Made java-goof top level module. Moved all the todolist stuff into a …

…todolist-goof module.
snyk-labs · Dec 15, 2021 · 6ce14a5 · 6ce14a5
1 parent eff37ca
commit 6ce14a5
Showing 290 changed files with 2,538 additions and 82 deletions.
diff --git a/pom.xml b/pom.xml
@@ -3,99 +3,22 @@
     <modelVersion>4.0.0</modelVersion>
 
     <groupId>io.github.snyk</groupId>
-    <artifactId>todolist-mvc</artifactId>
+    <artifactId>java-goof</artifactId>
     <version>1.0-SNAPSHOT</version>
-    <name>Todolist MVC parent module</name>
-    <description>A vulnerable demo application, initially based on Ben Hassine's TodoMVC.</description>
-    <url>https://github.com/snyk/java-goof</url>
-
-    <properties>
-        <spring.version>3.2.6.RELEASE</spring.version>
-        <hibernate.version>4.3.7.Final</hibernate.version>
-        <tapestry.version>5.3.8</tapestry.version>
-        <struts2.version>2.3.20</struts2.version>
-        <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
-    </properties>
+    <name>Java Goof</name>
+    <description>A collection of vulnerable Java apps</description>
+    <url>https://github.com/snyk-labs/java-goof</url>
 
     <modules>
-        <module>todolist-core</module>
-        <module>todolist-web-common</module>
-        <module>todolist-web-struts</module>
+        <module>todolist-goof</module>
     </modules>
     <packaging>pom</packaging>
 
-    <dependencies>
-        <dependency>
-            <groupId>javax.xml.bind</groupId>
-            <artifactId>jaxb-api</artifactId>
-            <version>2.3.0</version>
-        </dependency>
-        <dependency>
-            <groupId>com.sun.xml.bind</groupId>
-            <artifactId>jaxb-core</artifactId>
-            <version>2.3.0</version>
-        </dependency>
-        <dependency>
-            <groupId>com.sun.xml.bind</groupId>
-            <artifactId>jaxb-impl</artifactId>
-            <version>2.3.0</version>
-        </dependency>
-    </dependencies>
 
     <licenses>
         <license>
             <name>MIT License</name>
             <url>http://opensource.org/licenses/mit-license.php</url>
         </license>
     </licenses>
-
-    <build>
-        <pluginManagement>
-            <plugins>
-                <plugin>
-                    <groupId>org.apache.maven.plugins</groupId>
-                    <artifactId>maven-compiler-plugin</artifactId>
-                    <version>3.2</version>
-                    <configuration>
-                        <verbose>true</verbose>
-                        <source>1.7</source>
-                        <target>1.7</target>
-                        <showWarnings>true</showWarnings>
-                    </configuration>
-                </plugin>
-                <plugin>
-                    <groupId>org.apache.maven.plugins</groupId>
-                    <artifactId>maven-dependency-plugin</artifactId>
-                    <version>2.9</version>
-                    <executions>
-                        <execution>
-                            <id>install</id>
-                            <phase>install</phase>
-                            <goals>
-                                <goal>sources</goal>
-                            </goals>
-                        </execution>
-                    </executions>
-                </plugin>
-                <plugin>
-                    <groupId>org.apache.maven.plugins</groupId>
-                    <artifactId>maven-war-plugin</artifactId>
-                    <version>3.2.3</version>
-                    <configuration>
-                        <warName>todolist</warName>
-                    </configuration>
-                </plugin>
-                <plugin>
-                    <groupId>org.apache.tomcat.maven</groupId>
-                    <artifactId>tomcat7-maven-plugin</artifactId>
-                    <version>2.2</version>
-                    <configuration>
-                        <warFile>target/todolist.war</warFile>
-                        <path>/</path>
-                    </configuration>
-                </plugin>
-            </plugins>
-        </pluginManagement>
-    </build>
-
 </project>
diff --git a/DEPLOY_HEROKU.md → todolist-goof/DEPLOY_HEROKU.md b/DEPLOY_HEROKU.md → todolist-goof/DEPLOY_HEROKU.md
diff --git a/Dockerfile → todolist-goof/Dockerfile b/Dockerfile → todolist-goof/Dockerfile
diff --git a/Procfile → todolist-goof/Procfile b/Procfile → todolist-goof/Procfile
diff --git a/README.md → todolist-goof/README.md b/README.md → todolist-goof/README.md
diff --git a/docker-compose.yml → todolist-goof/docker-compose.yml b/docker-compose.yml → todolist-goof/docker-compose.yml
diff --git a/exploits/http-vuln-struts-detection.nse → ...f/exploits/http-vuln-struts-detection.nse b/exploits/http-vuln-struts-detection.nse → ...f/exploits/http-vuln-struts-detection.nse
diff --git a/exploits/loc-stats.txt → todolist-goof/exploits/loc-stats.txt b/exploits/loc-stats.txt → todolist-goof/exploits/loc-stats.txt
diff --git a/exploits/struts-aliases.sh → todolist-goof/exploits/struts-aliases.sh b/exploits/struts-aliases.sh → todolist-goof/exploits/struts-aliases.sh
diff --git a/exploits/struts-exploit-docker-tomcat.sh → .../exploits/struts-exploit-docker-tomcat.sh b/exploits/struts-exploit-docker-tomcat.sh → .../exploits/struts-exploit-docker-tomcat.sh
diff --git a/exploits/struts-exploit-headers.txt → ...-goof/exploits/struts-exploit-headers.txt b/exploits/struts-exploit-headers.txt → ...-goof/exploits/struts-exploit-headers.txt
diff --git a/exploits/struts-exploit.sh → todolist-goof/exploits/struts-exploit.sh b/exploits/struts-exploit.sh → todolist-goof/exploits/struts-exploit.sh
diff --git a/exploits/tomcat-rce.sh → todolist-goof/exploits/tomcat-rce.sh b/exploits/tomcat-rce.sh → todolist-goof/exploits/tomcat-rce.sh
diff --git a/exploits/tomcat-rce/Dockerfile → todolist-goof/exploits/tomcat-rce/Dockerfile b/exploits/tomcat-rce/Dockerfile → todolist-goof/exploits/tomcat-rce/Dockerfile
diff --git a/exploits/tomcat-rce/README.md → todolist-goof/exploits/tomcat-rce/README.md b/exploits/tomcat-rce/README.md → todolist-goof/exploits/tomcat-rce/README.md
diff --git a/exploits/tomcat-rce/dpkg-cmd.png → ...ist-goof/exploits/tomcat-rce/dpkg-cmd.png b/exploits/tomcat-rce/dpkg-cmd.png → ...ist-goof/exploits/tomcat-rce/dpkg-cmd.png
diff --git a/exploits/tomcat-rce/exploit.py → todolist-goof/exploits/tomcat-rce/exploit.py b/exploits/tomcat-rce/exploit.py → todolist-goof/exploits/tomcat-rce/exploit.py
diff --git a/exploits/tomcat-rce/whoami-cmd.png → ...t-goof/exploits/tomcat-rce/whoami-cmd.png b/exploits/tomcat-rce/whoami-cmd.png → ...t-goof/exploits/tomcat-rce/whoami-cmd.png
diff --git a/exploits/zip-slip-tempdir.zip → todolist-goof/exploits/zip-slip-tempdir.zip b/exploits/zip-slip-tempdir.zip → todolist-goof/exploits/zip-slip-tempdir.zip
diff --git a/exploits/zip-slip.py → todolist-goof/exploits/zip-slip.py b/exploits/zip-slip.py → todolist-goof/exploits/zip-slip.py
diff --git a/exploits/zip-slip.zip → todolist-goof/exploits/zip-slip.zip b/exploits/zip-slip.zip → todolist-goof/exploits/zip-slip.zip
diff --git a/exploits/zipslip-docker-tomcat.zip → ...t-goof/exploits/zipslip-docker-tomcat.zip b/exploits/zipslip-docker-tomcat.zip → ...t-goof/exploits/zipslip-docker-tomcat.zip
diff --git a/out/production/localhost/SESSIONS.ser → ...oof/out/production/localhost/SESSIONS.ser b/out/production/localhost/SESSIONS.ser → ...oof/out/production/localhost/SESSIONS.ser
diff --git a/todolist-goof/pom.xml b/todolist-goof/pom.xml
@@ -0,0 +1,107 @@
+<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
+    <modelVersion>4.0.0</modelVersion>
+
+    <parent>
+        <artifactId>java-goof</artifactId>
+        <groupId>io.github.snyk</groupId>
+        <version>1.0-SNAPSHOT</version>
+    </parent>
+
+    <groupId>io.github.snyk</groupId>
+    <artifactId>todolist-mvc</artifactId>
+    <version>1.0-SNAPSHOT</version>
+    <name>Todolist MVC parent module</name>
+    <description>A vulnerable demo application, initially based on Ben Hassine's TodoMVC.</description>
+    <url>https://github.com/snyk/java-goof</url>
+
+    <properties>
+        <spring.version>3.2.6.RELEASE</spring.version>
+        <hibernate.version>4.3.7.Final</hibernate.version>
+        <tapestry.version>5.3.8</tapestry.version>
+        <struts2.version>2.3.20</struts2.version>
