Skip to content

Commit f779d40

Browse files
authored
Merge pull request #595 from 15911075183ma/beta
fix:修复jackson规则影响后续规则的问题,添加新的跳过规则
2 parents c0b7f6e + c44ce84 commit f779d40

File tree

2 files changed

+3
-2
lines changed

2 files changed

+3
-2
lines changed

dongtai-core/src/main/java/io/dongtai/iast/core/handler/hookpoint/controller/impl/PropagatorImpl.java

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,8 @@ public class PropagatorImpl {
3030
"java.net.URL.<init>(java.net.URL,java.lang.String,java.net.URLStreamHandler)",
3131
"java.net.URL.<init>(java.lang.String,java.lang.String,java.lang.String)", // indirect
3232
"java.net.URL.<init>(java.lang.String,java.lang.String,int,java.lang.String)", // indirect
33-
"java.net.URL.<init>(java.lang.String,java.lang.String,int,java.lang.String,java.net.URLStreamHandler)"
33+
"java.net.URL.<init>(java.lang.String,java.lang.String,int,java.lang.String,java.net.URLStreamHandler)",
34+
"com.fasterxml.jackson.databind.ObjectMapper.readValue(java.io.InputStream,com.fasterxml.jackson.databind.JavaType)"
3435
));
3536

3637
public static void solvePropagator(MethodEvent event, PropagatorNode propagatorNode, AtomicInteger invokeIdSequencer) {

dongtai-core/src/main/java/io/dongtai/iast/core/utils/TaintPoolUtils.java

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -153,7 +153,7 @@ public static void trackObject(MethodEvent event, PolicyNode policyNode, Object
153153
hash = System.identityHashCode(obj);
154154
identityHash = hash;
155155
}
156-
if (EngineManager.TAINT_HASH_CODES.contains(hash) && !isMicroservice) {
156+
if (EngineManager.TAINT_HASH_CODES.contains(hash)) {
157157
return;
158158
}
159159
}

0 commit comments

Comments
 (0)