Skip to content

Commit 1bf7e19

Browse files
committed
wip
1 parent 0b9fa7f commit 1bf7e19

1 file changed

Lines changed: 6 additions & 8 deletions

File tree

dd-java-agent/appsec/src/main/java/com/datadog/appsec/event/data/ObjectIntrospection.java

Lines changed: 6 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -302,15 +302,13 @@ private static Object doConversion(Object obj, int depth, State state) {
302302
log.error("Unable to get field value", e);
303303
// TODO: Use invalid object
304304
}
305-
} else {
306-
// This field is inaccessible (Strongly Encapsulated Internal class on Java 9+).
307-
// Skip it and continue with the remaining fields — other accessible fields on the
308-
// same object may still contain useful data for WAF inspection. Do NOT call
309-
// obj.toString() here: JDK internal toString() representations (e.g.
310-
// "class java.lang.Object") can match legitimate WAF phrase_match rules and
311-
// produce false positives (e.g. crs-944-130 java_code_injection).
312-
continue;
313305
}
306+
// This field is inaccessible (Strongly Encapsulated Internal class on Java 9+).
307+
// Skip it and continue with the remaining fields — other accessible fields on the
308+
// same object may still contain useful data for WAF inspection. Do NOT call
309+
// obj.toString() here: JDK internal toString() representations (e.g.
310+
// "class java.lang.Object") can match legitimate WAF phrase_match rules and
311+
// produce false positives (e.g. crs-944-130 java_code_injection).
314312
}
315313
}
316314

0 commit comments

Comments
 (0)