Add support for Java Project Reactor
未關閉
question
- 主要語言
- CodeQL
- 星號
- 10.1k
- 分支
- 2.1k
- 平均合併
- 2 天 15 小時
- 30 天內合併 PR
- 141
描述
[Project Reactor](https://projectreactor.io/) is fully non-blocking and provides efficient demand management. It directly interacts with Java's functional API, CompletableFuture, Stream, and Duration. We need to model the Flux and Mono classes to enable taint flow through them
The lack of support was part of the reason for not reporting [CVE-2022-22947](https://y4er.com/post/cve-2022-22947-springcloud-gateway-spel-rce-echo-response/)
貢獻指南
評估
這個 Issue 還沒有評估資料。