+        <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
+    </properties>
+
+    <modules>
+        <module>todolist-core</module>
+        <module>todolist-web-common</module>
+        <module>todolist-web-struts</module>
+    </modules>
+    <packaging>pom</packaging>
+
+    <dependencies>
+        <dependency>
+            <groupId>javax.xml.bind</groupId>
+            <artifactId>jaxb-api</artifactId>
+            <version>2.3.0</version>
+        </dependency>
+        <dependency>
+            <groupId>com.sun.xml.bind</groupId>
+            <artifactId>jaxb-core</artifactId>
+            <version>2.3.0</version>
+        </dependency>
+        <dependency>
+            <groupId>com.sun.xml.bind</groupId>
+            <artifactId>jaxb-impl</artifactId>
+            <version>2.3.0</version>
+        </dependency>
+    </dependencies>
+
+    <licenses>
+        <license>
+            <name>MIT License</name>
+            <url>http://opensource.org/licenses/mit-license.php</url>
+        </license>
+    </licenses>
+
+    <build>
+        <pluginManagement>
+            <plugins>
+                <plugin>
+                    <groupId>org.apache.maven.plugins</groupId>
+                    <artifactId>maven-compiler-plugin</artifactId>
+                    <version>3.2</version>
+                    <configuration>
+                        <verbose>true</verbose>
+                        <source>1.7</source>
+                        <target>1.7</target>
+                        <showWarnings>true</showWarnings>
+                    </configuration>
+                </plugin>
+                <plugin>
+                    <groupId>org.apache.maven.plugins</groupId>
+                    <artifactId>maven-dependency-plugin</artifactId>
+                    <version>2.9</version>
+                    <executions>
+                        <execution>
+                            <id>install</id>
+                            <phase>install</phase>
+                            <goals>
+                                <goal>sources</goal>
+                            </goals>
+                        </execution>
+                    </executions>
+                </plugin>
+                <plugin>
+                    <groupId>org.apache.maven.plugins</groupId>
+                    <artifactId>maven-war-plugin</artifactId>
+                    <version>3.2.3</version>
+                    <configuration>
+                        <warName>todolist</warName>
+                    </configuration>
+                </plugin>
+                <plugin>
+                    <groupId>org.apache.tomcat.maven</groupId>
+                    <artifactId>tomcat7-maven-plugin</artifactId>
+                    <version>2.2</version>
+                    <configuration>
+                        <warFile>target/todolist.war</warFile>
+                        <path>/</path>
+                    </configuration>
+                </plugin>
+            </plugins>
+        </pluginManagement>
+    </build>
+
+</project>
diff --git a/src/site/screenshots/todolist-home.png → ...of/src/site/screenshots/todolist-home.png b/src/site/screenshots/todolist-home.png → ...of/src/site/screenshots/todolist-home.png
diff --git a/src/site/screenshots/todolist-index.png → ...f/src/site/screenshots/todolist-index.png b/src/site/screenshots/todolist-index.png → ...f/src/site/screenshots/todolist-index.png
diff --git a/src/site/screenshots/todolist-search.png → .../src/site/screenshots/todolist-search.png b/src/site/screenshots/todolist-search.png → .../src/site/screenshots/todolist-search.png
diff --git a/src/site/screenshots/todolist-signin.png → .../src/site/screenshots/todolist-signin.png b/src/site/screenshots/todolist-signin.png → .../src/site/screenshots/todolist-signin.png
diff --git a/src/site/template/about.html → todolist-goof/src/site/template/about.html b/src/site/template/about.html → todolist-goof/src/site/template/about.html
diff --git a/src/site/template/account.html → todolist-goof/src/site/template/account.html b/src/site/template/account.html → todolist-goof/src/site/template/account.html
