mirror of
https://github.com/github/codeql.git
synced 2026-07-20 02:38:23 +02:00
39e652b26b
The class org.apache.commons.io.serialization.ValidatingObjectInputStream is an implementation of ObjectInputStream that validates the deserialized classes against a white list. Therefore, this class should not be considered an unsafe deserialization sink.