rspec/rules/S5332/java/rule.adoc

34 lines
854 B
Plaintext
Raw Normal View History

2021-01-21 04:09:13 +00:00
include::../description.adoc[]
include::../ask-yourself.adoc[]
include::../recommended.adoc[]
== Sensitive Code Example
These clients from https://commons.apache.org/proper/commons-net/[Apache commons net] libraries are based on unencrypted protocols and are not recommended:
----
TelnetClient telnet = new TelnetClient(); // Sensitive
FTPClient ftpClient = new FTPClient(); // Sensitive
SMTPClient smtpClient = new SMTPClient(); // Sensitive
----
== Compliant Solution
Use instead these clients from https://commons.apache.org/proper/commons-net/[Apache commons net] and http://www.jcraft.com/jsch/[JSch/ssh] library:
----
JSch jsch = new JSch(); // Compliant
FTPSClient ftpsClient = new FTPSClient(true); // Compliant
SMTPSClient smtpsClient = new SMTPSClient(true); // Compliant
----
include::../exceptions.adoc[]
include::../see.adoc[]