Dataflow Pointcut

[email protected] Mon, 18 Feb 2008 12:53:18 -0500 (EST)
Newsgroups gmane.comp.programming.aspect.general
Message-ID <[email protected]>
Hi ,
I want to ask about the importance of the dataflow pointcut. It was
defined as a way to detect cross-site scripting attack in web
applications.
In the paper
"Dataflow Pointcut in Aspect-Oriented Programming", they can detect such
attack using this pointcut.
My question is why they don't search for just the call for the method
getParameter using the call pointcut and filter the input for malicious
code without the use of the dataflow pointcut.
Thanks
Dima


_______________________________________________
discuss mailing list    -    [email protected]

To unsubscribe and change options, go to:
http://aosd.net/mailman/listinfo/discuss_aosd.net

Check out the AOSD.net Wiki: http://aosd.net/wiki