LGTM.com - false positive User input sanitized in code called via annotations #3251
Description
Description of the false positive
The paths that lead to an alert for using un-sanitized user input, sanitize the input in a resource filter that's applied when the endpoint is called. The code that sanitizes the input is called by the framework via an annotation
@GET
@Path("/task/{taskid}")
@Produces(MediaType.APPLICATION_JSON)
@ResourceFilters(TaskResourceFilter.class)
public Response getTaskPayload(@PathParam("taskid") String taskid)
^ In this example TaskResourceFilter calls TaskIdUtils.validateId("taskId", taskId) which sanitizes the user provided taskid
URL to the alert on the project page on LGTM.com