semgrep-rules icon indicating copy to clipboard operation
semgrep-rules copied to clipboard

New Rules Proposal: Detect usage in java of an XML canonicalization method that excludes XML comments.

Open righettod opened this issue 2 months ago • 0 comments

Hello,

This rule, for java language, is intended to detect and inform when an XML canonicalization method that excludes XML comments from the computation of Digest and Signature is used.

I tested the rule against the sample code using the online rule editor:

image

Thank you very much for your feedback 😉

righettod avatar Oct 31 '25 09:10 righettod