github / github/codeql

Add support for Java Project Reactor

未关闭
#8,338 0 条评论 3 个 reaction 已指派 0 人 在 GitHub 查看
question
主要语言
CodeQL
星标
10.1k
派生
2.1k
平均合并
2 天 15 小时
30 天内合并 PR
141

描述

[Project Reactor](https://projectreactor.io/) is fully non-blocking and provides efficient demand management. It directly interacts with Java's functional API, CompletableFuture, Stream, and Duration. We need to model the Flux and Mono classes to enable taint flow through them

The lack of support was part of the reason for not reporting [CVE-2022-22947](https://y4er.com/post/cve-2022-22947-springcloud-gateway-spel-rce-echo-response/)

贡献指南

打开贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。