commonly-used-taint-config.source.injection.apache-wicket.README.adoc Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of tai-e Show documentation

An easy-to-learn/use static analysis framework for Java

The newest version!

= Description

The Sources recorded in this directory primarily come from the Apache Wicket framework, a Java web application development framework. The source methods that can cause taint include:
- Methods that retrieve properties from the incoming request (e.g., getHeader, getParameterValue)
- Methods that obtain input streams for uploaded files (e.g., getInputStream)

These inputs are provided externally and can be spoofed.