commonly-used-taint-config.source.injection.java.README.adoc Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of tai-e Show documentation

An easy-to-learn/use static analysis framework for Java

The newest version!

= Description

The Sources recorded in this directory primarily come from the Java standard library. The source methods that can cause taint include:
- Methods that retrieve properties from the incoming request (e.g., getContent, getRemoteSocketAddress)
- Methods that take external input (e.g., getSelectedText, readLine)
- ...

These inputs are provided externally and can be spoofed.