io.codemodder.codemods.UnsafeReflectionRemediationCodemod.report.json Maven / Gradle / Ivy
Go to download
Show more of this group Show more artifacts with this name
Show all versions of core-codemods Show documentation
Show all versions of core-codemods Show documentation
Codemods for fixing common errors across many Java projects
{
"summary": "Replaced unsafe usages of `Class.forName` with hardened alternative `Reflection.loadAndVerify`",
"change": "Replaced unsafe usages of `Class.forName` with hardened alternative `Reflection.loadAndVerify`",
"reviewGuidanceJustification": "Reflection.loadAndVerify disallows the loading of classes that are well-known to be dangerous paths to remote code execution. Pathological cases aside, the use of Reflection.loadAndVerify will not disrupt the typical operations of an application.",
"references": [
"https://rules.sonarsource.com/java/RSPEC-2658/"
]
}