• Home
• io.codemodder
• core-codemods
• 0.91.0
• source code
• validate-jakarta-forward-path.yaml

×

Project download

Many resources are needed to download a project. Please understand that we have to compensate our server costs. Thank you in advance.
Project price only 1 $

You can buy this project and download/modify it how often you want.

io.codemodder.codemods.validate-jakarta-forward-path.yaml Maven / Gradle / Ivy

rules:
  - id: validate-jakarta-forward-path
    patterns:
      - pattern: (HttpServletRequest $REQ).getRequestDispatcher($PATH)
      - pattern-not: (HttpServletRequest $REQ).getRequestDispatcher("...")
      - metavariable-regex:
          metavariable: $PATH
          regex: (?!(validate|sanitize|strip).*)
      - focus-metavariable: $PATH
    message: Semgrep found a match
    languages:
      - java
    severity: WARNING