Introduce utbot taint analysis

[mmvpm]

Description

• All changes are under UtSettings.useTaintAnalysis flag which is false by default (the user can change it in idea settings by checking the box "Use taint analysis")

  

• Taint analysis configuration are provided from resources utbot-framework/src/main/resources/taint/config.yaml and from custom user's file <path-to-user-project>/.idea/utbot-taint-config.yaml. To reduce parsing time, the first config is cached to the %TEMP%/UTBot/ directory

  

• The generated test which leads to TaintAnalysisError looks like

  @Test
  @DisplayName("process: log(data) : True -> DetectTaintAnalysisError")
  public void testProcess_AGreaterThanZero() {
      Example example = new Example();
  
      example.process(1);
      fail("'java.lang.String' marked 'sensitive-data' was passed into 'Example.log' method");
  }

• The problems view tab with taint error

  

How to test

Automated tests

org/utbot/taint/parser

Manual tests

1. Open any project
2. Enable taint analysis in IDEA settings by checking the box "Use taint analysis"
3. Create the file .idea/utbot-taint-config.yaml
4. Write the code and specify the rules according to configuration format https://github.com/UnitTestBot/UTBotJava/blob/main/docs/TaintAnalysis.md
5. Run test generation

Sample code:

package org.utbot.examples.taint;

public class Example {

    private String getPassword() { return "password"; }

    private void log(String text) { System.out.println(text); }

    public void process(int a) {
        String data = "";
        if (a > 0) {
            data = getPassword();
        }
        log(data);
    }
}

Sample config:

sources:
  - org.utbot.examples.taint.Example.getPassword:
      add-to: return
      marks: sensitive-data

sinks:
  - org.utbot.examples.taint.Example.log:
      check: arg1
      marks: sensitive-data

Self-check list

• I've set the proper labels for my PR (at least, for category and component).
• PR title and description are clear and intelligible.
• I've added enough comments to my code, particularly in hard-to-understand areas.
• The functionality I've repaired, changed or added is covered with automated tests.
• Manual tests have been provided optionally.
• The documentation for the functionality I've been working on is up-to-date.

[CaelmBleidd]

Discussed verbally

[alisevych]

As an enhancement suggestion:
Empty <path-to-user-project>/.idea/utbot-taint-config.yaml file can be generated when user enables Taint analysis setting in the project. That can be done when EmptyYamlDocumentException is handled.

[CaelmBleidd]

Please, add documentation for the added options

[CaelmBleidd]

LGTM