java-topology/defects/jetty/patch/jetty-CLEAN.md

8 lines
489 B
Markdown

# UNDF: UNDF-2026-000000126
## Jetty — CWE-407 scan result: CLEAN (beyond jetty-0001)
Files scanned:
- `jetty-core/jetty-server/src/main/java/org/eclipse/jetty/server/HttpChannel.java` — interface definition only, no executable loop logic
- `jetty-core/jetty-server/src/main/java/org/eclipse/jetty/server/handler/PathMappingsHandler.java``getDescendants().contains()` in `addMapping()` is configuration-time only, not per-request
No new CWE-407 defects found beyond jetty-0001.