Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

5.0 fix security review issues #2983

Merged
merged 6 commits into from
Jun 16, 2022
Merged

Conversation

gem-neo4j
Copy link
Contributor

Based on the security code review I have:

  • Removed unused imports (and added a spotless checker to enforce this/clean up newly introduced ones easier)
  • Changed how we used FileStreamInput
  • Handled thrown errors or added comments when they are to be ignored
  • Removed the return of stack traces in non test cases

@gem-neo4j gem-neo4j added 5.0 team-cypher-surface Cypher Surface team should review the PR labels Jun 14, 2022
@gem-neo4j
Copy link
Contributor Author

@gem-neo4j
Copy link
Contributor Author

@gem-neo4j
Copy link
Contributor Author

@gem-neo4j
Copy link
Contributor Author

@gem-neo4j gem-neo4j merged commit dfcbbea into dev Jun 16, 2022
@gem-neo4j gem-neo4j deleted the 5.0_fix_security_review_issues branch June 16, 2022 11:20
gem-neo4j added a commit to gem-neo4j/neo4j-apoc-procedures that referenced this pull request Jun 16, 2022
* Remove use of new FileInputStream by replacing it with Files.newInputStream() i

* Add Spotless as a gradle plugin to enforce the removal of unused imports

* Handle empty catch block; throw runtime exception to give information back to the user

* Remove printing Stack Traces in non test functions
gem-neo4j added a commit that referenced this pull request Jun 16, 2022
* Remove use of new FileInputStream by replacing it with Files.newInputStream() 

* Add Spotless as a gradle plugin to enforce the removal of unused imports

* Handle empty catch block; throw runtime exception to give information back to the user

* Remove printing Stack Traces in non test functions
gem-neo4j added a commit to gem-neo4j/neo4j-apoc-procedures that referenced this pull request Jun 16, 2022
* Remove use of new FileInputStream by replacing it with Files.newInputStream()

* Add Spotless as a gradle plugin to enforce the removal of unused imports

* Handle empty catch block; throw runtime exception to give information back to the user

* Remove printing Stack Traces in non test functions
gem-neo4j added a commit that referenced this pull request Jun 16, 2022
* Remove use of new FileInputStream by replacing it with Files.newInputStream()

* Add Spotless as a gradle plugin to enforce the removal of unused imports

* Handle empty catch block; throw runtime exception to give information back to the user

* Remove printing Stack Traces in non test functions
vga91 pushed a commit to vga91/neo4j-apoc-procedures that referenced this pull request Jun 29, 2022
* Remove use of new FileInputStream by replacing it with Files.newInputStream() 

* Add Spotless as a gradle plugin to enforce the removal of unused imports

* Handle empty catch block; throw runtime exception to give information back to the user

* Remove printing Stack Traces in non test functions
gem-neo4j added a commit to gem-neo4j/neo4j-apoc-procedures that referenced this pull request Jul 12, 2022
* Remove use of new FileInputStream by replacing it with Files.newInputStream() i

* Add Spotless as a gradle plugin to enforce the removal of unused imports

* Handle empty catch block; throw runtime exception to give information back to the user

* Remove printing Stack Traces in non test functions
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
5.0 team-cypher-surface Cypher Surface team should review the PR
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants