РазведкаОригинал на английском
Nika: Open-source code analysis tool
Русский перевод готовится и скоро появится на сайте. Пока доступен оригинал на английском.
Many serious security bugs in web applications sit across several files at once. Request data enters through a controller, moves through data objects and service layers, and turns dangerous only when it reaches a sensitive operation such as a database query or a file action. A sc
Help Net Security··3 мин чтения
Many serious security bugs in web applications sit across several files at once. Request data enters through a controller, moves through data objects and service layers, and turns dangerous only when it reaches a sensitive operation such as a database query or a file action. A scanner that reads one file at a time can miss that path entirely. Nika, an open-source tool from the payments company PhonePe, works on that problem for Java microservices. … More → The post Nika: Open-source code analysis tool appeared first on Help Net Security.