=== on 9 May 2019, 15:11:40 Nicolas Harraudeau wrote: This rule is deprecated for Java because the taint analysis engine already covers command injection (RSPEC-2076). include::../comments-and-links.adoc[]