dropwizard-template-config

dropwizard-template-config copied to clipboard

CVE-2020-5245: Remote Code Execution (RCE) vulnerability in dropwizard-template-config

1

https://nvd.nist.gov/vuln/detail/CVE-2020-5245 https://github.com/dropwizard/dropwizard/security/advisories/GHSA-3mcp-9wr4-cjqf

harpreet86

I often use dropwizard-template-config and for a project i need to add configuration objects. I couldn't do it via TemplateConfigVariablesProvider so i have created TemplateConfigHashesProvider class to make it possible...

valoo86

Add ability to supply custom EnvironmentProvider and SystemPropertiesProvider to TemplateConfigBundleConfiguration

1

Currently this isn't possible as it's baked into `TemplateConfigBundle`

bobtiernay-okta

It would be nice, if the bundle was automatically tested against a real Dropwizard app. Even nicer, if it's tested against each officially supported version.

tkrille

Add utility to parse and split URLs

3

This might be interesting for users of Heroku or other PaaS that define the database connection parameters as a single URL.

tkrille

Most assertions in the tests are totally crappy. Improve this!

tkrille