test(codeql): add known security issue

camunda · Oct 17, 2024 · 88bd3e4 · 88bd3e4
1 parent 09e84af
commit 88bd3e4
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/.../main/java/org/camunda/bpm/container/impl/deployment/AbstractParseBpmPlatformXmlStep.java b/.../main/java/org/camunda/bpm/container/impl/deployment/AbstractParseBpmPlatformXmlStep.java
@@ -215,6 +215,18 @@ public URL lookupBpmPlatformXml() {
     return fileLocation;
   }
 
+  public URL testMethod(String url) throws MalformedURLException {
+    Pattern pattern = Pattern.compile("^(/|[A-z]://?|[A-z]:\\\\).*[/|\\\\]bpm-platform\\.xml$");
+    Matcher fileMatcher = pattern.matcher(url);
+    if (fileMatcher.matches()) {
+      File location = new File(url);
+      if (location.isAbsolute() && location.exists()) {
+        return location.toURI().toURL();
+      }
+    }
+    return null;
+  }
+
   public abstract URL getBpmPlatformXmlStream(DeploymentOperation operationContext);
 
 }