Skip XSS check for freemarker built-in escaping expressions in 2.3.24 instrumentation#10865

Open

jandro996 wants to merge 3 commits intomasterfrom

alejandro.gonzalez/fix-iast-freemarker

Commits on Mar 17, 2026

fix(iast): skip XSS check for freemarker built-in escaping expressions in 2.3.24 instrumentation
jandro996
committed
Fixed. Replaced instanceof BuiltIn with instanceof BuiltInForLegacyEscaping, the abstract base class that covers exactly ?html, ?xml, and ?xhtml in freemarker 2.3.24. Non-escaping built-ins like ?u…
jandro996
committed
Merge branch 'master' into alejandro.gonzalez/fix-iast-freemarker
jandro996
authored