mirror of
https://github.com/github/codeql.git
synced 2026-04-29 18:55:14 +02:00
39e652b26b
The class org.apache.commons.io.serialization.ValidatingObjectInputStream is an implementation of ObjectInputStream that validates the deserialized classes against a white list. Therefore, this class should not be considered an unsafe deserialization sink.