diff --git a/src/site/template/createTodo.html → ...st-goof/src/site/template/createTodo.html b/src/site/template/createTodo.html → ...st-goof/src/site/template/createTodo.html
diff --git a/src/site/template/home.html → todolist-goof/src/site/template/home.html b/src/site/template/home.html → todolist-goof/src/site/template/home.html
diff --git a/src/site/template/index.html → todolist-goof/src/site/template/index.html b/src/site/template/index.html → todolist-goof/src/site/template/index.html
diff --git a/src/site/template/login-error.html → ...t-goof/src/site/template/login-error.html b/src/site/template/login-error.html → ...t-goof/src/site/template/login-error.html
diff --git a/src/site/template/login.html → todolist-goof/src/site/template/login.html b/src/site/template/login.html → todolist-goof/src/site/template/login.html
diff --git a/src/site/template/register.html → ...list-goof/src/site/template/register.html b/src/site/template/register.html → ...list-goof/src/site/template/register.html
diff --git a/src/site/template/searchTodo.html → ...st-goof/src/site/template/searchTodo.html b/src/site/template/searchTodo.html → ...st-goof/src/site/template/searchTodo.html
diff --git a/...ite/template/static/css/bootstrap.min.css → ...ite/template/static/css/bootstrap.min.css b/...ite/template/static/css/bootstrap.min.css → ...ite/template/static/css/bootstrap.min.css
diff --git a/src/site/template/static/css/datepicker.css → ...c/site/template/static/css/datepicker.css b/src/site/template/static/css/datepicker.css → ...c/site/template/static/css/datepicker.css
diff --git a/...static/img/glyphicons-halflings-white.png → ...static/img/glyphicons-halflings-white.png b/...static/img/glyphicons-halflings-white.png → ...static/img/glyphicons-halflings-white.png
diff --git a/...plate/static/img/glyphicons-halflings.png → ...plate/static/img/glyphicons-halflings.png b/...plate/static/img/glyphicons-halflings.png → ...plate/static/img/glyphicons-halflings.png
diff --git a/src/site/template/static/img/todolist.ico → ...src/site/template/static/img/todolist.ico b/src/site/template/static/img/todolist.ico → ...src/site/template/static/img/todolist.ico
diff --git a/src/site/template/static/img/todolist.jpg → ...src/site/template/static/img/todolist.jpg b/src/site/template/static/img/todolist.jpg → ...src/site/template/static/img/todolist.jpg
diff --git a/...emplate/static/js/bootstrap-datepicker.js → ...emplate/static/js/bootstrap-datepicker.js b/...emplate/static/js/bootstrap-datepicker.js → ...emplate/static/js/bootstrap-datepicker.js
diff --git a/src/site/template/static/js/bootstrap.min.js → .../site/template/static/js/bootstrap.min.js b/src/site/template/static/js/bootstrap.min.js → .../site/template/static/js/bootstrap.min.js
diff --git a/...e/template/static/js/jquery-1.10.2.min.js → ...e/template/static/js/jquery-1.10.2.min.js b/...e/template/static/js/jquery-1.10.2.min.js → ...e/template/static/js/jquery-1.10.2.min.js
diff --git a/src/site/template/updateTodo.html → ...st-goof/src/site/template/updateTodo.html b/src/site/template/updateTodo.html → ...st-goof/src/site/template/updateTodo.html
diff --git a/todolist-core/pom.xml → todolist-goof/todolist-core/pom.xml b/todolist-core/pom.xml → todolist-goof/todolist-core/pom.xml
diff --git a/...java/io/github/todolist/core/Statics.java → ...java/io/github/todolist/core/Statics.java b/...java/io/github/todolist/core/Statics.java → ...java/io/github/todolist/core/Statics.java
diff --git a/...github/todolist/core/domain/Priority.java → ...github/todolist/core/domain/Priority.java b/...github/todolist/core/domain/Priority.java → ...github/todolist/core/domain/Priority.java
diff --git a/.../io/github/todolist/core/domain/Todo.java → .../io/github/todolist/core/domain/Todo.java b/.../io/github/todolist/core/domain/Todo.java → .../io/github/todolist/core/domain/Todo.java
diff --git a/.../io/github/todolist/core/domain/User.java → .../io/github/todolist/core/domain/User.java b/.../io/github/todolist/core/domain/User.java → .../io/github/todolist/core/domain/User.java
diff --git a/...t/core/repository/api/TodoRepository.java → ...t/core/repository/api/TodoRepository.java b/...t/core/repository/api/TodoRepository.java → ...t/core/repository/api/TodoRepository.java
diff --git a/...t/core/repository/api/UserRepository.java → ...t/core/repository/api/UserRepository.java b/...t/core/repository/api/UserRepository.java → ...t/core/repository/api/UserRepository.java
diff --git a/...e/repository/impl/TodoRepositoryImpl.java → ...e/repository/impl/TodoRepositoryImpl.java b/...e/repository/impl/TodoRepositoryImpl.java → ...e/repository/impl/TodoRepositoryImpl.java
diff --git a/...e/repository/impl/UserRepositoryImpl.java → ...e/repository/impl/UserRepositoryImpl.java b/...e/repository/impl/UserRepositoryImpl.java → ...e/repository/impl/UserRepositoryImpl.java
diff --git a/...odolist/core/service/api/TodoService.java → ...odolist/core/service/api/TodoService.java b/...odolist/core/service/api/TodoService.java → ...odolist/core/service/api/TodoService.java
diff --git a/...odolist/core/service/api/UserService.java → ...odolist/core/service/api/UserService.java b/...odolist/core/service/api/UserService.java → ...odolist/core/service/api/UserService.java
diff --git a/...st/core/service/impl/TodoServiceImpl.java → ...st/core/service/impl/TodoServiceImpl.java b/...st/core/service/impl/TodoServiceImpl.java → ...st/core/service/impl/TodoServiceImpl.java
diff --git a/...st/core/service/impl/UserServiceImpl.java → ...st/core/service/impl/UserServiceImpl.java b/...st/core/service/impl/UserServiceImpl.java → ...st/core/service/impl/UserServiceImpl.java
diff --git a/...c/main/resources/META-INF/persistence.xml → ...c/main/resources/META-INF/persistence.xml b/...c/main/resources/META-INF/persistence.xml → ...c/main/resources/META-INF/persistence.xml
diff --git a/...s/META-INF/spring/application-context.xml → ...s/META-INF/spring/application-context.xml b/...s/META-INF/spring/application-context.xml → ...s/META-INF/spring/application-context.xml
diff --git a/...ETA-INF/spring/infrastructure-context.xml → ...ETA-INF/spring/infrastructure-context.xml b/...ETA-INF/spring/infrastructure-context.xml → ...ETA-INF/spring/infrastructure-context.xml
diff --git a/...t-core/src/main/resources/config/data.sql → ...t-core/src/main/resources/config/data.sql b/...t-core/src/main/resources/config/data.sql → ...t-core/src/main/resources/config/data.sql
diff --git a/...main/resources/config/database.properties → ...main/resources/config/database.properties b/...main/resources/config/database.properties → ...main/resources/config/database.properties
diff --git a/...ain/resources/config/hibernate.properties → ...ain/resources/config/hibernate.properties b/...ain/resources/config/hibernate.properties → ...ain/resources/config/hibernate.properties
diff --git a/...core/src/main/resources/config/schema.sql → ...core/src/main/resources/config/schema.sql b/...core/src/main/resources/config/schema.sql → ...core/src/main/resources/config/schema.sql
diff --git a/...-core/src/main/resources/log4j.properties → ...-core/src/main/resources/log4j.properties b/...-core/src/main/resources/log4j.properties → ...-core/src/main/resources/log4j.properties
diff --git a/...github/todolist/core/TodoServiceTest.java → ...github/todolist/core/TodoServiceTest.java b/...github/todolist/core/TodoServiceTest.java → ...github/todolist/core/TodoServiceTest.java
diff --git a/...github/todolist/core/UserServiceTest.java → ...github/todolist/core/UserServiceTest.java b/...github/todolist/core/UserServiceTest.java → ...github/todolist/core/UserServiceTest.java
diff --git a/todolist-goof/todolist-core/target/classes/META-INF/persistence.xml b/todolist-goof/todolist-core/target/classes/META-INF/persistence.xml
@@ -0,0 +1,15 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<persistence xmlns="http://java.sun.com/xml/ns/persistence" version="2.0">
+
+    <persistence-unit name="todolist_pu" transaction-type="RESOURCE_LOCAL">
+        <provider>org.hibernate.jpa.HibernatePersistenceProvider</provider>
+        <properties>
+            <property name="hibernate.dialect" value="org.hibernate.dialect.HSQLDialect"/>
+            <property name="hibernate.connection.url" value="jdbc:hsqldb:mem:todolist"/>
+            <property name="hibernate.connection.driver_class" value="org.hsqldb.jdbcDriver"/>
+            <property name="hibernate.connection.username" value="sa"/>
