hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-22 03:36:30 +01:00
Code Issues Packages Projects Releases Wiki Activity

Update java/ql/src/Security/CWE/CWE-094/InsecureBeanValidation.qhelp

Browse Source 
Co-authored-by: Shati Patel <42641846+shati-patel@users.noreply.github.com>
This commit is contained in:
Alvaro Muñoz
2020-10-27 21:11:48 +01:00
committed by GitHub
parent d5b470ea0c
commit ac116da0dc
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
java/ql/src/Security/CWE/CWE-094/InsecureBeanValidation.qhelp
View File

@@ -30,7 +30,7 @@ Validator validator = Validation.byDefaultProvider()
.buildValidatorFactory()
.getValidator();
</pre></li>
<li>Replace Hibernate-Validator with Apache BVal which in its latest version does not interpolate EL expressions by default.
<li>Replace Hibernate Validator with Apache BVal which in its latest version does not interpolate EL expressions by default.
Note that this replacement may not be a simple drop-in replacement.</li>
</ul>
</recommendation>