Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix 4.0 beta3 #883

Merged
merged 27 commits into from
Mar 30, 2025
Merged

Fix 4.0 beta3 #883

merged 27 commits into from
Mar 30, 2025

Conversation

getrebuild
Copy link
Owner

No description provided.

@getrebuild getrebuild requested a review from devezhao as a code owner March 26, 2025 06:19
// in URL
String vars = getParameter(request, "vars");
if (JSONUtils.wellFormat(vars) && reportGenerator instanceof EasyExcelGenerator33) {
JSONObject varsJson = JSON.parseObject(vars);

Check failure

Code scanning / CodeQL

Deserialization of user-controlled data Critical

Unsafe deserialization depends on a
user-provided value
.
@devezhao devezhao merged commit 36558d9 into master Mar 30, 2025
5 checks passed
@devezhao devezhao deleted the fix-4.0-beta3 branch March 30, 2025 07:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants