feature: Delete some files.

Author: springkill

src/main/kotlin/org/skgroup/securityinspector/utils/FileUtil.kt

@@ -1,147 +1,31 @@
 #The name of the vulnerability.
-vuln.name.NettyResponseSplittingRisk=Netty Response Splitting Risk
 vuln.name.PatternMatchesDOS=Pattern Matches DOS Risk
-vuln.name.SystemEXITDOS=System EXIT DOS Risk
-vuln.name.ReadFile=Arbitrary File Read Risk
-vuln.name.CommonIOFileWrite=CommonIO File Write Risk
-vuln.name.IOFilesWrite=Arbitrary File Write Risk
 vuln.name.InjectionFilter=Maybe injection filter class
-vuln.name.JDBCAttack=JDBC Attack Risk
-vuln.name.JNDIInjection=JNDI Injection Risk
-vuln.name.LDAPUnserialize=LDAP Unserialize Risk
 vuln.name.BroadCORSAllowOrigin=Broad CORS Allow Origin Risk
 vuln.name.HardCodedCredential=Hard Coded Credential Risk
-vuln.name.OpenSAML2IgnoreComments=OpenSAML2 Ignore Comments Risk
-vuln.name.BSHRCE=BSH RCE Risk
-vuln.name.BurlapUnserialize=Burlap Unserialize Risk
-vuln.name.CastorUnserialize=Castor Unserialize Risk
-vuln.name.CompilableRCE=Compilable RCE Risk
-vuln.name.ELRCE=EL RCE Risk
-vuln.name.ExpressionRCE=Expression RCE Risk
-vuln.name.FastjsonAutoType=Fastjson AutoType Risk
-vuln.name.FastjsonUnserialize=Fastjson Unserialize Risk
-vuln.name.GroovyRCE=Groovy RCE Risk
-vuln.name.HessianUnserialize=Hessian Unserialize Risk
 vuln.name.JacksonDatabindDefaultTyping=Jackson Databind Default Typing Risk
-vuln.name.JEXLRCE=JEXL RCE Risk
-vuln.name.JSchOSRCE=JSch OS RCE Risk
-vuln.name.JsonIOUnserialize=JsonIO Unserialize Risk
-vuln.name.JYamlUnserialize=JYaml Unserialize Risk
-vuln.name.JythonRCE=Jython RCE Risk
-vuln.name.KryoUnserialize=Kryo Unserialize Risk
-vuln.name.MVELRCE=MVEL RCE Risk
-vuln.name.NashornScriptEngineRCE=Nashorn Script Engine RCE Risk
-vuln.name.ObjectInputStreamUnserialize=ObjectInputStream Unserialize Risk
-vuln.name.OGNLInjectionRCE=OGNL Injection RCE Risk
-vuln.name.RhinoRCE=Rhino RCE Risk
-vuln.name.RuntimeRCE=Runtime RCE Risk
-vuln.name.ScriptEngineRCE=Script Engine RCE Risk
-vuln.name.SnakeYamlUnserialize=SnakeYaml Unserialize Risk
-vuln.name.SPELRCE=SPEL RCE Risk
-vuln.name.XMLDecoderUnserialize=XMLDecoder Unserialize Risk
-vuln.name.XSLTRCE=XSLT RCE Risk
-vuln.name.XStreamUnserialize=XStream Unserialize Risk
-vuln.name.YamlBeansUnserialize=YamlBeans Unserialize Risk
-vuln.name.JakartaRedirect=Jakarta Redirect Risk
-vuln.name.JavaxRedirect=Javax Redirect Risk
-vuln.name.Reflect=Reflection Risk
 vuln.name.MybatisAnnotationSQLi=Mybatis Annotation SQLi Risk
 vuln.name.MybatisXmlSQLi=Mybatis XML SQLi Risk
 vuln.name.PlaceholderStringSQLi=Placeholder String SQLi Risk
 vuln.name.PolyadicExpressionSQLi=Polyadic Expression SQLi Risk
 vuln.name.SQLi=SQLi Risk
-vuln.name.ApacheSSRF=Apache SSRF Risk
-vuln.name.GoogleIOSSRF=Google IO SSRF Risk
-vuln.name.JavaURLSSRF=Java URL SSRF Risk
-vuln.name.JsoupSSRF=Jsoup SSRF Risk
-vuln.name.OkhttpSSRF=Okhttp SSRF Risk
-vuln.name.SpringSSRF=Spring SSRF Risk
-vuln.name.URLConnectionSSRF=URL Connection SSRF Risk
-#vuln.name.C3P0Unserialize= C3P0 Unserialize Risk
-vuln.name.BeetlSSTI=Beetl SSTI Risk
-vuln.name.FreemarkeraSSTI=Freemarkera SSTI Risk
-vuln.name.JinjavaSSTI=Jinjava SSTI Risk
-vuln.name.PebbleSSTI=Pebble SSTI Risk
-vuln.name.ThymeleafSSTI=Thymeleaf SSTI Risk
-vuln.name.ValidationSSTI=Validation SSTI Risk
-vuln.name.VelocitySSTI=Velocity SSTI Risk
 vuln.name.XXE=XXE Risk
 
 #The massage of the vulnerability.
-vuln.massage.NettyResponseSplittingRisk=Please check for Netty Response Splitting Risk
 vuln.massage.PatternMatchesDOS=Please check for Pattern Matches DOS Risk
-vuln.massage.SystemEXITDOS=Please check for System EXIT DOS Risk
-vuln.massage.ReadFile=Please check for Arbitrary File Read Risk
-vuln.massage.CommonIOFileWrite=Please check for CommonIO File Write Risk
-vuln.massage.IOFilesWrite=Please check for Arbitrary File Write Risk
 vuln.massage.SQLFilter=Maybe SQL filter class
 vuln.massage.XSSFilter=Maybe XSS filter class
-vuln.massage.JDBCAttack=Please check for JDBC Attack Risk
-vuln.massage.JNDIInjection=Please check for JNDI Injection Risk
-vuln.massage.LDAPUnserialize=Please check for LDAP Unserialize Risk
 vuln.massage.BroadCORSAllowOrigin=Please check for Broad CORS Allow Origin Risk
 vuln.massage.HardCodedCredential=Please check for Hard Coded Credential Risk
-vuln.massage.OpenSAML2IgnoreComments=Please check for OpenSAML2 Ignore Comments Risk
-vuln.massage.BSHRCE=Please check for BSH RCE Risk
-vuln.massage.BurlapUnserialize=Please check for Burlap Unserialize Risk
-vuln.massage.CastorUnserialize=Please check for Castor Unserialize Risk
-vuln.massage.CompilableRCE=Please check for Compilable RCE Risk
-vuln.massage.ELRCE=Please check for EL RCE Risk
-vuln.massage.ExpressionRCE=Please check for Expression RCE Risk
-vuln.massage.FastjsonAutoType=Please check for Fastjson AutoType Risk
-vuln.massage.FastjsonUnserialize=Please check for Fastjson Unserialize Risk
-vuln.massage.GroovyRCE=Please check for Groovy RCE Risk
-vuln.massage.HessianUnserialize=Please check for Hessian Unserialize Risk
 vuln.massage.JacksonDatabindDefaultTyping=Please check for Jackson Databind Default Typing Risk
-vuln.massage.JEXLRCE=Please check for JEXL RCE Risk
-vuln.massage.JSchOSRCE=Please check for JSch OS RCE Risk
-vuln.massage.JsonIOUnserialize=Please check for JsonIO Unserialize Risk
-vuln.massage.JYamlUnserialize=Please check for JYaml Unserialize Risk
-vuln.massage.JythonRCE=Please check for Jython RCE Risk
-vuln.massage.KryoUnserialize=Please check for Kryo Unserialize Risk
-vuln.massage.MVELRCE=Please check for MVEL RCE Risk
-vuln.massage.NashornScriptEngineRCE=Please check for Nashorn Script Engine RCE Risk
-vuln.massage.ObjectInputStreamUnserialize=Please check for ObjectInputStream Unserialize Risk
-vuln.massage.OGNLInjectionRCE=Please check for OGNL Injection RCE Risk
-vuln.massage.RhinoRCE=Please check for Rhino RCE Risk
-vuln.massage.RuntimeRCE=Please check for Runtime RCE Risk
-vuln.massage.ScriptEngineRCE=Please check for Script Engine RCE Risk