+            <property name="hibernate.connection.password" value=""/>
+        </properties>
+    </persistence-unit>
+</persistence>
diff --git a/todolist-goof/todolist-core/target/classes/META-INF/spring/application-context.xml b/todolist-goof/todolist-core/target/classes/META-INF/spring/application-context.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<beans xmlns="http://www.springframework.org/schema/beans"
+       xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+       xsi:schemaLocation="http://www.springframework.org/schema/beans
+       http://www.springframework.org/schema/beans/spring-beans-3.2.xsd">
+
+    <import resource="infrastructure-context.xml"/>
+
+    <!-- ========================== -->
+    <!--   Business configuration   -->
+    <!-- ========================== -->
+
+    <bean id="userRepository" class="io.github.todolist.core.repository.impl.UserRepositoryImpl"/>
+    <bean id="todoRepository" class="io.github.todolist.core.repository.impl.TodoRepositoryImpl"/>
+
+    <bean id="userService" class="io.github.todolist.core.service.impl.UserServiceImpl"/>
+    <bean id="todoService" class="io.github.todolist.core.service.impl.TodoServiceImpl"/>
+
+</beans>
diff --git a/todolist-goof/todolist-core/target/classes/META-INF/spring/infrastructure-context.xml b/todolist-goof/todolist-core/target/classes/META-INF/spring/infrastructure-context.xml
@@ -0,0 +1,51 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<beans xmlns="http://www.springframework.org/schema/beans"
+       xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+       xmlns:jdbc="http://www.springframework.org/schema/jdbc"
+       xmlns:context="http://www.springframework.org/schema/context"
+       xmlns:tx="http://www.springframework.org/schema/tx"
+       xsi:schemaLocation="http://www.springframework.org/schema/beans
+       http://www.springframework.org/schema/beans/spring-beans-3.2.xsd
+       http://www.springframework.org/schema/jdbc
+       http://www.springframework.org/schema/jdbc/spring-jdbc-3.2.xsd
+       http://www.springframework.org/schema/context
+       http://www.springframework.org/schema/context/spring-context-3.2.xsd
+       http://www.springframework.org/schema/tx
+       http://www.springframework.org/schema/tx/spring-tx-3.2.xsd">
+
+    <context:property-placeholder location="classpath:config/*.properties"/>
+
+    <context:annotation-config/>
+
+    <!-- ======================================== -->
+    <!--      embedded database configuration     -->
+    <!-- ======================================== -->
+
+    <bean id="todolistDataSource" class="com.mchange.v2.c3p0.ComboPooledDataSource" destroy-method="close">
+        <property name="driverClass" value="${db.driver}"/>
+        <property name="jdbcUrl" value="${db.url}"/>
+        <property name="user" value="${db.username}"/>
+        <property name="password" value="${db.password}"/>
+    </bean>
+
+    <jdbc:initialize-database data-source="todolistDataSource">
+        <jdbc:script location="classpath:config/schema.sql"/>
+        <jdbc:script location="classpath:config/data.sql"/>
+    </jdbc:initialize-database>
+
+    <bean class="org.springframework.orm.jpa.LocalContainerEntityManagerFactoryBean" id="entityManagerFactory">
+        <property name="persistenceUnitName" value="todolist_pu"/>
+        <property name="dataSource" ref="todolistDataSource"/>
+    </bean>
+
+    <bean id="transactionManager" class="org.springframework.orm.jpa.JpaTransactionManager">
+        <property name="entityManagerFactory" ref="entityManagerFactory"/>
+        <property name="dataSource" ref="todolistDataSource"/>
+    </bean>
+
+    <tx:annotation-driven/>
+
+    <bean class="org.springframework.orm.jpa.support.PersistenceAnnotationBeanPostProcessor" />
+
+</beans>
diff --git a/todolist-goof/todolist-core/target/classes/config/data.sql b/todolist-goof/todolist-core/target/classes/config/data.sql
@@ -0,0 +1,16 @@
+--users
+INSERT INTO user VALUES (1,'Foo','[email protected]', 'foobar');
+INSERT INTO user VALUES (2,'Bar','[email protected]', 'barfoo');
+
+--todos
+
+INSERT INTO todo VALUES (1,1,'Prepare birthday party', true, 1,'2014-05-25');
