Class BinderControllerAdvice


  • @ControllerAdvice
    @Order(10000)
    public class BinderControllerAdvice
    extends java.lang.Object
    Temporary mitigation for RCE in Spring Core (https://bugalert.org/content/notices/2022-03-30-spring.html) Code from https://www.praetorian.com/blog/spring-core-jdk9-rce/
    • Method Summary

      All Methods Instance Methods Concrete Methods 
      Modifier and Type Method Description
      void setAllowedFields​(org.springframework.web.bind.WebDataBinder dataBinder)  
      • Methods inherited from class java.lang.Object

        clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
    • Constructor Detail

      • BinderControllerAdvice

        public BinderControllerAdvice()
    • Method Detail

      • setAllowedFields

        @InitBinder
        public void setAllowedFields​(org.springframework.web.bind.WebDataBinder dataBinder)