Package com.evolveum.midpoint.rest.impl

Class BinderControllerAdvice

java.lang.Object

com.evolveum.midpoint.rest.impl.BinderControllerAdvice

@ControllerAdvice
@Order
public class BinderControllerAdvice
extends Object

Constructor Summary

Constructors

Constructor	Description
BinderControllerAdvice()

Method Summary

Modifier and Type	Method	Description
void	setAllowedFields(org.springframework.web.bind.WebDataBinder dataBinder)	Should prevent Spring4Shell vulnerability (but we believe midPoint does not allow it anyway).

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

BinderControllerAdvice

public BinderControllerAdvice()

Method Details

setAllowedFields

@InitBinder
public void setAllowedFields(org.springframework.web.bind.WebDataBinder dataBinder)

Should prevent Spring4Shell vulnerability (but we believe midPoint does not allow it anyway). See https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcement[this] for more info.