From: akshay.khairnar@t-systems.com <akshay.khairnar@t-systems.com>
Date: Mon, 6 Oct 2025 05:54:07 +0000 (+0200)
Subject: Sonarqube bugs and security hotspot fixes
X-Git-Url: https://gerrit.onap.org/r/gitweb?a=commitdiff_plain;h=3eb735628e7b704ad28306a19f342a04b9243a45;p=aai%2Fschema-service.git

Sonarqube bugs and security hotspot fixes

- Replaced invalid SpEL expressions using @Value with proper syntax for list initialization.
- Updated regex pattern initialization to avoid excessive backtracking.

Issue-ID: AAI-4185
Change-Id: I84fa115e74bf5365b7eac7bbac413cb98c3487af
Signed-off-by: akshay.khairnar@t-systems.com <akshay.khairnar@t-systems.com>
---

diff --git a/aai-annotations/pom.xml b/aai-annotations/pom.xml
index 3da35f2d..a5da1cf3 100644
--- a/aai-annotations/pom.xml
+++ b/aai-annotations/pom.xml
@@ -27,7 +27,7 @@
     <parent>
         <groupId>org.onap.aai.schema-service</groupId>
         <artifactId>schema-service</artifactId>
-        <version>1.13.1-SNAPSHOT</version>
+        <version>1.13.2-SNAPSHOT</version>
     </parent>
     <artifactId>aai-annotations</artifactId>
     <name>aai-annotations</name>
diff --git a/aai-queries/pom.xml b/aai-queries/pom.xml
index f492574c..7e58e160 100644
--- a/aai-queries/pom.xml
+++ b/aai-queries/pom.xml
@@ -27,7 +27,7 @@
     <parent>
         <groupId>org.onap.aai.schema-service</groupId>
         <artifactId>schema-service</artifactId>
-        <version>1.13.1-SNAPSHOT</version>
+        <version>1.13.2-SNAPSHOT</version>
     </parent>
     <artifactId>aai-queries</artifactId>
     <name>aai-queries</name>
diff --git a/aai-schema-gen/pom.xml b/aai-schema-gen/pom.xml
index 0fa3bbd4..55c7106f 100644
--- a/aai-schema-gen/pom.xml
+++ b/aai-schema-gen/pom.xml
@@ -27,7 +27,7 @@
     <parent>
         <groupId>org.onap.aai.schema-service</groupId>
         <artifactId>schema-service</artifactId>
-        <version>1.13.1-SNAPSHOT</version>
+        <version>1.13.2-SNAPSHOT</version>
     </parent>
     <artifactId>aai-schema-gen</artifactId>
     <name>aai-schema-gen</name>
diff --git a/aai-schema-service/pom.xml b/aai-schema-service/pom.xml
index add572f1..bdbe6483 100644
--- a/aai-schema-service/pom.xml
+++ b/aai-schema-service/pom.xml
@@ -27,7 +27,7 @@
     <parent>
         <groupId>org.onap.aai.schema-service</groupId>
         <artifactId>schema-service</artifactId>
-        <version>1.13.1-SNAPSHOT</version>
+        <version>1.13.2-SNAPSHOT</version>
     </parent>
     <groupId>org.onap.aai.schema-service</groupId>
     <artifactId>aai-schema-service</artifactId>
diff --git a/aai-schema-service/src/main/java/org/onap/aai/schemaservice/config/SchemaLocationsBean.java b/aai-schema-service/src/main/java/org/onap/aai/schemaservice/config/SchemaLocationsBean.java
index 3582c5e2..a058d731 100644
--- a/aai-schema-service/src/main/java/org/onap/aai/schemaservice/config/SchemaLocationsBean.java
+++ b/aai-schema-service/src/main/java/org/onap/aai/schemaservice/config/SchemaLocationsBean.java
@@ -54,13 +54,13 @@ public class SchemaLocationsBean {
     @Value("${schema.edges.location}")
     private String edgeDirectory;
 
-    @Value("${schema.nodes.inclusion.list:}#{T(java.util.Arrays).asList(\".*oxm(.*).xml\")}")
+    @Value("#{'${schema.nodes.inclusion.list:.*oxm(.*).xml}'.split(',')}")
     private List<String> nodesInclusionPattern;
 
     @Value("${schema.nodes.exclusion.list:}#{T(java.util.Collections).emptyList()}")
     private List<String> nodesExclusionPattern;
 
-    @Value("${schema.edges.inclusion.list:}#{T(java.util.Arrays).asList(\"DbEdgeRules_.*.json\")}")
+    @Value("#{'${schema.edges.inclusion.list:DbEdgeRules_.*.json}'.split(',')}")
     private List<String> edgesInclusionPattern;
 
     @Value("${schema.edges.exclusion.list:}#{T(java.util.Collections).emptyList()}")
diff --git a/aai-schema-service/src/main/java/org/onap/aai/schemaservice/interceptors/pre/RequestHeaderManipulation.java b/aai-schema-service/src/main/java/org/onap/aai/schemaservice/interceptors/pre/RequestHeaderManipulation.java
index fea4a9b5..dcb068ec 100644
--- a/aai-schema-service/src/main/java/org/onap/aai/schemaservice/interceptors/pre/RequestHeaderManipulation.java
+++ b/aai-schema-service/src/main/java/org/onap/aai/schemaservice/interceptors/pre/RequestHeaderManipulation.java
@@ -38,7 +38,7 @@ import org.onap.aai.schemaservice.interceptors.AAIHeaderProperties;
 public class RequestHeaderManipulation extends AAIContainerFilter
     implements ContainerRequestFilter {
 
-    public static final Pattern EXTRACT_VERSION_PATTERN = Pattern.compile("^(v[1-9][0-9]*).*$");
+    private static final Pattern EXTRACT_VERSION_PATTERN = Pattern.compile("^(v[1-9]\\d{0,9}).*");
 
     @Override
     public void filter(ContainerRequestContext requestContext) {
diff --git a/aai-schema/pom.xml b/aai-schema/pom.xml
index edbe92b1..dc366f96 100644
--- a/aai-schema/pom.xml
+++ b/aai-schema/pom.xml
@@ -27,7 +27,7 @@
     <parent>
         <groupId>org.onap.aai.schema-service</groupId>
         <artifactId>schema-service</artifactId>
-        <version>1.13.1-SNAPSHOT</version>
+        <version>1.13.2-SNAPSHOT</version>
     </parent>
     <artifactId>aai-schema</artifactId>
     <name>aai-schema</name>
diff --git a/pom.xml b/pom.xml
index 242a089c..ecab7660 100644
--- a/pom.xml
+++ b/pom.xml
@@ -31,7 +31,7 @@
     </parent>
     <groupId>org.onap.aai.schema-service</groupId>
     <artifactId>schema-service</artifactId>
-    <version>1.13.1-SNAPSHOT</version>
+    <version>1.13.2-SNAPSHOT</version>
     <name>aai-schema-service</name>
     <packaging>pom</packaging>
     <modules>
diff --git a/version.properties b/version.properties
index ddff0da1..73100822 100644
--- a/version.properties
+++ b/version.properties
@@ -4,7 +4,7 @@
 # because they are used in Jenkins, whose plug-in doesn't support
 major_version=1
 minor_version=13
-patch_version=1
+patch_version=2
 
 base_version=${major_version}.${minor_version}.${patch_version}
 # Release must be completed with GIT information # in Jenkins