Comment Re:static_analysis++ (Score 1) 212
PMD's an amazing tool - In v3.6 there's the ability to scan JSP's, I've written an entire suite around secure coding guidelines using both the Java and JSP engines.
Honesty pays, but it doesn't seem to pay enough to suit some people. -- F.M. Hubbard