Skip to content

Java: Add new java.net.URL taintsteps #12305

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 4 commits into from
Feb 27, 2023
Merged

Java: Add new java.net.URL taintsteps #12305

merged 4 commits into from
Feb 27, 2023

Conversation

pwntester
Copy link
Contributor

@pwntester pwntester commented Feb 24, 2023 •
edited
Loading

Adds missing taintstep for java.net.URL.toURI and toExternalForm from H-c0n workshop!!!

@pwntester pwntester requested a review from a team as a code owner February 24, 2023 17:53
@github-actions github-actions bot added the Java label Feb 24, 2023
@atorralba atorralba changed the title new java net URL toURI taintstep Java: Add new java.net.URI taintsteps Feb 27, 2023
atorralba
atorralba approved these changes Feb 27, 2023
View reviewed changes
Copy link
Contributor

@atorralba atorralba left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the contribution! 🎉

@pwntester
Copy link
Contributor Author

We found it trying to get the RFI for VulnerableApp reported. May lead to some SSRF/Open Redirect issues 🤞🏼

@atorralba atorralba merged commit 0e3f4f6 into github:main Feb 27, 2023
@atorralba atorralba changed the title Java: Add new java.net.URI taintsteps Java: Add new java.net.URL taintsteps Feb 27, 2023
@atorralba atorralba mentioned this pull request Mar 2, 2023
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
1 more reviewer

@atorralba atorralba atorralba approved these changes

Reviewers whose approvals may not affect merge requirements
Assignees
No one assigned
Labels
Java
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@pwntester @atorralba