Framework JAX-WS

for JavaEE environment

Julia will translate the JAX-WS annotations into its own, marking new methods as entry points and keeping trace of which data comes from an untrusted source.

Required libraries: javax.jws-api.jar

Applicability

This specification gets automatically applied when:

  • the framework of the analysis contains the word java (case insensitive)
  • there exists an annotation that is equals to javax.annotation.PostConstruct
  • there exists an annotation that is equals to javax.annotation.PreDestroy
  • there exists an annotation that starts with javax.jws


Implications between annotations

Some annotations of this framework get translated automatically into standard Julia annotations, such that the analysis engine can react accordingly. Namely:

  • if an element is annotated with javax.annotation.PostConstruct, Julia considers it to be annotated also with:
    • com.juliasoft.julia.extraction.EntryPoint
  • if an element is annotated with javax.annotation.PreDestroy, Julia considers it to be annotated also with:
    • com.juliasoft.julia.extraction.EntryPoint
  • if an element is annotated with javax.jws.WebMethod, Julia considers it to be annotated also with:
    • com.juliasoft.julia.extraction.EntryPoint
  • if an element is annotated with javax.jws.WebParam, Julia considers it to be annotated also with:
    • com.juliasoft.julia.checkers.flows.UntrustedUserInput