Skip to content

Commit 885cde0

Browse files
修复漏洞类型和逻辑bug (#32)
1 parent f4ce0c4 commit 885cde0

File tree

2 files changed

+3
-3
lines changed

2 files changed

+3
-3
lines changed

dast-java/src/main/java/com/alipay/antbenchmark/controller/bs/BS00141Controller.java

+1-1
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ public class BS00141Controller extends HttpServlet {
2626
public void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
2727
response.setContentType("text/html;charset=UTF-8");
2828
String param = request.getParameter("BS00141");
29-
if (!new URL(param).getHost().endsWith("alipay.com")) {
29+
if (!new URL(param).getHost().endsWith(".alipay.com")) {
3030
response.getWriter().println("Hacker!");
3131
return;
3232
}
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
benchmark-version: "1.2"
2-
category: "cmdi"
2+
category: "sqli"
33
test-number: "00087"
44
vulnerability: "true"
5-
cwe: "78"
5+
cwe: "89"

0 commit comments

Comments
 (0)