PatchWork AutoFix

WebContent/high_yield_investments.htm

@@ -124,7 +124,8 @@ <h1>High Yield Investments</h1>
         if any, to third party products and/or websites are purely coincidental. This site is
         provided "as is" without warranty of any kind, either express or implied. Watchfire does
         not assume any risk in relation to your use of this website. For additional Terms of Use,
-        please go to <a id="_ctl0__ctl0_HyperLink7" href="http://www.watchfire.com/statements/terms.aspx">http://www.watchfire.com/statements/terms.aspx</a>.<br /><br />
+        please go to <a id="_ctl0__ctl0_HyperLink7" href="https://www.watchfire.com/statements/terms.aspx">https://www.watchfire.com/statements/terms.aspx</a>.<br /><br />
+
 
         Copyright &copy; 2006, Watchfire Corporation, All rights reserved.
     </div>

WebContent/static/inside_about.htm

@@ -9,7 +9,7 @@ <h1>About Altoro Mutual</h1>
 <ul>
     <li><a href="index.jsp?content=inside_executives.htm">Executives & Management Team</a></li>
     <li><a href="index.jsp?content=inside_community.htm">Community Affairs</a></li>
-    <li><a href="http://www.newspapersyndications.tv">Analyst Reviews</a></li>
+    <li><a href="https://www.newspapersyndications.tv">Analyst Reviews</a></li>
     <li><a href="inside_points_of_interest.htm">Points of Interest</a></li>
 </ul>
 
@@ -22,4 +22,4 @@ <h1>About Altoro Mutual</h1>
 <span class="credit">
 Altoro Mutual offers a broad range of commercial, private, retail and mortgage banking services to small- and middle-market businesses and individuals.</span>
 
-</div>
+</div>

WebContent/static/inside_community.htm

@@ -9,9 +9,9 @@ <h2>Volunteering</h2>
 <p>The employees of Altoro Mutual not only give millions of dollars in donations but thousands of hours of volunteer time to their communities each year. Learn about our current <a href="index.jsp?content=inside_volunteering.htm">volunteer programs</a>.</p>
 
 <h2>Summer 2006</h2>
-<p>The 2006 community efforts of Altoro Mutual and our employees is quite impressive including charitable contributions, volunteerism, diversity initiatives, and other support.  <a href="pr/communityannualreport.pdf">View</a> the summary report (PDF, 800KB).</p>
+<p>The 2006 community efforts of Altoro Mutual and our employees is quite impressive including charitable contributions, volunteerism, diversity initiatives, and other support.  <a href="https://www.adobe.com/products/acrobat/readstep2.html">View</a> the summary report (PDF, 800KB).</p>
 
-<p><img src="images/adobe.gif" border=0 alt="Adobe Reader"><br />
-<a href="http://www.adobe.com/products/acrobat/readstep2.html">Download free Adobe Reader</a>.</p>
+<p><img src="images/adobe.gif" border=0><br />
+<a href="https://www.adobe.com/products/acrobat/readstep2.html">Download free Adobe Reader</a>.</p>
 
-</div>
+</div>

WebContent/static/security.htm

@@ -56,7 +56,7 @@ <h2>Keep Your System Up to Date</h2>
 <h2>Backups</h2>
 <p>It is a good practice to back up important files and folders on your computer. To back up files, you can make copies onto media that you can safely store elsewhere, such as CDs or floppy discs. </p>
 
-<p>For more information on home computer security, visit <a href="http://www.cert.org/">http://www.cert.org/</a>.</p>
+<p>For more information on home computer security, visit <a href="https://www.cert.org/">https://www.cert.org/</a>.</p>
 <p><a href="#top"><img alt="Back to Top" src="images/icon_top.gif" border="0" /></a>
 
 </div>

WebContent/swagger/lib/marked.js

@@ -308,7 +308,8 @@ Lexer.prototype.token = function(src, top, bq) {
         if (~item.indexOf('\n ')) {
           space -= item.length;
           item = !this.options.pedantic
-            ? item.replace(new RegExp('^ {1,' + space + '}', 'gm'), '')
+            ? item.replace(/^ {1,6}/gm, '')
+
             : item.replace(/^ {1,4}/gm, '');
         }
 
@@ -1095,8 +1096,8 @@ function unescape(html) {
   });
 }
 
-function replace(regex, opt) {
-  regex = regex.source;
+function replace(hardcodedRegex, opt) {
+  const regex = hardcodedRegex.source;
   opt = opt || '';
   return function self(name, val) {
     if (!name) return new RegExp(regex, opt);
@@ -1107,6 +1108,7 @@ function replace(regex, opt) {
   };
 }
 
+
 function noop() {}
 noop.exec = noop;
 

src/com/ibm/security/appscan/altoromutual/servlet/AdminServlet.java

@@ -59,9 +59,9 @@ else if (request.getRequestURL().toString().endsWith("addUser")){
 			String username = request.getParameter("username");
 			String password1 = request.getParameter("password1");
 			String password2 = request.getParameter("password2");
-			if (username == null || username.trim().length() == 0
-				|| password1 == null || password1.trim().length() == 0
-				|| password2 == null || password2.trim().length() == 0)
+			if ( (username == null || username.trim().length() == 0)
+					|| (password1 == null || password1.trim().length() == 0)
+					|| (password2 == null || password2.trim().length() == 0) )
 				message = "An error has occurred. Please try again later.";
 
 			if (firstname == null){
@@ -90,10 +90,10 @@ else if (request.getRequestURL().toString().endsWith("changePassword")){
 			String username = request.getParameter("username");
 			String password1 = request.getParameter("password1");
 			String password2 = request.getParameter("password2");
-			if (username == null || username.trim().length() == 0
-					|| password1 == null || password1.trim().length() == 0
-					|| password2 == null || password2.trim().length() == 0)
-					message = "An error has occurred. Please try again later.";
+			if ( (username == null || username.trim().length() == 0) 
+					|| (password1 == null || password1.trim().length() == 0) 
+					|| (password2 == null || password2.trim().length() == 0) )
+				message = "An error has occurred. Please try again later.";
 
 			if (message == null && !password1.equals(password2)){
 				message = "Entered passwords did not match.";
@@ -121,3 +121,4 @@ else if (request.getRequestURL().toString().endsWith("changePassword")){
 	}
 
 }
+

src/com/ibm/security/appscan/altoromutual/servlet/LoginServlet.java

@@ -92,6 +92,10 @@ protected void doPost(HttpServletRequest request, HttpServletResponse response)
 		//Handle the cookie using ServletUtil.establishSession(String)
 		try{
 			Cookie accountCookie = ServletUtil.establishSession(username,session);
+			//Set the HttpOnly flag for the cookie
+			accountCookie.setHttpOnly(true);
+			//Set the secure flag for the cookie
+			accountCookie.setSecure(true);
 			response.addCookie(accountCookie);
 			response.sendRedirect(request.getContextPath()+"/bank/main.jsp");
 			}
@@ -105,3 +109,4 @@ protected void doPost(HttpServletRequest request, HttpServletResponse response)
 	}
 
 }
+