| Class | Description |
|---|---|
| ExternalConfigurationControlDetector |
Detects External Control of System or Configuration Setting weakness
using setCatalog method of java.sql.Connection
|
| FindSecBugsGlobalConfig |
This class contains some flag that can be used to create global configuration.
|
| HttpResponseSplittingDetector |
Detects HTTP Response splitting weakness
|
| PermissiveCORSDetector | |
| PredictableRandomDetector | |
| ReDosDetector |
This detector does minimal effort to find potential REDOS.
|
| StrutsValidatorFormDetector | |
| WeakFilenameUtilsMethodDetector |
Few methods from org.apache.commons.io.FilenameUtils have a common weakness
of not filtering properly null byte.
|
Copyright © 2017. All rights reserved.