commonly-used-taint-config.source.injection.jetty.README.adoc Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of tai-e Show documentation

An easy-to-learn/use static analysis framework for Java

The newest version!

= Description

The Sources recorded in this directory primarily come from Jetty. The source methods that can cause taint include:
- Methods that take the incoming request as a parameter (e.g., handle)
- Methods that retrieve properties from the incoming request (e.g., getParam, getQuery)
- ...

These inputs are provided externally and can be spoofed.