亲测可用，中级漏洞，解决服务器段请求伪造
final String forURL = ESAPI.encoder().encodeForURL(url);
restTemplate.exchange(forURL, HttpMethod.GET,new HttpEntity(headers), List.class, params);
2023-01-16 11:22:03
1KB
1