Search results

Modernize JSTL taglib URIs to jakarta.tags.* (post-jakarta migration)

Status: Open.

#880 In OWASP/SecurityShepherd;

· ismisepaul opened on Jun 5, 2026

Add test coverage for SLS and ACS SAML auth servlets

javaPull requests that update java codePull requests that update java code

Test Automation

Status: Open.

#879 In OWASP/SecurityShepherd;

· ismisepaul opened on Jun 4, 2026

Modernize MongoDatabase off legacy com.mongodb.DB API + Testcontainers; rescue disabled MongoDatabaseIT tests

Enhancement

javaPull requests that update java codePull requests that update java code

Test Automation

Status: Open.

#876 In OWASP/SecurityShepherd;

· ismisepaul opened on Jun 4, 2026

ci: least-privilege GITHUB_TOKEN and no long-lived tokens

Status: Open.

#865 In OWASP/SecurityShepherd;

· ismisepaul opened on May 31, 2026

perf: parallelize integration tests via GitHub Actions matrix sharding (4 shards)

Enhancement

github_actionsPull requests that update GitHub Actions codePull requests that update GitHub Actions code

Test Automation

Status: Open.

#863 In OWASP/SecurityShepherd;

· ismisepaul opened on May 29, 2026

Migrate from javax.* (Java EE) to jakarta.* (Jakarta EE 9+) to enable Spring 6 / modern stack

Enhancement

javaPull requests that update java codePull requests that update java code

Status: Open.

#861 In OWASP/SecurityShepherd;

· ismisepaul opened on May 29, 2026

Improve misleading "JavaScript validation bypassed" log message in AddPlayer

Status: Open.

#860 In OWASP/SecurityShepherd;

· ismisepaul opened on May 29, 2026

Replace inefficient new String() constructors in GetterIT.testSSOAuthExistingUserRelogin

Status: Open.

#859 In OWASP/SecurityShepherd;

· ismisepaul opened on May 29, 2026

Review/dismiss CodeQL double-checked-locking flag on MongoDatabase.baseMongoClient

Status: Open.

#858 In OWASP/SecurityShepherd;

· ismisepaul opened on May 29, 2026

Convert challenge/lesson servlets to try-with-resources (connection-leak cleanup)

Status: Open.

#857 In OWASP/SecurityShepherd;

· ismisepaul opened on May 29, 2026

Refactor remaining Getter.java JDBC sites to try-with-resources

Status: Open.

#855 In OWASP/SecurityShepherd;

· ismisepaul opened on May 29, 2026

Replace brittle Tomcat server.xml/web.xml patches with a robust mechanism

Status: Open.

#848 In OWASP/SecurityShepherd;

· ismisepaul opened on May 29, 2026