Missing rules to detect XSS and html injection in java servlets

Clean Code New rules / language support
,
3

Hello @Anders,

This is to let you know that I tested your code samples with SQ Developer Edition 7.7 and it raises the expected issues on the first one and nothing on the second one thanks to the sanization provided by ESAPI.encoder():

image
image.png2500×1404 332 KB

SQ 7.7 should be released before end of March 2019.

Regards