struts2-scaffold/target/classes/com/example/struts2/interceptor/ValidationInterceptor.class

<EFBFBD><EFBFBD><EFBFBD><EFBFBD>=<00>

7com/opensymphony/xwork2/interceptor/AbstractInterceptor
<init>
()V		

java/lang/System
out
Ljava/io/PrintStream;
*[ValidationInterceptor] 开始参数验证

java/io/PrintStream
println
(Ljava/lang/String;)V
(com/opensymphony/xwork2/ActionInvocation
getInvocationContext
)()Lcom/opensymphony/xwork2/ActionContext;
 
%com/opensymphony/xwork2/ActionContext

getParameters
0()Lorg/apache/struts2/dispatcher/HttpParameters;
"#$%&
,org/apache/struts2/dispatcher/HttpParameters
keySet
()Ljava/util/Set;()*+,

java/util/Set
iterator
()Ljava/util/Iterator;./012
java/util/Iterator
hasNext
()Z.456
next
()Ljava/lang/Object;8
java/lang/String
":;<
get
=(Ljava/lang/Object;)Lorg/apache/struts2/dispatcher/Parameter;>?@AB
'org/apache/struts2/dispatcher/Parameter
getMultipleValues
()[Ljava/lang/String;
DEFGH
5com/example/struts2/interceptor/ValidationInterceptor
containsXss
(Ljava/lang/String;)ZJKL
makeConcatWithConstants
&(Ljava/lang/String;)Ljava/lang/String;N
invalidInputP
*[ValidationInterceptor] 参数验证通过RST
invoke
()Ljava/lang/String;
7VWT
toLowerCaseY
<script
7[\]
contains
(Ljava/lang/CharSequence;)Z_
javascript:a
onerror=
Code
LineNumberTable
LocalVariableTable
this
7Lcom/example/struts2/interceptor/ValidationInterceptor;
	intercept
>(Lcom/opensymphony/xwork2/ActionInvocation;)Ljava/lang/String;
value
Ljava/lang/String;
values
[Ljava/lang/String;
	paramName

invocation
*Lcom/opensymphony/xwork2/ActionInvocation;
params
.Lorg/apache/struts2/dispatcher/HttpParameters;

StackMapTablel

Exceptionsv
java/lang/Exception
lower

SourceFile
ValidationInterceptor.java
BootstrapMethods|
0[ValidationInterceptor] 检测到可疑参数: 
~
<00><00>K<00>
$java/lang/invoke/StringConcatFactory
<00>(Ljava/lang/invoke/MethodHandles$Lookup;Ljava/lang/String;Ljava/lang/invoke/MethodType;Ljava/lang/String;[Ljava/lang/Object;)Ljava/lang/invoke/CallSite;
InnerClasses<00>
%java/lang/invoke/MethodHandles$Lookup<00>
java/lang/invoke/MethodHandles
Lookup!D

b/

*<2A>
<01>c
d
ef
ghb
_
<00><>
<0A>+<2B>
<00>M,<2C>!<21>'
N-<2D>-
<00>\-<2D>3
<00>7:,<04>9<>=
:<05><:<06>66<07>)2:	*	<09>C<><13><04>I<00>M<><4D>
<01><>֧<EFBFBD><D6A7><EFBFBD>O<>+<2B>Q
<00>c6
0=B\eru{~!<00>"d>\ij	=>kl0Kmj<00>ef<00>no
{pqr@<05>".<2E>1	D".7ss

&<26>D".<00>t
uGH
b<00>,+<2B><03>+<2B>UM,X<>Z<>,^<5E>Z<>,`<60>Z<><04><03>c&'() *+(d ,ef,ij
!wjr<06>7@
xyz
}
{<00>

<00><00><00>