Skip to content

ESB-1195 Introduce minimal CSP policy for the admin-console - #349

Draft
MEM2677 wants to merge 1 commit into
release/7.5from
ESB-1195
Draft

ESB-1195 Introduce minimal CSP policy for the admin-console#349
MEM2677 wants to merge 1 commit into
release/7.5from
ESB-1195

ESB-1195 Introdiced minimal CSP policy for the admin-console

1fa5322
Select commit
Loading
Failed to load commit list.
SonarQubeCloud / SonarCloud Code Analysis failed Jul 17, 2026 in 2m 49s

Quality Gate failed

Failed conditions
59.4% Coverage on New Code (required ≥ 80%)

See analysis details on SonarQube Cloud

Annotations

Check warning on line 69 in portal-ui/src/test/java/org/entando/entando/aps/servlet/CspHeaderFilterTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use a static import for "verify". 

See more on https://sonarcloud.io/project/issues?id=entando_app-engine&issues=AZ9wS3K_3bFWqtoRklLQ&open=AZ9wS3K_3bFWqtoRklLQ&pullRequest=349

Check warning on line 70 in portal-ui/src/test/java/org/entando/entando/aps/servlet/CspHeaderFilterTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use a static import for "verify". 

See more on https://sonarcloud.io/project/issues?id=entando_app-engine&issues=AZ9wS3K_3bFWqtoRklLR&open=AZ9wS3K_3bFWqtoRklLR&pullRequest=349

Check warning on line 94 in portal-ui/src/test/java/org/entando/entando/aps/servlet/CspHeaderFilterTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use a static import for "when". 

See more on https://sonarcloud.io/project/issues?id=entando_app-engine&issues=AZ9wS3K_3bFWqtoRklLb&open=AZ9wS3K_3bFWqtoRklLb&pullRequest=349

Check warning on line 329 in engine/src/main/java/com/agiletec/aps/system/SystemConstants.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Add 'since' and/or 'forRemoval' arguments to the @Deprecated annotation. 

See more on https://sonarcloud.io/project/issues?id=entando_app-engine&issues=AZ9wS3G73bFWqtoRklLK&open=AZ9wS3G73bFWqtoRklLK&pullRequest=349

Check warning on line 103 in portal-ui/src/test/java/org/entando/entando/aps/servlet/CspHeaderFilterTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use a static import for "when". 

See more on https://sonarcloud.io/project/issues?id=entando_app-engine&issues=AZ9wS3K_3bFWqtoRklLf&open=AZ9wS3K_3bFWqtoRklLf&pullRequest=349

Check warning on line 79 in portal-ui/src/test/java/org/entando/entando/aps/servlet/CspHeaderFilterTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use a static import for "verify". 

See more on https://sonarcloud.io/project/issues?id=entando_app-engine&issues=AZ9wS3K_3bFWqtoRklLV&open=AZ9wS3K_3bFWqtoRklLV&pullRequest=349

Check warning on line 66 in portal-ui/src/test/java/org/entando/entando/aps/servlet/CspHeaderFilterTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use a static import for "when". 

See more on https://sonarcloud.io/project/issues?id=entando_app-engine&issues=AZ9wS3K_3bFWqtoRklLO&open=AZ9wS3K_3bFWqtoRklLO&pullRequest=349

Check warning on line 80 in portal-ui/src/test/java/org/entando/entando/aps/servlet/CspHeaderFilterTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use a static import for "verify". 

See more on https://sonarcloud.io/project/issues?id=entando_app-engine&issues=AZ9wS3K_3bFWqtoRklLW&open=AZ9wS3K_3bFWqtoRklLW&pullRequest=349

Check warning on line 98 in portal-ui/src/test/java/org/entando/entando/aps/servlet/CspHeaderFilterTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use a static import for "verify". 

See more on https://sonarcloud.io/project/issues?id=entando_app-engine&issues=AZ9wS3K_3bFWqtoRklLe&open=AZ9wS3K_3bFWqtoRklLe&pullRequest=349

Check warning on line 84 in engine/src/main/java/org/entando/entando/aps/servlet/StartupListener.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use the built-in formatting to construct this argument. 

See more on https://sonarcloud.io/project/issues?id=entando_app-engine&issues=AZ9wS3Co3bFWqtoRklLI&open=AZ9wS3Co3bFWqtoRklLI&pullRequest=349

Check warning on line 76 in portal-ui/src/test/java/org/entando/entando/aps/servlet/CspHeaderFilterTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use a static import for "when". 

See more on https://sonarcloud.io/project/issues?id=entando_app-engine&issues=AZ9wS3K_3bFWqtoRklLT&open=AZ9wS3K_3bFWqtoRklLT&pullRequest=349

Check warning on line 77 in portal-ui/src/test/java/org/entando/entando/aps/servlet/CspHeaderFilterTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use a static import for "when". 

See more on https://sonarcloud.io/project/issues?id=entando_app-engine&issues=AZ9wS3K_3bFWqtoRklLU&open=AZ9wS3K_3bFWqtoRklLU&pullRequest=349

Check warning on line 52 in portal-ui/src/main/java/org/entando/entando/aps/servlet/CspHeaderFilter.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Replace this instanceof check and cast with 'instanceof HttpServletRequest httpservletrequest' 

See more on https://sonarcloud.io/project/issues?id=entando_app-engine&issues=AZ9wS3KN3bFWqtoRklLM&open=AZ9wS3KN3bFWqtoRklLM&pullRequest=349

Check warning on line 112 in portal-ui/src/test/java/org/entando/entando/aps/servlet/CspHeaderFilterTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use a static import for "verify". 

See more on https://sonarcloud.io/project/issues?id=entando_app-engine&issues=AZ9wS3K_3bFWqtoRklLj&open=AZ9wS3K_3bFWqtoRklLj&pullRequest=349

Check failure on line 48 in engine/src/main/java/org/entando/entando/aps/servlet/StartupListener.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this method to reduce its Cognitive Complexity from 17 to the 15 allowed. 

See more on https://sonarcloud.io/project/issues?id=entando_app-engine&issues=AZ9wS3Co3bFWqtoRklLJ&open=AZ9wS3Co3bFWqtoRklLJ&pullRequest=349

Check warning on line 330 in engine/src/main/java/com/agiletec/aps/system/SystemConstants.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Do not forget to remove this deprecated code someday. 

See more on https://sonarcloud.io/project/issues?id=entando_app-engine&issues=AZ9wS3G73bFWqtoRklLL&open=AZ9wS3G73bFWqtoRklLL&pullRequest=349

Check warning on line 104 in portal-ui/src/test/java/org/entando/entando/aps/servlet/CspHeaderFilterTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use a static import for "when". 

See more on https://sonarcloud.io/project/issues?id=entando_app-engine&issues=AZ9wS3K_3bFWqtoRklLg&open=AZ9wS3K_3bFWqtoRklLg&pullRequest=349

Check warning on line 88 in portal-ui/src/test/java/org/entando/entando/aps/servlet/CspHeaderFilterTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use a static import for "verify". 

See more on https://sonarcloud.io/project/issues?id=entando_app-engine&issues=AZ9wS3K_3bFWqtoRklLZ&open=AZ9wS3K_3bFWqtoRklLZ&pullRequest=349

Check warning on line 67 in portal-ui/src/test/java/org/entando/entando/aps/servlet/CspHeaderFilterTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use a static import for "when". 

See more on https://sonarcloud.io/project/issues?id=entando_app-engine&issues=AZ9wS3K_3bFWqtoRklLP&open=AZ9wS3K_3bFWqtoRklLP&pullRequest=349

Check warning on line 58 in keycloak-plugin/src/test/java/org/entando/entando/keycloak/services/KeycloakAuthorizationManagerTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use "@InjectMocks" to inject these mock fields instead of manually constructing the object. 

See more on https://sonarcloud.io/project/issues?id=entando_app-engine&issues=AZ9wS3Po3bFWqtoRklLk&open=AZ9wS3Po3bFWqtoRklLk&pullRequest=349

Check warning on line 75 in portal-ui/src/test/java/org/entando/entando/aps/servlet/CspHeaderFilterTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use a static import for "when". 

See more on https://sonarcloud.io/project/issues?id=entando_app-engine&issues=AZ9wS3K_3bFWqtoRklLS&open=AZ9wS3K_3bFWqtoRklLS&pullRequest=349

Check warning on line 106 in portal-ui/src/test/java/org/entando/entando/aps/servlet/CspHeaderFilterTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use a static import for "when". 

See more on https://sonarcloud.io/project/issues?id=entando_app-engine&issues=AZ9wS3K_3bFWqtoRklLh&open=AZ9wS3K_3bFWqtoRklLh&pullRequest=349

Check warning on line 109 in portal-ui/src/test/java/org/entando/entando/aps/servlet/CspHeaderFilterTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use a static import for "verify". 

See more on https://sonarcloud.io/project/issues?id=entando_app-engine&issues=AZ9wS3K_3bFWqtoRklLi&open=AZ9wS3K_3bFWqtoRklLi&pullRequest=349

Check warning on line 89 in portal-ui/src/test/java/org/entando/entando/aps/servlet/CspHeaderFilterTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use a static import for "verify". 

See more on https://sonarcloud.io/project/issues?id=entando_app-engine&issues=AZ9wS3K_3bFWqtoRklLa&open=AZ9wS3K_3bFWqtoRklLa&pullRequest=349

Check warning on line 95 in portal-ui/src/test/java/org/entando/entando/aps/servlet/CspHeaderFilterTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use a static import for "when". 

See more on https://sonarcloud.io/project/issues?id=entando_app-engine&issues=AZ9wS3K_3bFWqtoRklLc&open=AZ9wS3K_3bFWqtoRklLc&pullRequest=349
View more details on SonarQubeCloud