Top "Fortify" questions

Fortify, the software application security products and services from Micro Focus.

How to Prevent XML External Entity Injection on TransformerFactory

My problem: Fortify 4.2.1 is marking below code as susceptible for XML External Entities attack. TransformerFactory factory = TransformerFactory.newInstance(); StreamSource xslStream = …

java xml xslt fortify xxe
Fortify throws error while scanning Visual Studio project

I'm trying to run Fortify on a Visual Studio 2008 project. The project builds successfully on its own. When I try …

c++ visual-studio-2008 fortify
Fortify file (.fpr file) to PDF convertion

Basically I am trying to generate the PDF file from the Fortify report file which is in .fpr formate. Can …

code-coverage fortify
Fortify fix for XML External Entity Injection

When I do scan using fortify tool, I got some issues under "XML External Entity Injection". TransformerFactory trfactory = TransformerFactory.newInstance(); …

java fortify xxe
Difference between Fortify SCA and Fortify SSC

What is the difference between Fortify SCA and Fortify SSC. Is there any difference between the reports generated by these …

fortify
Any open-source software that is similar to Fortify?

I have been using PMD and Findbug for my application but fortify managed to detect some of the security vulnerabilities …

security open-source findbugs pmd fortify
Is EnableHeaderChecking=true enough to prevent Http Header Injection attacks?

Is it sufficient to have [System.Web.Configuration.HttpRuntimeSection.EnableHeaderChecking](http://msdn.microsoft.com/en-us/library/system.web.configuration.httpruntimesection.…

asp.net iis security fortify
How to fix Mass Assignment: Insecure Binder Configuration (API Abuse, Structural) in java

I have a Controller class with the below two methods for finding a doctors (context changed). Getting the Mass Assignment: …

java spring spring-mvc fortify mass-assignment
Fortify Error : "No rules file found"

When I run a Fortify analysis against a Java project I receive this error : [warning]: No rules files found [error]: …

java fortify
How to avoid false positive "Null Dereference" error in Fortify

I'm using "HP Fortify v3.50" on a java project and I find lots of false positive on "Null Dereference", because …

java fortify