“The ASP/VBScript frontend was unable to resolve the following include…” Errors
Question
How do I resolve issues reported by the Fortify scan of the form: “The ASP/VBScript frontend was unable to resolve the following include…”
Answer
The error indicates that Fortify is unable to find the included file that is specified in the error message. This error generally occurs when the file is included via a virtual root in the source code. Fortify cannot resolve include files specified through a virtual root, unless Fortify is told the location of the virtual root directory. To resolve this issue, tell Fortify the location of the virtual root directory by using the com.fortify.sca.ASPVirtualRoots property. The property may be set in the fortify-sca.properties file (see the User Guide for location of this file) or it may be set on the command line by using the -D option as shown below:
sourceanalyzer -b <buildid> -Dcom.fority.sca.ASPVirtualRoots=/path/to/virtual/root ...
Additionally, this property may be used to map virtual directories to physical directories by including the virtual directory as part of the property name, com.fortify.sca.ASPVirtualRoots.<Virtual_Directory>. The example below shows a virtual directory named Include that is mapped to a physical directory.
sourceanalyzer -b <buildid> -Dcom.fority.sca.ASPVirtualRoots.Include=C:\path\to\virtual\include\root ...
If scanning from one of the graphical interfaces, please see the technical note on how to enter command-line arguments into Audit Workbench or Fortify IDE plugin.