java-topology/defects/ktor/patch/CLEAN.md

387 B

CLEAN — Ktor

Scanned 2026-03-29 for CWE-407 (algorithmic complexity).

Findings

  • YamlConfig recursive value traversal — CLEAN: correctly guarded with !visited.add(value)
  • JsonSchemaInference Kotlin reflection — CLEAN: proper visited set guards
  • Plugin registration, content negotiation — CLEAN: safe HashMap-based dispatch

Result: No actionable CWE-407 defects.