Constant Field Values

Contents

• com.denimgroup.*

com.denimgroup.*

com.denimgroup.threadfix.ObjectToSSVLParser

Modifier and Type	Constant Field	Value
public static final String	SSVL_SPEC_VERSION_0_3	"0.3"

com.denimgroup.threadfix.data.entities.Application

Modifier and Type	Constant Field	Value
public static final int	ENUM_LENGTH	50
public static final int	NAME_LENGTH	60
public static final String	TEMP_PASSWORD	"this is not the password"
public static final int	URL_LENGTH	255

com.denimgroup.threadfix.data.entities.ApplicationCriticality

Modifier and Type	Constant Field	Value
public static final String	CRITICAL	"Critical"
public static final String	HIGH	"High"
public static final String	LOW	"Low"
public static final String	MEDIUM	"Medium"

com.denimgroup.threadfix.data.entities.ChannelType

Modifier and Type	Constant Field	Value
public static final String	DYNAMIC	"Dynamic"
public static final String	MIXED	"Mixed"
public static final String	STATIC	"Static"

com.denimgroup.threadfix.data.entities.DataFlowElement

Modifier and Type	Constant Field	Value
public static final int	LINE_TEXT_LENGTH	250
public static final int	SOURCE_FILE_NAME_LENGTH	250

com.denimgroup.threadfix.data.entities.DefaultConfiguration

Modifier and Type	Constant Field	Value
public static final String	MASKED_PASSWORD	"dbnH3rDuZC2Nib"

com.denimgroup.threadfix.data.entities.Defect

Modifier and Type	Constant Field	Value
public static final int	STATUS_LENGTH	255
public static final int	URL_LENGTH	255

com.denimgroup.threadfix.data.entities.DefectTracker

Modifier and Type	Constant Field	Value
public static final int	DEFAULT_PASSWORD_LENGTH	50
public static final int	DEFAULT_PRODUCT_NAME_LENGTH	50
public static final int	DEFAULT_USERNAME_LENGTH	50
public static final int	ENCRYPTED_DEFAULT_PASSWORD_LENGTH	1024
public static final int	ENCRYPTED_DEFAULT_USERNAME_LENGTH	1024
public static final int	NAME_LENGTH	50
public static final int	URL_LENGTH	255

com.denimgroup.threadfix.data.entities.DefectTrackerType

Modifier and Type	Constant Field	Value
public static final String	BUGZILLA	"Bugzilla"
public static final String	HP_QUALITYCENTER	"HP Quality Center"
public static final String	JIRA	"JIRA"
public static final String	MICROSOFT_TFS	"Microsoft TFS"
public static final String	VERSION_ONE	"Version One"

com.denimgroup.threadfix.data.entities.DeletedRemoteProviderApplication

Modifier and Type	Constant Field	Value
public static final int	NATIVE_ID_LENGTH	1024
public static final int	NATIVE_NAME_LENGTH	1024

com.denimgroup.threadfix.data.entities.Document

Modifier and Type	Constant Field	Value
public static final int	MAX_LENGTH_NAME	256

com.denimgroup.threadfix.data.entities.Event

Modifier and Type	Constant Field	Value
public static final int	ENUM_LENGTH	50
public static final int	STATUS_LENGTH	255

com.denimgroup.threadfix.data.entities.Finding

Modifier and Type	Constant Field	Value
public static final int	ATTACK_REQUEST_LENGTH	1048575
public static final int	ATTACK_RESPONSE_LENGTH	1048575
public static final int	ATTACK_STRING_LENGTH	1048575
public static final int	ISSUE_ID_LENGTH	128
public static final int	LONG_DESCRIPTION_LENGTH	2047
public static final int	NATIVE_ID_LENGTH	50
public static final int	NUMBER_ITEM_PER_PAGE	100
public static final int	RAW_FINDING_LENGTH	1048575
public static final int	SCANNER_DETAIL_LENGTH	1048575
public static final int	SCANNER_RECOMMENDATION_LENGTH	1048575
public static final int	SOURCE_FILE_LOCATION_LENGTH	128
public static final int	URL_REFERENCE_LENGTH	256

com.denimgroup.threadfix.data.entities.GenericSeverity

Modifier and Type	Constant Field	Value
public static final String	CRITICAL	"Critical"
public static final String	HIGH	"High"
public static final String	INFO	"Info"
public static final String	LOW	"Low"
public static final String	MEDIUM	"Medium"

