Move to experimental

Author: ggolawski

…ity/CWE/CWE-016/SpringBootActuators.java …ity/CWE/CWE-016/SpringBootActuators.javajava/ql/src/Security/CWE/CWE-016/SpringBootActuators.java renamed to java/ql/src/experimental/Security/CWE/CWE-016/SpringBootActuators.java java/ql/src/Security/CWE/CWE-016/SpringBootActuators.java renamed to java/ql/src/experimental/Security/CWE/CWE-016/SpringBootActuators.java

@@ -32,5 +32,8 @@ the actuator endpoints.</p>
 Spring Boot documentation:
 <a href="https://docs.spring.io/spring-boot/docs/current/reference/html/production-ready-features.html">Actuators</a>.
 </li>
+<li>
+<a href="https://www.veracode.com/blog/research/exploiting-spring-boot-actuators">Exploiting Spring Boot Actuators</a>
+</li>
 </references>
 </qhelp>

…ty/CWE/CWE-016/SpringBootActuators.qhelp …ty/CWE/CWE-016/SpringBootActuators.qhelpjava/ql/src/Security/CWE/CWE-016/SpringBootActuators.qhelp renamed to java/ql/src/experimental/Security/CWE/CWE-016/SpringBootActuators.qhelp java/ql/src/Security/CWE/CWE-016/SpringBootActuators.qhelp renamed to java/ql/src/experimental/Security/CWE/CWE-016/SpringBootActuators.qhelp

@@ -1,7 +1,7 @@
 import org.springframework.boot.actuate.autoconfigure.security.servlet.EndpointRequest;
 import org.springframework.security.config.annotation.web.builders.HttpSecurity;
 
-public class ActuatorSecurityConfig {
+public class SpringBootActuators {
   protected void configure(HttpSecurity http) throws Exception {
     http.requestMatcher(EndpointRequest.toAnyEndpoint()).authorizeRequests(requests -> requests.anyRequest().permitAll());
   }