BAEL-4946 moved deserialization vulnerabilities code to a new package

This commit is contained in:
Liam Garvie 2021-05-19 08:47:02 +01:00
parent 06aa7787bf
commit ef8ca20541
3 changed files with 1 additions and 1 deletions

View File

@ -13,7 +13,7 @@ public class BadThingUnitTest {
@Test @Test
@DisplayName("When a BadThing object is deserialized, then code execution in MyCustomAttackObject is run.") @DisplayName("When a BadThing object is deserialized, then code execution in MyCustomAttackObject is run.")
public void testCodeExecution() throws Exception { public void givenABadThingObject_whenItsDeserialized_thenExecutionIsRun() throws Exception {
BadThing bt = new BadThing(); BadThing bt = new BadThing();
bt.looselyDefinedThing = new MyCustomAttackObject(); bt.looselyDefinedThing = new MyCustomAttackObject();