Struts: Unused Validation Form

Opis

An unused validation form indicates that validation logic is not up-to-date.

Skutki

• Other

  Quality Degradation

Zapobieganie

• Implementation

  Remove the unused Validation Form from the validation.xml file.

Słabość nadrzędna

• CWE-1164 Irrelevant Code
• CWE-20 Improper Input Validation

Kiedy powstaje

• Implementation — It is easy for developers to forget to update validation logic when they remove or rename action form mappings. One indication that validation logic is not being properly maintained is the presence of an unused validation form.
• Operation

Dotyczy

Java

Źródła

1. Seven Pernicious Kingdoms: A Taxonomy of Software Security Errors — Katrina Tsipenyuk, Brian Chess, Gary McGraw, NIST, 2005