Files
codeql/java/ql/lib/change-notes/2024-11-28-model-resttemplate-getforobject-third-parameter.md
2025-01-07 12:14:27 -05:00

261 B

category
category
minorAnalysis
  • Added a sink for "Server-side request forgery" (java/ssrf) for the third parameter to org.springframework.web.client.RestTemplate.getForObject, when we cannot statically determine that it does not affect the host in the URL.