Update java/change-notes/2021-05-17-add-unsafe-deserialization-sinks.md

Co-authored-by: Chris Smowton <smowton@github.com>
This commit is contained in:
haby0
2021-05-17 18:49:16 +08:00
committed by GitHub
parent 58d774ae85
commit 95c33a240f

View File

@@ -1,3 +1,3 @@
lgtm,codescanning
* The "Deserialization of user-controlled data" (`java/unsafe-deserialization`) query
now recognizes `JYaml`, `JsonIO`, `YAMLBeans`, `HessianBurlap`, `Castor`, `Burlap` deserialization.
now recognizes `JYaml`, `JsonIO`, `YAMLBeans`, `Castor`, `Hessian` and `Burlap` deserialization.