漏洞描述:
修复方式:
import java.io.IOException;
import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletResponse;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.stereotype.Component;
/**
* @author yi wei 渗透测试的Filter类
* @date create in 2021/11/30 10:43
**/
@Component
@javax.servlet.annotation.WebFilter(urlPatterns = "/", filterName = "WebFilter")
public class WebFilter implements Filter {
@Value(