Files
codeql/java/ql/lib/change-notes/2024-11-28-model-resttemplate-getforobject-third-parameter.md
Owen Mansel-Chan 7f8a1ae941 Add change note
2024-11-29 09:46:42 +00:00

5 lines
261 B
Markdown

---
category: minorAnalysis
---
* Added a sink for "Server-side request forgery" (`java/ssrf`) for the third parameter to org.springframework.web.client.RestTemplate.getForObject, when we cannot statically determine that it does not affect the host in the URL.