hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-17 01:03:14 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
0c2e05717fcb5c8b48d26d8584cd8bdec907d61d
codeql/java/ql/lib/change-notes/2024-11-28-model-resttemplate-getforobject-third-parameter.md
Owen Mansel-Chan 7f8a1ae941 Add change note
2024-11-29 09:46:42 +00:00

261 B
Raw Blame History

category
category
minorAnalysis
  • Added a sink for "Server-side request forgery" (java/ssrf) for the third parameter to org.springframework.web.client.RestTemplate.getForObject, when we cannot statically determine that it does not affect the host in the URL.