Skip to content

Harden showcase apps and convert READMEs to Markdown#1624

Draft
lukaszlenart wants to merge 1 commit intomainfrom
chore/harden-showcase-apps
Draft

Harden showcase apps and convert READMEs to Markdown#1624
lukaszlenart wants to merge 1 commit intomainfrom
chore/harden-showcase-apps

Conversation

@lukaszlenart
Copy link
Member

@lukaszlenart lukaszlenart commented Mar 16, 2026

Summary

  • Add prominent production deployment warnings to showcase and rest-showcase READMEs
  • Convert README.txt to README.md with proper Markdown formatting
  • Harden ViewSourceAction by restricting the config parameter to only read .xml files within the webapp's deployment directory, preventing arbitrary file reads via crafted file:/// URIs

Test plan

  • Verify showcase app compiles: mvn compile -pl apps/showcase
  • Verify viewSource.action still displays struts.xml config snippets correctly
  • Verify crafted config parameter with paths outside webapp root returns no content

🤖 Generated with Claude Code

- Add production deployment warnings to showcase and rest-showcase READMEs
- Convert README.txt to README.md with proper Markdown formatting
- Restrict ViewSourceAction config parameter to XML files within webapp path

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@sonarqubecloud
Copy link

Quality Gate Failed Quality Gate failed

Failed conditions
0.0% Coverage on New Code (required ≥ 80%)

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant