[FINERACT-853] Use find-sec-bugs SpotBugs plugin to detect SQL injection issues (and other security related problems)

• Type: Improvement
• Status: In Progress
• Priority: Critical
• Resolution: Unresolved
• Component/s: Security
• Labels: beginner security technical
• Assignee: Unassigned
• Reporter: Michael Vorburger
• Created: 08/Mar/20 16:51
• Updated: 22/Jun/20 02:49

Description

similarly to FINERACT-696, it could be interesting to integrate https://find-sec-bugs.github.io.

Issue Links

• blocks: FINERACT-865 Strengthen/Harden Fineract 1.x to LTS Version by Upgrading Java & Improving Code Coverage of Tests
• blocks: FINERACT-967 lgtm.com Security Vulnerability Assessment Scanning
• blocks: FINERACT-988 Snyk.io Security Vulnerability Assessment Scanning
• is blocked by: FINERACT-879 Refine overly permissive Cross-Origin Resource Sharing (CORS) policy
• is related to: FINERACT-712 Fineract codebase should pass PMD, Findbugs and Checkstyle analysis
• is required by: FINERACT-854 Use prepared statements instead of string concatenated SQL everywhere
• links to: GitHub Pull Request #1090