yayaliu

The common rules in PMD are too simple. I want to add some java code "security detection" related rules in PMD code detection tool, such as avoiding SQL injection, XML injection, cross site scripting (XSS), class initialization interdependence, integer overflow prevention, exception sensitive information not allowed to be exposed, deleting temporary files before program termination, etc., how to find Java in PMD tool Code safety regulations？

The normal rules in PMD indicate how to define a variant, avoid dead loop, etc. These rules are too simple to use in commercial development. Now I want to add some 'security check' rules for java in PMD tool, such as sql injections, Non-Authorized access, logic bomb, etc.