-vuln.massage.SnakeYamlUnserialize=Please check for SnakeYaml Unserialize Risk
-vuln.massage.SPELRCE=Please check for SPEL RCE Risk
-vuln.massage.XMLDecoderUnserialize=Please check for XMLDecoder Unserialize Risk
-vuln.massage.XSLTRCE=Please check for XSLT RCE Risk
-vuln.massage.XStreamUnserialize=Please check for XStream Unserialize Risk
-vuln.massage.YamlBeansUnserialize=Please check for YamlBeans Unserialize Risk
-vuln.massage.JakartaRedirect=Please check for Jakarta Redirect Risk
-vuln.massage.JavaxRedirect=Please check for Javax Redirect Risk
-vuln.massage.Reflect=Please check for Reflection Risk
 vuln.massage.MybatisAnnotationSQLi=Please check for Mybatis Annotation SQLi Risk
 vuln.massage.MybatisXmlSQLi=Please check for Mybatis XML SQLi Risk
 vuln.massage.PlaceholderStringSQLi=Please check for Placeholder String SQLi Risk
 vuln.massage.PolyadicExpressionSQLi=Please check for Polyadic Expression SQLi Risk
 vuln.massage.SQLi=Please check for SQLi Risk
-vuln.massage.ApacheSSRF=Please check for Apache SSRF Risk
-vuln.massage.GoogleIOSSRF=Please check for Google IO SSRF Risk
-vuln.massage.JavaURLSSRF=Please check for Java URL SSRF Risk
-vuln.massage.JsoupSSRF=Please check for Jsoup SSRF Risk
-vuln.massage.OkhttpSSRF=Please check for Okhttp SSRF Risk
-vuln.massage.SpringSSRF=Please check for Spring SSRF Risk
-vuln.massage.URLConnectionSSRF=Please check for URL Connection SSRF Risk
-#vuln.massage.C3P0Unserialize=Please check for C3P0 Unserialize Risk
-vuln.massage.BeetlSSTI=Please check for Beetl SSTI Risk
-vuln.massage.FreemarkerSSTI=Please check for Freemarkera SSTI Risk
-vuln.massage.JinjavaSSTI=Please check for Jinjava SSTI Risk
-vuln.massage.PebbleSSTI=Please check for Pebble SSTI Risk
-vuln.massage.ThymeleafSSTI=Please check for Thymeleaf SSTI Risk
-vuln.massage.ValidationSSTI=Please check for Validation SSTI Risk
-vuln.massage.VelocitySSTI=Please check for Velocity SSTI Risk
 vuln.massage.XXE=Please check for XXE Risk
 
 #Quick fix for the vulnerability.
-vuln.fix.NettyResponseSplittingRisk = Turn On the validateHeaders property in the HttpServerCodec
-vuln.fix.LDAPUnserialize = Set returnObject parameter to false in the LDAP connection
-vuln.fix.OpenSAML2IgnoreComments = Setting the org.opensaml.xml.parse.ParserPool.ignoreComments property to true
-vuln.fix.FastjsonAutoType = Remove the Fastjson AutoType feature
 vuln.fix.JacksonDatabindDefaultTypingAnnotation = Use @JsonTypeInfo(use = JsonTypeInfo.Id.CLASS, property = "class") annotation
 vuln.fix.JacksonDatabindDefaultTypingDefault = Use ObjectMapper.enableDefaultTyping() method
 vuln.fix.MybatisAnnotationSQLi = Use #{xxx} instead of ${xxx} in Mybatis annotation