Skip to content

Instantly share code, notes, and snippets.

@ihebski
Last active March 31, 2022 13:53
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save ihebski/13c69f0badb50b8bbb76b92e6f7517f0 to your computer and use it in GitHub Desktop.
Save ihebski/13c69f0badb50b8bbb76b92e6f7517f0 to your computer and use it in GitHub Desktop.
// shared by @Retrospected: https://github.com/Retrospected/spring-rce-poc
@InitBinder
public void initBinder(WebDataBinder binder) {
String[] blackList = {"class.*","Class.*","*.class.*",".*Class.*"};
binder.setDisallowedFields(blackList);
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment