Page tree

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

JEE technology

There are two bytecode generators:

  • An extension called Security for Java is available - this can be manually included in AIP Console using the Application - Extensions interface or can be automatically installed when delivering source code via the "Security assessmentObjective.
  • The JEE Analyzer also generates intermediate bytecode "out of the box".
Info
CAST highly recommends that the Security for Java extension is used since the bytecode it generates produces much more accurate results for the User Input Security feature.


.NET technologyThe bytecode is generated by the .NET Analyzer.

...