Mike Jensen

Javascript Analysis Regression in CLI v2.11.4

24

Hello! I have been investigating an issue where our javascript analysis can take hours, or often fail to complete entirely. We are also seeing large db results and memory usage....

This came in from a customer issue today. The original stack trace is this: SEVERE Could not execute effect! com.readytalk.swt.effects.FadeEffect null com.readytalk.swt.widgets.notifications.PopOverShell.hide (line 461) com.readytalk.swt.widgets.notifications.PopOverShelll.fadeComplete (line 474) com.readytalk.swt.effects.FadeEffect.effectComplete (line 94)...

The name "Executor" is already used in java.util.concurrent: http://docs.oracle.com/javase/7/docs/api/java/util/concurrent/Executor.html I suggest renaming the swt-bling interface to avoid confusion on what interface is being implemented.

"Property is null" 500 response/error

4

I keep getting the error when querying that "property is null": `[qtp1519508707-24 - /] DEBUG o.e.jetty.server.HttpConnection - org.eclipse.jetty.server.HttpConnection$CommitCallback@664886e5 generate: DONE ([p=128,l=128,c=8192,r=0],[p=210,l=210,c=8192,r=0],true)@END [Test worker] DEBUG o.a.h.i.conn.DefaultClientConnection - Receiving response: HTTP/1.1 500...

Recommendation: Please encapsulate in a package

3

I would highly recommend migrating all your classes out of the default package space and into something specific for your project. I know I don't want my app's default package...

Validate capability and provide proof of concept around request validation

1

## Problem or feature statement Customers may want to do some validation of requests before they are forwarded to their downstream. Some possible usage example to consider: 1) Want to...

Improve automated security unit testing

2

I would like to make sure our testing covers security cases, notably bugs which could result in denial of service conditions. As part of onboarding to the code I will...

Issue to reference Jira issue: https://virtru.atlassian.net/browse/SEC-4101