Thanks to visit codestin.com Credit goes to github.com
We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 1fdf055 commit a9ea63bCopy full SHA for a9ea63b
1 file changed
java/change-notes/2020-10-27-insecure-bean-validation.md
@@ -1,6 +1,5 @@
1
lgtm,codescanning
2
-* New query "Insecure Bean Validation" (java/insecure-bean-validation) added. This query
3
- finds Server-Side Template Injections caused by untrusted data flowing from a Bean
4
- property being validated into a custom constraint violation error message. This
5
- vulnerability leads to arbitrary code execution.
6
-
+* A new query "Insecure Bean Validation" (`java/insecure-bean-validation`) has been added. This query
+ finds server-side template injections caused by untrusted data flowing from a bean
+ property into a custom error message for a constraint validator. This
+ vulnerability can lead to arbitrary code execution.
0 commit comments