Tag Archives: Struts: Unused Validation Form

CWE-107 – Struts: Unused Validation Form

Read Time:26 Second

Description

An unused validation form indicates that validation logic is not up-to-date.

It is easy for developers to forget to update validation logic when they remove or rename action form mappings. One indication that validation logic is not being properly maintained is the presence of an unused validation form.

Modes of Introduction:

– Implementation

 

 

Related Weaknesses

CWE-1164
CWE-20

 

Consequences

Other: Quality Degradation

 

Potential Mitigations

Phase: Implementation

Description: 

Remove the unused Validation Form from the validation.xml file.

CVE References