Skip to content

Commit bf998be

Browse files
committed
Merge remote-tracking branch 'upstream/main' into main
2 parents 12e05e0 + aa2c433 commit bf998be

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

rules/scala/security/xmlinputfactory-dtd-enabled-scala.yml

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,4 +19,7 @@ rule:
1919
- pattern: new XMLInputFactory($$$)
2020
precedes:
2121
not:
22-
pattern: $XMLFACTORY.setProperty(javax.xml.stream.isSupportingExternalEntities, false)
22+
pattern: $XMLFACTORY.setProperty($MODE, false)
23+
constraints:
24+
MODE:
25+
regex: "javax.xml.stream.isSupportingExternalEntities"

0 commit comments

Comments
 (0)