pathfinder rules: added unencrypted socket connection detection rule

pathfinder-rules/java/UnEncryptedSocketConnection.cql

@@ -0,0 +1,15 @@
+/**
+ * @name unencrypted-socket
+ * @description This socket is not encrypted. Use an SSLSocket created by SSLSocketFactory or SSLServerSocketFactory instead.
+ * @kind problem
+ * @id java/UnEncryptedSocketConnection
+ * @problem.severity warning
+ * @security-severity 3.1
+ * @precision medium
+ * @tags security
+ * external/cwe/cwe-319
+ */
+
+FROM ClassInstanceExpr AS cie
+WHERE cie.getClassInstanceExpr().GetClassName() == "Socket" || cie.getClassInstanceExpr().GetClassName() == "ServerSocket"
+SELECT cie.getName(), "This socket is not encrypted. Use an SSLSocket created by SSLSocketFactory or SSLServerSocketFactory instead"

test-src/android/app/src/main/java/com/ivb/udacity/movieDetailActivity.java

@@ -34,6 +34,12 @@ protected void onCreate(Bundle savedInstanceState) {
         // webview.javascriptEnabled();
         webview.getSettings().setJavaScriptEnabled(true);
 
+        Socket socket = new Socket("www.google.com", 80);
+
+        Socket socket = new Socket();
+
+        ServerSocket serverSocket = new ServerSocket(80);
+
         movieGeneralModal moviegeneralModal = (movieGeneralModal) intent.getSerializableExtra("DATA_MOVIE");
 
         if (savedInstanceState == null) {