Skip to content

disallow returning Class objects#232

Merged
boulter merged 2 commits into
masterfrom
disallow-returning-Class-objects
Aug 31, 2018
Merged

disallow returning Class objects#232
boulter merged 2 commits into
masterfrom
disallow-returning-Class-objects

Conversation

@boulter

@boulter boulter commented Aug 31, 2018

Copy link
Copy Markdown
Contributor

Class objects have security issues.

@codecov-io

codecov-io commented Aug 31, 2018

Copy link
Copy Markdown

Codecov Report

Merging #232 into master will increase coverage by 0.03%.
The diff coverage is 100%.

Impacted file tree graph

@@             Coverage Diff              @@
##             master     #232      +/-   ##
============================================
+ Coverage     71.46%   71.49%   +0.03%     
- Complexity     1375     1377       +2     
============================================
  Files           218      218              
  Lines          4349     4354       +5     
  Branches        689      691       +2     
============================================
+ Hits           3108     3113       +5     
  Misses         1000     1000              
  Partials        241      241
Impacted Files Coverage Δ Complexity Δ
.../hubspot/jinjava/el/ext/JinjavaBeanELResolver.java 78.37% <100%> (+3.37%) 11 <3> (+2) ⬆️

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 3b284b9...b862ede. Read the comment docs.

private static final Set<String> RESTRICTED_METHODS = ImmutableSet.<String> builder()
.add("clone")
.add("hashCode")
.add("getClass")

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

let's leave this in, layers are good

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ok, I took it out mostly so I could test the new method of blocking, but I'll put it back.

@boulter boulter merged commit 18a6065 into master Aug 31, 2018
@boulter boulter deleted the disallow-returning-Class-objects branch August 31, 2018 17:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants