hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-02 20:25:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #8357 from p0wn4j/jdbc-url-ssrf-sink

Browse Source 
Java: Add JDBC connection SSRF sinks
This commit is contained in:
Chris Smowton
2022-03-14 13:27:34 +00:00
committed by GitHub
parent 0bf4ce7cf1 b351d5bc2f
commit 9f02ca0db2
20 changed files with 1110 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
java/ql/lib/change-notes/2022-03-14-new-jdbc-ssrf-sinks.md Normal file
View File

@@ -0,0 +1,4 @@
---
category: minorAnalysis
---
* Added support for detection of SSRF via JDBC database URLs, including connections made using the standard library (`java.sql`), Hikari Connection Pool, JDBI and Spring JDBC.