From 83db1555233d219fe0d8642a16ef64fc127ada54 Mon Sep 17 00:00:00 2001
From: Valery Kharseko <vharseko@3a-systems.ru>
Date: Mon, 27 Jul 2026 13:22:06 +0000
Subject: [PATCH] Fix java/local-temp-file-or-directory-information-disclosure CodeQL alerts by using NIO temp file APIs (#763)

---
 opendj-embedded/src/test/java/org/openidentityplatform/opendj/embedded/EmbeddedOpenDJTest.java |   11 +++++++++--
 1 files changed, 9 insertions(+), 2 deletions(-)

diff --git a/opendj-embedded/src/test/java/org/openidentityplatform/opendj/embedded/EmbeddedOpenDJTest.java b/opendj-embedded/src/test/java/org/openidentityplatform/opendj/embedded/EmbeddedOpenDJTest.java
index ece5c5c..d776d1e 100644
--- a/opendj-embedded/src/test/java/org/openidentityplatform/opendj/embedded/EmbeddedOpenDJTest.java
+++ b/opendj-embedded/src/test/java/org/openidentityplatform/opendj/embedded/EmbeddedOpenDJTest.java
@@ -11,7 +11,7 @@
  * Header, with the fields enclosed by brackets [] replaced by your own identifying
  * information: "Portions Copyright [year] [name of copyright owner]".
  *
- * Copyright 2024 3A Systems LLC.
+ * Copyright 2024-2026 3A Systems LLC.
  */
 
 package org.openidentityplatform.opendj.embedded;
@@ -54,6 +54,9 @@
         embeddedOpenDJ.run();
         assertTrue(embeddedOpenDJ.isRunning());
 
+        File serverRoot = embeddedOpenDJ.getServerRootDirectory();
+        assertTrue(serverRoot.isDirectory());
+
         //import ldif data from an input stream
         URI resUri = getClass().getClassLoader().getResource("opendj/data.ldif").toURI();
         byte[] bytes = Files.readAllBytes(Paths.get(resUri));
@@ -83,5 +86,9 @@
         //stop OpenDJ
         embeddedOpenDJ.close();
         assertFalse(embeddedOpenDJ.isRunning());
+
+        //the per-instance temporary directory is deleted on close
+        assertFalse(serverRoot.exists());
+        assertFalse(serverRoot.getParentFile().exists());
     }
-}
\ No newline at end of file
+}

--
Gitblit v1.10.0