你即將離開本站

並前往https://rules.sonarsource.com/java/tag/owasp/RSPEC-4544

Using unsafe Jackson deserialization configuration is security ...

When Jackson is configured to allow Polymorphic Type Handling (aka PTH), formerly known as Polymorphic Deserialization, "deserialization gadgets" may allow an ...

確定！ 回上一頁

查詢 「Jackson deserializer」的人也找了：

  1. Jackson polymorphism
    2.
  2. Jackson ObjectMapper
    3.
  3. Jackson mixin
    4.
  4. Jackson custom deserializer
    5.
  5. Jackson JsonTypeInfo
    6.
  6. JsonDeserializer
    7.
  7. ObjectMapper configure
    8.
  8. Jackson constructor deserialize
    9.