You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
fix: FAQ accordion accessibility, mobile padding, and positioning copy
- Add reduced-motion support and bump accordion duration to 300ms
- Reduce FAQ right padding on mobile viewports
- Move JPA persistence claim into new FAQ entry
- Italicize supported technology subtitle
Copy file name to clipboardExpand all lines: src/components/astro/FAQ.astro
+6-2Lines changed: 6 additions & 2 deletions
Original file line number
Diff line number
Diff line change
@@ -20,6 +20,10 @@ const faqItems = [
20
20
question: "What languages and frameworks are supported?",
21
21
answer: "Java and Kotlin, analyzed at the bytecode level to precisely understand inheritance, generics, and library interactions. Deep Spring Boot support including Spring MVC, Spring Data, and related libraries. More languages ahead.",
22
22
},
23
+
{
24
+
question: "Why is OpenTaint the most thorough taint analyzer for Spring apps?",
25
+
answer: "OpenTaint performs inter-procedural dataflow analysis that follows taint across method boundaries, async code, and coroutines. It models JPA persistence layers, catching stored injections where untrusted input enters via one endpoint, gets persisted to the database, and resurfaces in a completely different request. Most tools lose track at the persistence boundary. OpenTaint doesn't.",
26
+
},
23
27
{
24
28
question: "How does OpenTaint compare to Semgrep?",
25
29
answer: "Semgrep's open-source engine includes intra-procedural taint analysis — it tracks data within a single function. Its Pro engine adds inter-procedural taint analysis behind a paid tier. OpenTaint ships full inter-procedural dataflow analysis — cross-endpoint flows, persistence layers, stored injections — under Apache 2.0. Rules use a code-native format that the engine translates into complete taint configurations. Semgrep rule syntax is supported as a migration path.",
0 commit comments