fix CVE-2019-9212 (#84)

sofastack · Jun 8, 2023 · 1d88db3 · 1d88db3
1 parent 4fb1ba0
commit 1d88db3
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/main/resources/security/serialize.blacklist b/src/main/resources/security/serialize.blacklist
@@ -63,4 +63,6 @@ org.apache.tomcat.dbcp.dbcp.BasicDataSource
 com.sun.org.apache.xml.internal.security.signature.XMLSignatureInput
 javassist.tools.web.Viewer
 net.bytebuddy.dynamic.loading.ByteArrayClassLoader
-org.apache.commons.beanutils.BeanMap
+org.apache.commons.beanutils.BeanMap
+com.caucho.naming.Qname
+com.sun.org.apache.xpath.internal.objects.Xstring