Package com.netflix.spinnaker.config

Class BinderControllerAdvice

java.lang.Object

com.netflix.spinnaker.config.BinderControllerAdvice

@ControllerAdvice
@Order(10000)
public class BinderControllerAdvice
extends Object

Temporary mitigation for RCE in Spring Core (https://bugalert.org/content/notices/2022-03-30-spring.html) Code from https://www.praetorian.com/blog/spring-core-jdk9-rce/

Constructor Summary

Constructors

Constructor	Description
BinderControllerAdvice()

Method Summary

Modifier and Type	Method	Description
void	setAllowedFields(org.springframework.web.bind.WebDataBinder dataBinder)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

BinderControllerAdvice

public BinderControllerAdvice()

Method Details

setAllowedFields

@InitBinder
public void setAllowedFields(org.springframework.web.bind.WebDataBinder dataBinder)