hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-26 17:25:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #5881 from haby0/java/UnsafeDeserialization

Browse Source 
Java: CWE-502 Add UnsafeDeserialization sinks
This commit is contained in:
Anders Schack-Mulligen
2021-06-17 12:36:34 +02:00
committed by GitHub
parent 8fe2f4a554 363ad5b470
commit 6ca8d69b26
39 changed files with 2073 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
java/change-notes/2021-05-17-add-unsafe-deserialization-sinks.md Normal file
View File

@@ -0,0 +1,3 @@
lgtm,codescanning
* The "Deserialization of user-controlled data" (`java/unsafe-deserialization`) query
now recognizes `JYaml`, `JsonIO`, `YAMLBeans`, `Castor`, `Hessian` and `Burlap` deserialization.