Follow the guide to enable codebase context checks.

Objective: To create a detailed and reliable record of critical system actions for security analysis
and compliance.

Status: Passed

Learn more about managing compliance generic rules or creating your own custom rules

Objective: Ensure all identifiers clearly express their purpose and intent, making code
self-documenting

Status: Passed

Learn more about managing compliance generic rules or creating your own custom rules

Objective: To prevent the leakage of sensitive system information through error messages while
providing sufficient detail for internal debugging.

Status: Passed

Learn more about managing compliance generic rules or creating your own custom rules

Objective: To ensure logs are useful for debugging and auditing without exposing sensitive
information like PII, PHI, or cardholder data.

Status: Passed

Learn more about managing compliance generic rules or creating your own custom rules

Objective: Ensure comprehensive error handling that provides meaningful context and graceful
degradation

Status:
Missing null handling: Read.resourceAsString can pass a null InputStream into Read.toString, causing an unhandled
NullPointerException instead of a contextual exception when a resource is missing.

public static String resourceAsString(String resource) {
  try (InputStream stream = Read.class.getResourceAsStream(resource)) {
    return toString(stream);
  } catch (IOException e) {
    throw new UncheckedIOException("Failed to read resource " + resource, e);
  }

Learn more about managing compliance generic rules or creating your own custom rules

Objective: Ensure all data inputs are validated, sanitized, and handled securely to prevent
vulnerabilities

Status:
Unvalidated resource path: Read.resourceAsString accepts an arbitrary resource path without validation, so a reviewer
should confirm the argument is not user-controlled and cannot be abused to access
unintended classpath resources.

public static String resourceAsString(String resource) {
  try (InputStream stream = Read.class.getResourceAsStream(resource)) {
    return toString(stream);
  } catch (IOException e) {
    throw new UncheckedIOException("Failed to read resource " + resource, e);
  }

Learn more about managing compliance generic rules or creating your own custom rules

In resourceAsString, add a null check for the InputStream returned by
getResourceAsStream and throw an IllegalArgumentException if it is null to
prevent a NullPointerException.

java/src/org/openqa/selenium/io/Read.java [58-64]

 public static String resourceAsString(String resource) {
   try (InputStream stream = Read.class.getResourceAsStream(resource)) {
+    if (stream == null) {
+      throw new IllegalArgumentException("Resource not found: " + resource);
+    }
     return toString(stream);
   } catch (IOException e) {
     throw new UncheckedIOException("Failed to read resource " + resource, e);
   }
 }

• Apply / Chat

Ensure the InputStream returned by supplier.get() is always closed by wrapping
it in a try-with-resources before reading it.

java/src/org/openqa/selenium/remote/http/HttpMessage.java [201-208]

 @Deprecated
 public M setContent(Supplier<InputStream> supplier) {
-  try {
-    return setContent(Contents.bytes(Read.toByteArray(supplier.get())));
+  try (InputStream in = supplier.get()) {
+    return setContent(Contents.bytes(Read.toByteArray(in)));
   } catch (IOException ex) {
     throw new UncheckedIOException(ex);
   }
 }

• Apply / Chat

In addDomMutationHandler, wrap the call to Read.resourceAsString in a try-catch
block to catch UncheckedIOException and re-throw it as an IllegalStateException
to maintain original exception behavior.

java/src/org/openqa/selenium/remote/RemoteScript.java [89]

-String scriptValue = Read.resourceAsString("/org/openqa/selenium/remote/bidi-mutation-listener.js");
+String scriptValue;
+try {
+  scriptValue = Read.resourceAsString("/org/openqa/selenium/remote/bidi-mutation-listener.js");
+} catch (UncheckedIOException e) {
+  throw new IllegalStateException("Unable to load helper script", e);
+}

• Apply / Chat