Skip to content

What about potentially vulnerable classes that *aren't* in the config? #18

@SuperStormer

Description

@SuperStormer

Forgive me if I misread the code, but

if (patchModule.getClassesToPatch().contains(className)) {
suggests that OIS is only redirected to the filtered version in classes that are covered by one of the patchModules in the config. Wouldn't this leave open the possibility that a vulnerable class was missed and remains unpatched?

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or requesthelp wantedExtra attention is neededquestionFurther information is requested

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions