{"version":"1.0","provider_name":"The S-Unit","provider_url":"https:\/\/the-s-unit.nl\/en\/","title":"TSU-08: Insecure custom Java - The S-Unit","type":"rich","width":600,"height":338,"html":"<blockquote class=\"wp-embedded-content\" data-secret=\"mDDEKLBMYz\"><a href=\"https:\/\/the-s-unit.nl\/en\/mendix\/the-s-unit-top-10\/tsu-08\/\">TSU-08: Insecure custom Java<\/a><\/blockquote><iframe sandbox=\"allow-scripts\" security=\"restricted\" src=\"https:\/\/the-s-unit.nl\/en\/mendix\/the-s-unit-top-10\/tsu-08\/embed\/#?secret=mDDEKLBMYz\" width=\"600\" height=\"338\" title=\"&#8220;TSU-08: Insecure custom Java&#8221; &#8212; The S-Unit\" data-secret=\"mDDEKLBMYz\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\" class=\"wp-embedded-content\"><\/iframe><script>\n\/*! This file is auto-generated *\/\n!function(d,l){\"use strict\";l.querySelector&&d.addEventListener&&\"undefined\"!=typeof URL&&(d.wp=d.wp||{},d.wp.receiveEmbedMessage||(d.wp.receiveEmbedMessage=function(e){var t=e.data;if((t||t.secret||t.message||t.value)&&!\/[^a-zA-Z0-9]\/.test(t.secret)){for(var s,r,n,a=l.querySelectorAll('iframe[data-secret=\"'+t.secret+'\"]'),o=l.querySelectorAll('blockquote[data-secret=\"'+t.secret+'\"]'),c=new RegExp(\"^https?:$\",\"i\"),i=0;i<o.length;i++)o[i].style.display=\"none\";for(i=0;i<a.length;i++)s=a[i],e.source===s.contentWindow&&(s.removeAttribute(\"style\"),\"height\"===t.message?(1e3<(r=parseInt(t.value,10))?r=1e3:~~r<200&&(r=200),s.height=r):\"link\"===t.message&&(r=new URL(s.getAttribute(\"src\")),n=new URL(t.value),c.test(n.protocol))&&n.host===r.host&&l.activeElement===s&&(d.top.location.href=t.value))}},d.addEventListener(\"message\",d.wp.receiveEmbedMessage,!1),l.addEventListener(\"DOMContentLoaded\",function(){for(var e,t,s=l.querySelectorAll(\"iframe.wp-embedded-content\"),r=0;r<s.length;r++)(t=(e=s[r]).getAttribute(\"data-secret\"))||(t=Math.random().toString(36).substring(2,12),e.src+=\"#?secret=\"+t,e.setAttribute(\"data-secret\",t)),e.contentWindow.postMessage({message:\"ready\",secret:t},\"*\")},!1)))}(window,document);\n\/\/# sourceURL=https:\/\/the-s-unit.nl\/wp-includes\/js\/wp-embed.min.js\n<\/script>\n","description":"TSU-08: Insecure custom Java TSU-08 concerns security issues that arise from the unsafe use of custom Java code in Mendix applications. Mendix allows the standard functionality of the platform to be extended with Java code. This can be done, among other things, by: creating additional Java actions that are invoked from microflows creating new URL [&hellip;]","thumbnail_url":"https:\/\/the-s-unit.nl\/wp-content\/uploads\/2026\/10\/The-S-unit-Top-10-TSU-8.png"}