You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
<divclass="member-signature"><spanclass="modifiers">public static</span> <spanclass="return-type">boolean</span> <spanclass="element-name"><ahref="../../src-html/eu/righettod/SecurityUtils.html#line-1334">isRegexSafe</a></span><wbr><spanclass="parameters">(<ahref="https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/lang/String.html" title="class or interface in java.lang" class="external-link">String</a> regex,
1157
+
<divclass="member-signature"><spanclass="modifiers">public static</span> <spanclass="return-type">boolean</span> <spanclass="element-name"><ahref="../../src-html/eu/righettod/SecurityUtils.html#line-1335">isRegexSafe</a></span><wbr><spanclass="parameters">(<ahref="https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/lang/String.html" title="class or interface in java.lang" class="external-link">String</a> regex,
1158
1158
<ahref="https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/lang/String.html" title="class or interface in java.lang" class="external-link">String</a> data,
1159
1159
<ahref="https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/util/Optional.html" title="class or interface in java.util" class="external-link">Optional</a><<ahref="https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/lang/Integer.html" title="class or interface in java.lang" class="external-link">Integer</a>> maximumRunningTimeInSeconds)</span></div>
1160
1160
<divclass="block">Apply a validations on a regular expression to ensure that is not prone to the ReDOS attack.
<divclass="member-signature"><spanclass="modifiers">public static</span> <spanclass="return-type"><ahref="https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/util/UUID.html" title="class or interface in java.util" class="external-link">UUID</a></span> <spanclass="element-name"><ahref="../../src-html/eu/righettod/SecurityUtils.html#line-1386">computeUUIDv7</a></span>()</div>
1191
+
<divclass="member-signature"><spanclass="modifiers">public static</span> <spanclass="return-type"><ahref="https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/util/UUID.html" title="class or interface in java.util" class="external-link">UUID</a></span> <spanclass="element-name"><ahref="../../src-html/eu/righettod/SecurityUtils.html#line-1387">computeUUIDv7</a></span>()</div>
1191
1192
<divclass="block">Compute a UUID version 7 without using any external dependency.<br><br>
1192
1193
<b>Below are my personal point of view and perhaps I'm totally wrong!</b>
<divclass="member-signature"><spanclass="modifiers">public static</span> <spanclass="return-type">boolean</span> <spanclass="element-name"><ahref="../../src-html/eu/righettod/SecurityUtils.html#line-1419">isXSDSafe</a></span><wbr><spanclass="parameters">(<ahref="https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/lang/String.html" title="class or interface in java.lang" class="external-link">String</a> xsdFilePath)</span></div>
1232
+
<divclass="member-signature"><spanclass="modifiers">public static</span> <spanclass="return-type">boolean</span> <spanclass="element-name"><ahref="../../src-html/eu/righettod/SecurityUtils.html#line-1420">isXSDSafe</a></span><wbr><spanclass="parameters">(<ahref="https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/lang/String.html" title="class or interface in java.lang" class="external-link">String</a> xsdFilePath)</span></div>
1232
1233
<divclass="block">Ensure that an XSD file does not contain any include/import/redefine instruction (prevent exposure to SSRF).</div>
<divclass="member-signature"><spanclass="modifiers">public static</span> <spanclass="return-type"><ahref="https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/util/Map.html" title="class or interface in java.util" class="external-link">Map</a><<ahref="SensitiveInformationType.html" title="enum class in eu.righettod">SensitiveInformationType</a>, <ahref="https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/util/Set.html" title="class or interface in java.util" class="external-link">Set</a><<ahref="https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/lang/String.html" title="class or interface in java.lang" class="external-link">String</a>>></span> <spanclass="element-name"><ahref="../../src-html/eu/righettod/SecurityUtils.html#line-1462">extractAllSensitiveInformation</a></span><wbr><spanclass="parameters">(<ahref="https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/lang/String.html" title="class or interface in java.lang" class="external-link">String</a> content)</span>
1257
+
<divclass="member-signature"><spanclass="modifiers">public static</span> <spanclass="return-type"><ahref="https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/util/Map.html" title="class or interface in java.util" class="external-link">Map</a><<ahref="SensitiveInformationType.html" title="enum class in eu.righettod">SensitiveInformationType</a>, <ahref="https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/util/Set.html" title="class or interface in java.util" class="external-link">Set</a><<ahref="https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/lang/String.html" title="class or interface in java.lang" class="external-link">String</a>>></span> <spanclass="element-name"><ahref="../../src-html/eu/righettod/SecurityUtils.html#line-1463">extractAllSensitiveInformation</a></span><wbr><spanclass="parameters">(<ahref="https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/lang/String.html" title="class or interface in java.lang" class="external-link">String</a> content)</span>
1257
1258
throws <spanclass="exceptions"><ahref="https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/lang/Exception.html" title="class or interface in java.lang" class="external-link">Exception</a></span></div>
1258
1259
<divclass="block">Extract all sensitive information from a string provided.<br>
1259
1260
This can be used to identify any sensitive information into a <ahref="https://cwe.mitre.org/data/definitions/532.html">message expected to be written in a log</a> and then replace every sensitive values by an obfuscated ones.<br><br>
<divclass="member-signature"><spanclass="modifiers">public static</span> <spanclass="return-type"><ahref="https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/lang/String.html" title="class or interface in java.lang" class="external-link">String</a></span> <spanclass="element-name"><ahref="../../src-html/eu/righettod/SecurityUtils.html#line-1615">sanitizeLogMessage</a></span><wbr><spanclass="parameters">(<ahref="https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/lang/String.html" title="class or interface in java.lang" class="external-link">String</a> message,
1324
+
<divclass="member-signature"><spanclass="modifiers">public static</span> <spanclass="return-type"><ahref="https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/lang/String.html" title="class or interface in java.lang" class="external-link">String</a></span> <spanclass="element-name"><ahref="../../src-html/eu/righettod/SecurityUtils.html#line-1616">sanitizeLogMessage</a></span><wbr><spanclass="parameters">(<ahref="https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/lang/String.html" title="class or interface in java.lang" class="external-link">String</a> message,
1324
1325
int maxMessageLength)</span></div>
1325
1326
<divclass="block">Process a string, intended to be written in a log, to remove as much as possible information that can lead to an exposure to a log injection vulnerability.<br><br>
1326
1327
<b>Log injection</b> is also called <b>log forging</b>.<br><br>
0 commit comments