+INSERT INTO todo VALUES (2,1,'Wash the car', true, 1,'2014-02-02');
+INSERT INTO todo VALUES (3,1,'Take out the trash', false, 2,'2014-10-11');
+INSERT INTO todo VALUES (4,1,'Buy a gift for mom', true, 2,'2014-07-25');
+INSERT INTO todo VALUES (5,1,'Remember the milk', false, 0,'2014-08-12');
+INSERT INTO todo VALUES (6,1,'Prepare for interview', true, 0,'2014-08-12');
+INSERT INTO todo VALUES (7,1,'Email David about project', true, 2,'2014-10-10');
+INSERT INTO todo VALUES (8,1,'Feed the dog', false, 0,'2014-12-12');
+INSERT INTO todo VALUES (9,1,'Change password', false, 1,'2014-04-30');
+INSERT INTO todo VALUES (10,1,'Send weekly reports', false, 2,'2014-08-22');
diff --git a/todolist-goof/todolist-core/target/classes/config/database.properties b/todolist-goof/todolist-core/target/classes/config/database.properties
@@ -0,0 +1,5 @@
+#HSQL in-memory db
+db.driver=org.hsqldb.jdbcDriver
+db.url=jdbc:hsqldb:mem:todolist
+db.username=sa
+db.password=
diff --git a/todolist-goof/todolist-core/target/classes/config/hibernate.properties b/todolist-goof/todolist-core/target/classes/config/hibernate.properties
@@ -0,0 +1,4 @@
+hibernate.dialect=org.hibernate.dialect.HSQLDialect
+hibernate.show_sql=false
+hibernate.format_sql=false
+hibernate.use_sql_comments=true
diff --git a/todolist-goof/todolist-core/target/classes/config/schema.sql b/todolist-goof/todolist-core/target/classes/config/schema.sql
@@ -0,0 +1,19 @@
+CREATE TABLE user (
+  id int IDENTITY NOT NULL PRIMARY KEY,
+  name varchar(32) DEFAULT NULL,
+  email varchar(32) NOT NULL,
+  password varchar(32) DEFAULT NULL
+);
+
+ALTER TABLE user ADD CONSTRAINT unique_email UNIQUE (email);
+
+CREATE TABLE todo (
+  id int IDENTITY NOT NULL PRIMARY KEY,
+  userId int NOT NULL,
+  title varchar(512) DEFAULT NULL,
+  done boolean DEFAULT FALSE NOT NULL,
+  priority tinyint NOT NULL,
+  dueDate date DEFAULT NULL
+);
+
+alter table todo add constraint user_fk foreign key (userId) references user(id);
diff --git a/todolist-goof/todolist-core/target/classes/io/github/todolist/core/Statics.class b/todolist-goof/todolist-core/target/classes/io/github/todolist/core/Statics.class
diff --git a/todolist-goof/todolist-core/target/classes/io/github/todolist/core/domain/Priority.class b/todolist-goof/todolist-core/target/classes/io/github/todolist/core/domain/Priority.class
diff --git a/todolist-goof/todolist-core/target/classes/io/github/todolist/core/domain/Todo.class b/todolist-goof/todolist-core/target/classes/io/github/todolist/core/domain/Todo.class
diff --git a/todolist-goof/todolist-core/target/classes/io/github/todolist/core/domain/User.class b/todolist-goof/todolist-core/target/classes/io/github/todolist/core/domain/User.class
diff --git a/.../todolist-core/target/classes/io/github/todolist/core/repository/api/TodoRepository.class b/.../todolist-core/target/classes/io/github/todolist/core/repository/api/TodoRepository.class
diff --git a/.../todolist-core/target/classes/io/github/todolist/core/repository/api/UserRepository.class b/.../todolist-core/target/classes/io/github/todolist/core/repository/api/UserRepository.class
diff --git a/...list-core/target/classes/io/github/todolist/core/repository/impl/TodoRepositoryImpl.class b/...list-core/target/classes/io/github/todolist/core/repository/impl/TodoRepositoryImpl.class
diff --git a/...list-core/target/classes/io/github/todolist/core/repository/impl/UserRepositoryImpl.class b/...list-core/target/classes/io/github/todolist/core/repository/impl/UserRepositoryImpl.class
diff --git a/...t-goof/todolist-core/target/classes/io/github/todolist/core/service/api/TodoService.class b/...t-goof/todolist-core/target/classes/io/github/todolist/core/service/api/TodoService.class
diff --git a/...t-goof/todolist-core/target/classes/io/github/todolist/core/service/api/UserService.class b/...t-goof/todolist-core/target/classes/io/github/todolist/core/service/api/UserService.class
diff --git a/...f/todolist-core/target/classes/io/github/todolist/core/service/impl/TodoServiceImpl.class b/...f/todolist-core/target/classes/io/github/todolist/core/service/impl/TodoServiceImpl.class