com.denimgroup.threadfix.data.entities.GenericVulnerability

Modifier and Type	Constant Field	Value
public static final String	CWE_BLIND_XPATH_INJECTION	"XML Injection (aka Blind XPath Injection)"
public static final String	CWE_CROSS_SITE_REQUEST_FORGERY	"Cross-Site Request Forgery (CSRF)"
public static final String	CWE_CROSS_SITE_SCRIPTING	"Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')"
public static final String	CWE_DEBUG_CODE	"Leftover Debug Code"
public static final String	CWE_DIRECT_REQUEST	"Direct Request (\'Forced Browsing\')"
public static final String	CWE_DIRECTORY_INDEXING	"Information Exposure Through Directory Listing"
public static final String	CWE_EVAL_INJECTION	"Improper Neutralization of Directives in Dynamically Evaluated Code (\'Eval Injection\')"
public static final String	CWE_FILE_UPLOAD	"Unrestricted Upload of File with Dangerous Type"
public static final String	CWE_FORMAT_STRING_INJECTION	"Use of Externally-Controlled Format String"
public static final String	CWE_GENERIC_INJECTION	"Improper Neutralization of Special Elements in Output Used by a Downstream Component (\'Injection\')"
public static final String	CWE_HTTP_RESPONSE_SPLITTING	"Improper Neutralization of CRLF Sequences in HTTP Headers (\'HTTP Response Splitting\')"
public static final String	CWE_INFORMATION_EXPOSURE	"Information Exposure"
public static final String	CWE_LDAP_INJECTION	"Improper Neutralization of Special Elements used in an LDAP Query (\'LDAP Injection\')"
public static final String	CWE_OS_COMMAND_INJECTION	"Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\')"
public static final String	CWE_PATH_TRAVERSAL	"Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')"
public static final String	CWE_PRIVACY_VIOLATION	"Privacy Violation"
public static final String	CWE_SQL_INJECTION	"Improper Neutralization of Special Elements used in an SQL Command (\'SQL Injection\')"
public static final String	CWE_XPATH_INJECTION	"Improper Neutralization of Data within XPath Expressions (\'XPath Injection\')"

com.denimgroup.threadfix.data.entities.GRCApplication

Modifier and Type	Constant Field	Value
public static final int	NAME_LENGTH	1024
public static final int	NATIVE_ID_LENGTH	32
public static final int	POLICY_NUMBER_LENGTH	32

com.denimgroup.threadfix.data.entities.GRCControl

Modifier and Type	Constant Field	Value
public static final int	NATIVE_ID_LENGTH	32
public static final int	STATUS_LENGTH	32
public static final int	URL_LENGTH	255

com.denimgroup.threadfix.data.entities.GRCTool

Modifier and Type	Constant Field	Value
public static final int	NAME_LENGTH	60
public static final int	PASSWORD_LENGTH	1024
public static final int	URL_LENGTH	255
public static final int	USERNAME_LENGTH	1024

com.denimgroup.threadfix.data.entities.GRCToolType

Modifier and Type	Constant Field	Value
public static final String	SERVICE_NOW	"Service Now"

com.denimgroup.threadfix.data.entities.Organization

Modifier and Type	Constant Field	Value
public static final int	NAME_LENGTH	60

com.denimgroup.threadfix.data.entities.RemoteProviderApplication

Modifier and Type	Constant Field	Value
public static final int	NATIVE_ID_LENGTH	1024
public static final int	NATIVE_NAME_LENGTH	1024

com.denimgroup.threadfix.data.entities.RemoteProviderType

Modifier and Type	Constant Field	Value
public static final int	API_KEY_LENGTH	1024
public static final int	NAME_LENGTH	60
public static final int	PASSWORD_LENGTH	1024
public static final int	USERNAME_LENGTH	1024

com.denimgroup.threadfix.data.entities.Report

Modifier and Type	Constant Field	Value
public static final int	FILE_PATH_LENGTH	255
public static final int	NAME_LENGTH	60

com.denimgroup.threadfix.data.entities.Role

Modifier and Type	Constant Field	Value
public static final int	DISPLAY_NAME_LENGTH	25
public static final int	NAME_LENGTH	25
public static final String	USER	"ROLE_USER"

com.denimgroup.threadfix.data.entities.Scan

Modifier and Type	Constant Field	Value
public static final String	DYNAMIC	"Dynamic"
public static final String	MIXED	"Mixed"
public static final String	STATIC	"Static"

