Custom Fortify rules for classic .ASP
has anybody ever tried creating a custom rule for a program written in ASP? Unlike ASP.NET, ASP is not supported with the Custom Rules Editor.
I'm thinking of taking a Dataflowcleanse rule written for another language and somehow adjust it for ASP to tell that a certain function performs a data validation.
Any ideas or hints?
I have generated a custom rule, set the language to "vb", generated a DataflowCleanse rule and referenced it in the scan explicitly, yet the rule does not seem trigger for the function.