Confirmed users
971
edits
Python Static Code Analysis: Difference between revisions
Jump to navigation
Jump to search
→Advanced
| Line 37: | Line 37: | ||
* Extend the SQL, HTML and JavaScript string detection to find out if those strings will include unescaped data taken from request parameters, request body, path parameters or headers. | * Extend the SQL, HTML and JavaScript string detection to find out if those strings will include unescaped data taken from request parameters, request body, path parameters or headers. | ||
* Do code analysis to find logic problems that could lead to vulnerabilities or exploitable code. | * Do code analysis to find logic problems that could lead to vulnerabilities or exploitable code. | ||
* Mapping the [https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project The OWASP Top Ten] to code analysis | |||
Need more advanced stuff. Or maybe the More Complicated list is already pretty advanced? | Need more advanced stuff. Or maybe the More Complicated list is already pretty advanced? | ||