Many applications are using .tag and .tagx files to implement their functional capabilities.

These files could include jsp scriptlet with source code to analyse. It is very possible that these files include the same issues that a common Java file.

There is other issue related with this feature where it is possible to identify a real case: https://issues.jboss.org/browse/WINDUP-831

*Estimated based on just making changes to the file mapping