Enhance sast-rule java/file/rule-FilenameUtils.yml

Problem

  • Consider using taint analysis mode and check if arguments come from servlet sources.
  • Determine if there are better ways of enhancing this rule, (check the commons api documentation to see if there are better solutions/API methods to check for both sources and possible sanitizers).
  • Rewrite description/remediation text to be more descriptive.
  • Add an example code snippet to the description text.

Solution

Follow the enhance rule checklist.

Edited by Isaac Dawson