codeql/java/change-notes/2021-05-17-add-unsafe-deserialization-sinks.md

mirror of https://github.com/github/codeql.git synced 2025-12-19 18:33:16 +01:00
lgtm,codescanning
* The "Deserialization of user-controlled data" (`java/unsafe-deserialization`) query
  now recognizes `JYaml`, `JsonIO`, `YAMLBeans`, `Castor`, `Hessian` and `Burlap` deserialization.
	`lgtm,codescanning`
	* The "Deserialization of user-controlled data" (`java/unsafe-deserialization`) query
	now recognizes `JYaml`, `JsonIO`, `YAMLBeans`, `Castor`, `Hessian` and `Burlap` deserialization.