BAEL-4946 moved deserialization vulnerabilities code to a new package

This commit is contained in:
Liam Garvie
2021-05-19 08:47:02 +01:00
parent 2863f0932c
commit 1ab5df70cc
3 changed files with 1 additions and 1 deletions

View File

@@ -13,7 +13,7 @@ public class BadThingUnitTest {
@Test @Test
@DisplayName("When a BadThing object is deserialized, then code execution in MyCustomAttackObject is run.") @DisplayName("When a BadThing object is deserialized, then code execution in MyCustomAttackObject is run.")
public void testCodeExecution() throws Exception { public void givenABadThingObject_whenItsDeserialized_thenExecutionIsRun() throws Exception {
BadThing bt = new BadThing(); BadThing bt = new BadThing();
bt.looselyDefinedThing = new MyCustomAttackObject(); bt.looselyDefinedThing = new MyCustomAttackObject();