Predicate hasArgumentWithUnsafeJacksonAnnotation
Holds if call is a method call to a Jackson deserialization method such as ObjectMapper.readValue(String, Class),
and the target deserialized class has a field with a JsonTypeInfo annotation that enables polymorphic typing.
Import path
import semmle.code.java.frameworks.Jacksonpredicate hasArgumentWithUnsafeJacksonAnnotation(MethodCall call)