commonly-used-taint-config.source.injection.sonarqube.README.adoc Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of tai-e Show documentation

An easy-to-learn/use static analysis framework for Java

The newest version!

= Description

The Sources recorded in this directory primarily come from SonarQube. The source methods that can cause taint include:
- Methods that retrieve properties from the incoming request (e.g., getParams, getValues)
- ...

These inputs are provided externally and can be spoofed.