semgrep-rules
semgrep-rules copied to clipboard
New Rules Proposal: Detect usage in java of an XML canonicalization method that excludes XML comments.
Hello,
This rule, for java language, is intended to detect and inform when an XML canonicalization method that excludes XML comments from the computation of Digest and Signature is used.
I tested the rule against the sample code using the online rule editor:
Thank you very much for your feedback 😉