diff --git a/...f/todolist-core/target/classes/io/github/todolist/core/service/impl/UserServiceImpl.class b/...f/todolist-core/target/classes/io/github/todolist/core/service/impl/UserServiceImpl.class
diff --git a/todolist-goof/todolist-core/target/classes/log4j.properties b/todolist-goof/todolist-core/target/classes/log4j.properties
@@ -0,0 +1,7 @@
+log4j.rootLogger=error, stderr
+
+#log messages to stderr
+log4j.appender.stderr=org.apache.log4j.ConsoleAppender
+log4j.appender.stderr.Target=System.err
+log4j.appender.stderr.layout=org.apache.log4j.PatternLayout
+log4j.appender.stderr.layout.ConversionPattern= %d{dd/MM/yyyy HH:mm:ss} [%-5p] %c:%L - %m%n
diff --git a/todolist-goof/todolist-core/target/maven-archiver/pom.properties b/todolist-goof/todolist-core/target/maven-archiver/pom.properties
@@ -0,0 +1,5 @@
+#Generated by Maven
+#Tue Dec 14 22:38:34 EST 2021
+version=1.0-SNAPSHOT
+groupId=io.github.snyk
+artifactId=todolist-core
diff --git a/...t-core/target/maven-status/maven-compiler-plugin/compile/default-compile/createdFiles.lst b/...t-core/target/maven-status/maven-compiler-plugin/compile/default-compile/createdFiles.lst
@@ -0,0 +1,12 @@
+io/github/todolist/core/Statics.class
+io/github/todolist/core/domain/User.class
+io/github/todolist/core/repository/api/TodoRepository.class
+io/github/todolist/core/service/api/TodoService.class
+io/github/todolist/core/domain/Priority.class
+io/github/todolist/core/repository/api/UserRepository.class
+io/github/todolist/core/service/impl/UserServiceImpl.class
+io/github/todolist/core/service/api/UserService.class
+io/github/todolist/core/repository/impl/UserRepositoryImpl.class
+io/github/todolist/core/repository/impl/TodoRepositoryImpl.class
+io/github/todolist/core/service/impl/TodoServiceImpl.class
+io/github/todolist/core/domain/Todo.class
diff --git a/...ist-core/target/maven-status/maven-compiler-plugin/compile/default-compile/inputFiles.lst b/...ist-core/target/maven-status/maven-compiler-plugin/compile/default-compile/inputFiles.lst
@@ -0,0 +1,12 @@
+/Users/micahsilverman/Projects/snyk/goofs/java-goof/todolist-goof/todolist-core/src/main/java/io/github/todolist/core/service/api/UserService.java
+/Users/micahsilverman/Projects/snyk/goofs/java-goof/todolist-goof/todolist-core/src/main/java/io/github/todolist/core/repository/impl/TodoRepositoryImpl.java
+/Users/micahsilverman/Projects/snyk/goofs/java-goof/todolist-goof/todolist-core/src/main/java/io/github/todolist/core/service/impl/UserServiceImpl.java
+/Users/micahsilverman/Projects/snyk/goofs/java-goof/todolist-goof/todolist-core/src/main/java/io/github/todolist/core/repository/impl/UserRepositoryImpl.java
+/Users/micahsilverman/Projects/snyk/goofs/java-goof/todolist-goof/todolist-core/src/main/java/io/github/todolist/core/service/impl/TodoServiceImpl.java
+/Users/micahsilverman/Projects/snyk/goofs/java-goof/todolist-goof/todolist-core/src/main/java/io/github/todolist/core/domain/Todo.java
+/Users/micahsilverman/Projects/snyk/goofs/java-goof/todolist-goof/todolist-core/src/main/java/io/github/todolist/core/repository/api/TodoRepository.java
+/Users/micahsilverman/Projects/snyk/goofs/java-goof/todolist-goof/todolist-core/src/main/java/io/github/todolist/core/service/api/TodoService.java
+/Users/micahsilverman/Projects/snyk/goofs/java-goof/todolist-goof/todolist-core/src/main/java/io/github/todolist/core/domain/Priority.java
+/Users/micahsilverman/Projects/snyk/goofs/java-goof/todolist-goof/todolist-core/src/main/java/io/github/todolist/core/repository/api/UserRepository.java
+/Users/micahsilverman/Projects/snyk/goofs/java-goof/todolist-goof/todolist-core/src/main/java/io/github/todolist/core/Statics.java
+/Users/micahsilverman/Projects/snyk/goofs/java-goof/todolist-goof/todolist-core/src/main/java/io/github/todolist/core/domain/User.java
diff --git a/...arget/maven-status/maven-compiler-plugin/testCompile/default-testCompile/createdFiles.lst b/...arget/maven-status/maven-compiler-plugin/testCompile/default-testCompile/createdFiles.lst
@@ -0,0 +1,2 @@
+io/github/todolist/core/TodoServiceTest.class
+io/github/todolist/core/UserServiceTest.class
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,2 @@
		io/github/todolist/core/TodoServiceTest.class
		io/github/todolist/core/UserServiceTest.class