mirror of
https://github.com/github/codeql.git
synced 2026-05-02 20:25:13 +02:00
add sample code
This commit is contained in:
4
java/ql/src/Security/CWE/CWE-094/ScriptEngine.java
Normal file
4
java/ql/src/Security/CWE/CWE-094/ScriptEngine.java
Normal file
@@ -0,0 +1,4 @@
|
||||
// Bad: arbitrary code execution
|
||||
ScriptEngineManager scriptEngineManager = new ScriptEngineManager();
|
||||
ScriptEngine scriptEngine = scriptEngineManager.getEngineByExtension("js");
|
||||
Object result = scriptEngine.eval(code);
|
||||
Reference in New Issue
Block a user