Add support for Java Project Reactor
Open
question
- Dominant language
- CodeQL
- Stars
- 10.1k
- Forks
- 2.1k
- Avg merge
- 2d 15h
- Merged PRs (30d)
- 141
Description
[Project Reactor](https://projectreactor.io/) is fully non-blocking and provides efficient demand management. It directly interacts with Java's functional API, CompletableFuture, Stream, and Duration. We need to model the Flux and Mono classes to enable taint flow through them
The lack of support was part of the reason for not reporting [CVE-2022-22947](https://y4er.com/post/cve-2022-22947-springcloud-gateway-spel-rce-echo-response/)
Contributor guide
Assessment
This issue has not been assessed yet.