Skip to content

Conversation

@jthack
Copy link
Contributor

@jthack jthack commented Oct 21, 2025

Hopefully this fixes #153

codex wrote this. we need to review it.

@jthack jthack requested a review from a team as a code owner October 21, 2025 16:08
@jthack jthack force-pushed the issue-153-serialized-object branch from 3209b65 to 55139ad Compare October 21, 2025 17:35
@jthack jthack force-pushed the issue-153-serialized-object branch from 55139ad to 93ec3ef Compare October 21, 2025 17:36
Add comprehensive test coverage for Java serialization detection:
- Detection: Request/response via Content-Type, body signatures (rO0AB, aced0005), charset parameters
- Detection: Both request and response serialization simultaneously
- False Positives: JSON/plain text without indicators
- Edge Cases: Empty bodies, RCE warnings in descriptions
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Serialized object in HTTP message

2 participants