From 83db1555233d219fe0d8642a16ef64fc127ada54 Mon Sep 17 00:00:00 2001
From: Valery Kharseko <vharseko@3a-systems.ru>
Date: Mon, 27 Jul 2026 13:22:06 +0000
Subject: [PATCH] Fix java/local-temp-file-or-directory-information-disclosure CodeQL alerts by using NIO temp file APIs (#763)
---
opendj-embedded/src/test/java/org/openidentityplatform/opendj/embedded/EmbeddedOpenDJTest.java | 11 +++++++++--
1 files changed, 9 insertions(+), 2 deletions(-)
diff --git a/opendj-embedded/src/test/java/org/openidentityplatform/opendj/embedded/EmbeddedOpenDJTest.java b/opendj-embedded/src/test/java/org/openidentityplatform/opendj/embedded/EmbeddedOpenDJTest.java
index ece5c5c..d776d1e 100644
--- a/opendj-embedded/src/test/java/org/openidentityplatform/opendj/embedded/EmbeddedOpenDJTest.java
+++ b/opendj-embedded/src/test/java/org/openidentityplatform/opendj/embedded/EmbeddedOpenDJTest.java
@@ -11,7 +11,7 @@
* Header, with the fields enclosed by brackets [] replaced by your own identifying
* information: "Portions Copyright [year] [name of copyright owner]".
*
- * Copyright 2024 3A Systems LLC.
+ * Copyright 2024-2026 3A Systems LLC.
*/
package org.openidentityplatform.opendj.embedded;
@@ -54,6 +54,9 @@
embeddedOpenDJ.run();
assertTrue(embeddedOpenDJ.isRunning());
+ File serverRoot = embeddedOpenDJ.getServerRootDirectory();
+ assertTrue(serverRoot.isDirectory());
+
//import ldif data from an input stream
URI resUri = getClass().getClassLoader().getResource("opendj/data.ldif").toURI();
byte[] bytes = Files.readAllBytes(Paths.get(resUri));
@@ -83,5 +86,9 @@
//stop OpenDJ
embeddedOpenDJ.close();
assertFalse(embeddedOpenDJ.isRunning());
+
+ //the per-instance temporary directory is deleted on close
+ assertFalse(serverRoot.exists());
+ assertFalse(serverRoot.getParentFile().exists());
}
-}
\ No newline at end of file
+}
--
Gitblit v1.10.0