Java Security Web XML and Deserialization Audit Bundle
Run a read-only Java security audit focused on web security configuration, CSRF, CORS, cleartext transport, LDAP/JNDI risks, XML parser hardening, XXE, XPath, SAML, Spring Security ordering, and unsafe deserialization.
This bundle runs 27 read-only Java security audit codemods. It is part of the split Java security audit set; run the other Java security audit bundles when you need broader coverage.
Included Codemods
- @codemod/detect-disabled-csrf-in-java-security@0.1.0
- @codemod/detect-disabled-csrf-in-java-web@0.1.0
- @codemod/detect-unsafe-activemq-deserialization@0.1.0
- @codemod/disable-ldap-java-deserialization@0.1.0
- @codemod/java-activemq-unsafe-deserialization@0.1.0
- @codemod/java-cors-trusted-origins-audit@0.1.0
- @codemod/java-deserialization-entrypoint-audit@0.1.0
- @codemod/java-detect-cleartext-protocol-usage@0.1.0
- @codemod/java-detect-permissive-cors-origins@0.1.0
- @codemod/java-insecure-xml-signature-validation@0.1.0
- @codemod/java-jndi-unsafe-ldap-query@0.1.0
- @codemod/java-ldap-unauthenticated-bind-audit@0.1.0
- @codemod/java-ldap-unauthenticated-bind-miner@0.1.0
- @codemod/java-servlet-requested-session-id-usage@0.1.0
- @codemod/java-web-version-disclosure-scan@0.1.0
- @codemod/java-xml-arbitrary-file-inclusion-audit@0.1.0
- @codemod/java-xml-injection-sink-analysis@0.1.0
- @codemod/java-xml-parser-arbitrary-file-include@0.1.0
- @codemod/java-xml-parser-dos-audit@0.1.0
- @codemod/java-xml-parser-xxe-audit@0.1.0
- @codemod/java-xpath-injection-audit@0.1.0
- @codemod/java-xxe-unsafe-xml-parser-usage@0.1.0
- @codemod/opensaml2-authn-bypass-config-audit@0.1.0
- @codemod/spring-security-httprequestmatcher-order@0.1.0
- @codemod/spring-security-url-order-audit@0.1.0
- @codemod/unsafe-java-deserialization-config@0.1.0
- @codemod/unsafe-java-json-deserialization-config@0.1.0