Class HardCodedPasswordCheck

java.lang.Object

org.sonar.java.ast.visitors.SubscriptionVisitor

org.sonar.plugins.java.api.IssuableSubscriptionVisitor

org.sonar.java.checks.AbstractHardCodedCredentialChecker

org.sonar.java.checks.HardCodedPasswordCheck

All Implemented Interfaces:

JavaCheck, JavaFileScanner

public class HardCodedPasswordCheck
extends AbstractHardCodedCredentialChecker

Field Summary

Fields

Modifier and Type	Field	Description
String	passwordWords

Fields inherited from class AbstractHardCodedCredentialChecker

EQUALS_MATCHER, STRING_TO_CHAR_ARRAY

Modifier and Type	Field	Description
protected static final MethodMatchers	EQUALS_MATCHER
protected static final MethodMatchers	STRING_TO_CHAR_ARRAY

Fields inherited from class SubscriptionVisitor

context

Constructor Summary

Constructors

Constructor	Description
HardCodedPasswordCheck()

Method Summary

Modifier and Type	Method	Description
protected String	getCredentialWords()
protected void	handleStringLiteral(LiteralTree tree)
protected boolean	isCredentialContainingPattern(ExpressionTree expression)	Determine if the actual hardcoded credential from the expression, contains one of the credentials pattern.
List<Tree.Kind>	nodesToVisit()
protected void	report(Tree tree, String match)
void	visitNode(Tree tree)

Methods inherited from class AbstractHardCodedCredentialChecker

handleAssignment, handleEqualsMethod, handleVariable, isCallOnStringLiteral, isCredentialLikeName, isCredentialVariable, isPotentialCredential, isPotentialCredential, isSettingCredential

Modifier and Type	Method	Description
protected void	handleAssignment(AssignmentExpressionTree tree)
protected void	handleEqualsMethod(MethodInvocationTree mit, MemberSelectExpressionTree methodSelect)
protected void	handleVariable(VariableTree tree)
protected boolean	isCallOnStringLiteral(ExpressionTree expr)
protected Optional<String>	isCredentialLikeName(String name)
protected Optional<String>	isCredentialVariable(ExpressionTree variable)
protected boolean	isPotentialCredential(String literal)
protected boolean	isPotentialCredential(ExpressionTree expression)
protected Optional<String>	isSettingCredential(MethodInvocationTree tree)

Methods inherited from class IssuableSubscriptionVisitor

addIssue, addIssueOnFile, leaveFile, reportIssue, reportIssue, reportIssue, reportIssue, scanFile, scanTree, setContext

Methods inherited from class SubscriptionVisitor

leaveNode, visitToken, visitTrivia

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface JavaFileScanner

scanWithoutParsing

Field Details

passwordWords

public String passwordWords

Constructor Details

HardCodedPasswordCheck

public HardCodedPasswordCheck()

Method Details

getCredentialWords

protected String getCredentialWords()

Specified by:

getCredentialWords in class AbstractHardCodedCredentialChecker

nodesToVisit

public List<Tree.Kind> nodesToVisit()

Specified by:

nodesToVisit in class SubscriptionVisitor

visitNode

public void visitNode(Tree tree)

Overrides:

visitNode in class SubscriptionVisitor

handleStringLiteral

protected void handleStringLiteral(LiteralTree tree)

Overrides:

handleStringLiteral in class AbstractHardCodedCredentialChecker

report

protected void report(Tree tree,
 String match)

Specified by:

report in class AbstractHardCodedCredentialChecker

isCredentialContainingPattern

protected boolean isCredentialContainingPattern(ExpressionTree expression)

Description copied from class: AbstractHardCodedCredentialChecker

Determine if the actual hardcoded credential from the expression, contains one of the credentials pattern. This is typically used to ignore constant declaration.

Specified by:

isCredentialContainingPattern in class AbstractHardCodedCredentialChecker