@@ -0,0 +1,628 @@
+package bio.terra.janitor.app.controller;%0A%0Aimport org.springframework.core.annotation.Order;%0Aimport org.springframework.web.bind.WebDataBinder;%0Aimport org.springframework.web.bind.annotation.ControllerAdvice;%0Aimport org.springframework.web.bind.annotation.InitBinder;%0A%0A/** https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcement */%0A@ControllerAdvice%0A@Order%0Apublic class SetDisallowedBinderFields %7B%0A  @InitBinder%0A  public void setAllowedFields(WebDataBinder dataBinder) %7B%0A    String%5B%5D denylist = new String%5B%5D %7B%22class.*%22, %22Class.*%22, %22*.class.*%22, %22*.Class.*%22%7D;%0A    dataBinder.setDisallowedFields(denylist);%0A  %7D%0A%7D%0A

Patch Spring vulnerability (#132)