Skip to content

Commit f0690fc

Browse files
committed
Add new Java URL redirect vulnerability example.
1 parent 1445360 commit f0690fc

File tree

1 file changed

+11
-0
lines changed

1 file changed

+11
-0
lines changed

src/main/java/org/joychou/controller/URLRedirect.java

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,9 @@
11
package org.joychou.controller;
22

33
import org.springframework.stereotype.Controller;
4+
import org.springframework.web.bind.annotation.GetMapping;
45
import org.springframework.web.bind.annotation.RequestMapping;
6+
import org.springframework.web.bind.annotation.RequestParam;
57
import org.springframework.web.bind.annotation.ResponseBody;
68

79
import javax.servlet.RequestDispatcher;
@@ -20,6 +22,15 @@
2022
@RequestMapping("/urlRedirect")
2123
public class URLRedirect {
2224

25+
/**
26+
* @disc: 存在URL重定向漏洞
27+
* @fix: 添加URL白名单 https://github.com/JoyChou93/trident/blob/master/src/main/java/CheckURL.java
28+
*/
29+
@GetMapping("/redirect")
30+
public String redirect(@RequestParam("url") String url) {
31+
return "redirect:" + url;
32+
}
33+
2334
/**
2435
* @disc: 存在URL重定向漏洞
2536
* @fix: 添加URL白名单 https://github.com/JoyChou93/trident/blob/master/src/main/java/CheckURL.java

0 commit comments

Comments
 (0)