hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-03 20:58:03 +02:00
Code Issues Packages Projects Releases Wiki Activity

Java: Added MVELRuntime.execute() sink for MVEL injections

Browse Source
This commit is contained in:
Artem Smotrakov
2020-05-01 17:02:15 +02:00
parent fa717b2d86
commit df9d10f2ac
4 changed files with 89 additions and 45 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
java/ql/test/stubs/mvel2-2.4.7/org/mvel2/MVELRuntime.java Normal file
View File

@@ -0,0 +1,8 @@
package org.mvel2;
import org.mvel2.compiler.CompiledExpression;
import org.mvel2.integration.VariableResolverFactory;
public class MVELRuntime {
public static Object execute(boolean debugger, CompiledExpression expression, Object ctx, VariableResolverFactory variableFactory) { return null; }
}