JetBrains’ Qodana code quality platform, which provides visualizations of code inspections and errors, has added taint analysis. The new feature defends programs against malicious inputs from external users, the company said.
Currently available in an early preview stage for PHP developers, taint analysis includes an inspection that scans code and highlights a taint and potential vulnerability. Developers can open the problem in JetBrains’ PhpStorm IDE for PHP to immediately address it. The IDE presents a dataflow graph of the taint flow, alerting developers to problematic areas. JetBrains promises taint analysis support for other languages in the near future.