com.denimgroup.threadfix.data.entities.ScannerDatabaseNames

Modifier and Type	Constant Field	Value
public static final String	ACUNETIX_WVS_DB_NAME	"Acunetix WVS"
public static final String	APP_SPIDER_DB_NAME	"AppSpider"
public static final String	APPSCAN_DYNAMIC_DB_NAME	"IBM Security AppScan Standard"
public static final String	APPSCAN_ENTERPRISE_DB_NAME	"IBM Security AppScan Enterprise"
public static final String	APPSCAN_SOURCE_DB_NAME	"IBM Security AppScan Source"
public static final String	ARACHNI_DB_NAME	"Arachni"
public static final String	BRAKEMAN_DB_NAME	"Brakeman"
public static final String	BURPSUITE_DB_NAME	"Burp Suite Pro"
public static final String	CAT_NET_DB_NAME	"Microsoft CAT.NET"
public static final String	CENZIC_HAILSTORM_DB_NAME	"Trustwave Hailstorm"
public static final String	CHECKMARX_DB_NAME	"CheckMarx"
public static final String	CLANG_DB_NAME	"Clang"
public static final String	CONTRAST_DB_NAME	"Contrast"
public static final String	CPPCHECK_DB_NAME	"Cppcheck"
public static final String	DEPENDENCY_CHECK_DB_NAME	"Dependency Check"
public static final String	FINDBUGS_DB_NAME	"FindBugs"
public static final String	FORTIFY_DB_NAME	"Fortify SCA"
public static final String	MANUAL_DB_NAME	"Manual"
public static final String	NESSUS_DB_NAME	"Nessus"
public static final String	NETSPARKER_DB_NAME	"Mavituna Security Netsparker"
public static final String	PMD_DB_NAME	"PMD"
public static final String	QUALYSGUARD_WAS_DB_NAME	"QualysGuard WAS"
public static final String	SCARF_DB_NAME	"SWAMP SCARF"
public static final String	SENTINEL_DB_NAME	"WhiteHat Sentinel"
public static final String	SKIPFISH_DB_NAME	"Skipfish"
public static final String	SONATYPE_DB_NAME	"Manual"
public static final String	SSVL_DB_NAME	"SSVL"
public static final String	VERACODE_DB_NAME	"Veracode"
public static final String	W3AF_DB_NAME	"w3af"
public static final String	WEBINSPECT_DB_NAME	"WebInspect"
public static final String	ZAPROXY_DB_NAME	"OWASP Zed Attack Proxy"

com.denimgroup.threadfix.data.entities.ScanQueueTask

Modifier and Type	Constant Field	Value
public static final String	SCANAGENT_CONFIG_FILE_EXTENSION	"scanagtcfg"

com.denimgroup.threadfix.data.entities.StaticPathInformation

Modifier and Type	Constant Field	Value
public static final int	NAME_LENGTH	250
public static final String	SPRING_MVC_TYPE	"Spring Method Mapping"
public static final int	TYPE_LENGTH	250
public static final int	VALUE_LENGTH	250

com.denimgroup.threadfix.data.entities.SurfaceLocation

Modifier and Type	Constant Field	Value
public static final int	HOST_LENGTH	255
public static final int	PARAMETER_LENGTH	255
public static final int	PATH_LENGTH	255
public static final int	QUERY_LENGTH	255

com.denimgroup.threadfix.data.entities.User

Modifier and Type	Constant Field	Value
public static final int	NAME_LENGTH	40
public static final int	PASSWORD_LENGTH	256

com.denimgroup.threadfix.data.entities.UserEventNotificationMap

Modifier and Type	Constant Field	Value
public static final int	ENUM_LENGTH	50

com.denimgroup.threadfix.data.entities.Vulnerability

Modifier and Type	Constant Field	Value
public static final int	ENUM_LENGTH	50

com.denimgroup.threadfix.data.entities.VulnerabilityComment

Modifier and Type	Constant Field	Value
public static final int	COMMENT_LENGTH	200

com.denimgroup.threadfix.data.entities.Waf

Modifier and Type	Constant Field	Value
public static final int	NAME_LENGTH	50

com.denimgroup.threadfix.data.entities.WafRule

Modifier and Type	Constant Field	Value
public static final int	PARAMETER_LENGTH	1024
public static final int	PATH_LENGTH	1024
public static final int	RULE_LENGTH	10000

com.denimgroup.threadfix.data.entities.WafType

Modifier and Type	Constant Field	Value
public static final String	BIG_IP_ASM	"BIG-IP ASM"
public static final String	DENY_ALL_RWEB	"DenyAll rWeb"
public static final String	IMPERVA_SECURE_SPHERE	"Imperva SecureSphere"
public static final String	MOD_SECURITY	"mod_security"
public static final String	RIVERBED_WEB_APP_FIREWALL	"SteelApp Web App Firewall"
public static final String	SNORT	"Snort"

com.denimgroup.threadfix.util.ValidationUtils

Modifier and Type	Constant Field	Value
public static final String	HTML_ERROR	"No HTML characters are allowed in custom names."