hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-24 08:15:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #5408 from p0wn4j/urlclassloader-webclient-ssrf-sinks

Browse Source 
Java: Add URLClassLoader, WebClient SSRF sinks
This commit is contained in:
Chris Smowton
2021-07-01 16:14:22 +01:00
committed by GitHub
parent 05842dcdb3 e0a7f6e14f
commit 8b7db8a8cc
9 changed files with 296 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
java/change-notes/2021-07-01-url-classloader-reactive-webclient.md Normal file
View File

@@ -0,0 +1,2 @@
lgtm,codescanning
* Added support for two new APIs susceptible to server-side request forgery (SSRF): using a `URLClassLoader`, and using Spring Web Reactive's `WebClient`.