From 439307046eb8523dca9d5f2630200a1dcab6c424 Mon Sep 17 00:00:00 2001
From: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Date: Mon, 12 Oct 2026 13:34:10 +0000
Subject: [PATCH] bug: disable Spring Data web support to close CVE-2026-41721
 data-binding DoS path (sfind-72af087c)

---
 .../src/main/java/com/userFront/UserFrontApplication.java      | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/UserFront/src/main/java/com/userFront/UserFrontApplication.java b/UserFront/src/main/java/com/userFront/UserFrontApplication.java
index 038538be..e84df71f 100644
--- a/UserFront/src/main/java/com/userFront/UserFrontApplication.java
+++ b/UserFront/src/main/java/com/userFront/UserFrontApplication.java
@@ -2,8 +2,9 @@
 
 import org.springframework.boot.SpringApplication;
 import org.springframework.boot.autoconfigure.SpringBootApplication;
+import org.springframework.boot.autoconfigure.data.web.SpringDataWebAutoConfiguration;
 
-@SpringBootApplication
+@SpringBootApplication(exclude = SpringDataWebAutoConfiguration.class)
 public class UserFrontApplication {
 
 	public static void main(String[] args) {