1 Reply Latest reply on Jul 23, 2013 3:31 PM by jesper.pedersen

    JSP analysis

    twogee

      The complete analysis of a WAR must include an analysis of its JSP's.

      Currently, the easiest way seems to be: extract .jsp(f) and .tld files, compile them with Jasper, roll .class files into .jar(s), add archives to Tattletale scan path.

      Or is there a better way?

        • 1. Re: JSP analysis
          jesper.pedersen

          Ideally the JSPx should be included in the reports.

           

          However, I don't see us adding Jasper as a mandatory dependency to TTALE. So we would need a plugin mechanism that enables the JSP scans if Jasper is found. Think of it as a TTALE add-on, Jasper, JSP scanner, JSP report, ... are all in one single download that can be extracted over an existing TTALE installation.