Files
codeql/csharp/ql/test/query-tests/Security Features/CWE-502/UnsafeDeserialization/UnsafeDeserializationGood.cs
2019-10-22 09:55:39 +01:00

12 lines
232 B
C#

using System.Web.Script.Serialization;
class Good
{
public static object Deserialize(string s)
{
// GOOD
JavaScriptSerializer sr = new JavaScriptSerializer();
return sr.DeserializeObject(s);
}
}