QueryParam Scanner - v0.7 Released, v0.8 in progress...

I have released v0.7 of QueryParam Scanner, which introduces a variety of improvements over v0.6.1:

• Significantly faster processing
• Multiple output formats (HTML, XML, WDDX).
• Ability to override Request Timeout.
• Option to specify file/directory exclusions (regex).
• Option to include/exclude Query of Queries.
• Option to include/exclude built-in CFML functions.
• Eclipse Plugin for easier execution.

For more details and download information, visit the project page at Hybridchill.

Future Improvements

The following release, v0.8 will have three key features:

• A Fix mode, allowing you to manually or automatically correct missing cfqueryparams.
• A flexible exclusion system, allowing you to ignore paths and variables you know are ok.
• Integration and examples of use for Apache Ant and MXUnit.

The Fix mode will default to step through each file, offering an educated guess on the correct change to make, and letting you approve or update the change. At the end of all the files, you can either save the changes, or instead generate a patch file (unified diff) of the proposed changes.

The exclusion system will allow you to specify global exclusions, or per-resource exclusions, and will support exclusion paths, directories, files, functions, scopes, variables. You will be able to exclude using exact text matches, wildcard matches (* and ?), or full regex matches.

The Ant and MXUnit integration has not yet been decided how that will work - mainly because I've not really given it much thought yet other than in deciding to do it. Creating Ant tasks looks easy enough, but any specific suggestions for either of these two features are welcome.

All going well, a snapsnot of v0.8-dev that implements most of the exclusion functionality will be available later this week.