon important system-level information. Some environment variables are understood, validated and secured by the JVM.
These values are available as system properties, which should be used instead.
</p>
<p>
Any standard value which can also be accessed through System.getProperty() should be accessed so instead of using System.getenv().
Any value which can be accessed through both System.getProperty() and System.getenv(), should be accessed using the latter.
</p>
<p>
Mapping of identical or similar Java properties:
Mapping of corresponding Java properties:
<table>
<tr>
<th>Environment variable</th> <th>Property</th>
Expand Down

0 comments on commit ffca00d

Please sign in to comment.