The following programming constructs are currently supported by the MCV000-pattern:

• Operator Expressions
• Control-flow statements

This means that the security check is capable of analyzing a single procedural script without function calls.

Future versions of this pattern will also support:

• Function calls
• Object creation

as far as static analysis allows the support of these constructs