Update java/ql/lib/semmle/code/java/security/UnsafeDeserializationQuery.qll

This commit is contained in:
Tony Torralba
2023-06-26 11:14:31 +02:00
committed by GitHub
parent 7d0b880bf7
commit 55280e523a

View File

@@ -29,7 +29,7 @@ private class ObjectInputStreamReadObjectMethod extends Method {
}
/**
* A type coming from `ObjectInputStream` that makes it safe to deserialize untrusted data.
* A type extending `ObjectInputStream` that makes it safe to deserialize untrusted data.
*
* * See https://commons.apache.org/proper/commons-io/javadocs/api-2.5/org/apache/commons/io/serialization/ValidatingObjectInputStream.html
* * See https://github.com/ikkisoft/SerialKiller