java-topology/defects/ktor/patch/CLEAN.md

11 lines
387 B
Markdown

# CLEAN — Ktor
Scanned 2026-03-29 for CWE-407 (algorithmic complexity).
## Findings
- YamlConfig recursive value traversal — CLEAN: correctly guarded with `!visited.add(value)`
- JsonSchemaInference Kotlin reflection — CLEAN: proper visited set guards
- Plugin registration, content negotiation — CLEAN: safe HashMap-based dispatch
**Result: No actionable CWE-407 defects.**