Commander
Commander
3313 views

Custom Fortify rules for classic .ASP

Hello,

has anybody ever tried creating a custom rule for a program written in ASP? Unlike ASP.NET, ASP is not supported with the Custom Rules Editor.

I'm thinking of taking a Dataflowcleanse rule written for another language and somehow adjust it for ASP to tell that a certain function performs a data validation.

Any ideas or hints?

Many thanks,

Stanislav

0 Likes
1 Reply
Commander
Commander

I have generated a custom rule, set the language to "vb", generated a DataflowCleanse rule and referenced it in the scan explicitly, yet the rule does not seem trigger for the function.

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.