search

mschwager / route-detect

Find authentication (authn) and authorization (authz) security bugs in web application routes.
BSD 3-Clause "New" or "Revised" License
246 stars 16 forks source link

Jax-RS improvements for interface declarations #12

Open Gby56 opened 1 year ago

Gby56 commented 1 year ago

I stumbled upon an issue with the jax-rs rules, the code I'm testing is declaring the Paths in an interface and then implements it ! So I think the rule has to be rewritten to something like that, without a code block basically.

      - pattern: |
          @$METHOD
          @Path($PATH)
          $RETURNTYPE $FUNC(...)