Can we find the source point through annotations? For example, I would like to use the parameter of the method with RequestMapping annotation as the source point
Clear and concise description of the problem
Can we find the source point through annotations? For example, I would like to use the parameter of the method with RequestMapping annotation as the source point
Impact Analysis
No response
Suggested Solution
No response
Alternative
No response
Intention to submit PR
No
Additional Context
No response
Unfortunately, there is currently no direct support. Current workaround is to implement the Plugin or modify Tai-e's source code to achieve a high level of customization.
The taint rules with programmatic configuration support are now available in v0.5.1.
It allows you to scan the annotations in the IR for elements annotated with @RequestMapping and create taint rules for them without having to predefine the taint analysis rules in config files.
For details on usages, please refer to our documentation on programmatic taint configuration.