JSP analysis

[twogee]

The complete analysis of a WAR must include an analysis of its JSP's.

Currently, the easiest way seems to be: extract .jsp(f) and .tld files, compile them with Jasper, roll .class files into .jar(s), add archives to Tattletale scan path.

Or is there a better way?

[jesper.pedersen]

Ideally the JSPx should be included in the reports.

However, I don't see us adding Jasper as a mandatory dependency to TTALE. So we would need a plugin mechanism that enables the JSP scans if Jasper is found. Think of it as a TTALE add-on, Jasper, JSP scanner, JSP report, ... are all in one single download that can be extracted over an existing TTALE installation.