Enhance sast-rule java/file/rule-FilenameUtils.yml
Problem
- Consider using taint analysis mode and check if arguments come from servlet sources.
- Determine if there are better ways of enhancing this rule, (check the commons api documentation to see if there are better solutions/API methods to check for both sources and possible sanitizers).
- Rewrite description/remediation text to be more descriptive.
- Add an example code snippet to the description text.
Solution
Follow the enhance rule checklist.
Edited by Isaac Dawson