hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-17 09:13:20 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
sauyon/java-spring-stringutils
codeql/java/change-notes/2020-11-04-commonslang-unsafe-deserialization-sinks.md
Alvaro Muñoz aa7b87aa33 Update java/change-notes/2020-11-04-commonslang-unsafe-deserialization-sinks.md 
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>
2020-11-04 10:58:27 +01:00

292 B
Raw Permalink Blame History

lgtm,codescanning

  • The query "Deserialization of user-controlled data" (java/unsafe-deserialization) has been improved to recognize unsafe Apache Commons Lang(3) methods.
  • The SnakeYAML Unsafe Deserialization sink has been improved to recognize compose and composeAll unsafe methods.