engineering/java-topology
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

ktor/undertow: CLEAN markers (no CWE-407 defects found)

Browse source
This commit is contained in:
russell@unturf.com 2026-03-29 19:34:44 -04:00
parent 1a527783ae
commit 339f2245ba
2 changed files with 22 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

11
defects/undertow/patch/CLEAN.md Normal file
View file

@ -0,0 +1,11 @@
# CLEAN — Undertow
Scanned 2026-03-29 for CWE-407 (algorithmic complexity).
## Findings
- AllowedContentEncodings linear scan — N is bounded by number of content encodings (typically 2-5); not actionable
- SingleSignOnAuthenticationMechanism — CLEAN: guarded with `seenSessionManagers.add(manager)` return check
- Predicate parser, handler chains — CLEAN: HashMap-based dispatch, no linear scans in hot paths
**Result: No actionable CWE-407 defects.**