Rules on security issues for static code analizers of Java

[Juan C Calderon <johnccr () yahoo com>]

Hello all

Could somebody provide some rules to detect Cross Site
Scripting and Sql Injection attacks in source code
using static analizers for Java such as Hammurapi or
PMD.

Also, if you can recommend a Source Code Static
Analizer for C# that would help me a lot.

Regards,
JC


__________________________________________________
Correo Yahoo!
Espacio para todos tus mensajes, antivirus y antispam ¡gratis! 
Regístrate ya - http://correo.espanol.yahoo.com/