A new check is provided: LibraryDependencyCheck.
LibraryDependencyCheck has a param for the list of libraries that should not be used. This param has a default value of java.sql,javax.sql. Dependencies to these lirabries should be avoided.
The check will scan for two things:
- page import
e.g. <%@ page import=\"java.sql.*\"%>
- expressions
e.g. <% java.sql.Connection c1; %>
There is already a check for IllegalTagLibsCheck, so it is already posssible to scan for illegal use of the jstl sql taglib.