This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Struts: Unused Validation Form
From OWASP
Revision as of 18:22, 24 July 2006 by Weilin Zhong (talk | contribs) (Contents provided by Fortify.)
This is a Vulnerability. To view all vulnerabilities, please see the Vulnerability Category page.
Abstract
An unused validation form indicates that validation logic is not up-to-date.
Description
It is easy for developers to forget to update validation logic when they remove or rename action form mappings. One indication that validation logic is not being properly maintained is the presence of an unused validation form.