René's URL Explorer Experiment


Title: hessian xslt 链反序列化报错 · Issue #1 · Boogipop/JavaSec · GitHub

Open Graph Title: hessian xslt 链反序列化报错 · Issue #1 · Boogipop/JavaSec

X Title: hessian xslt 链反序列化报错 · Issue #1 · Boogipop/JavaSec

Description: E:\jdk\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\bin\java.exe "-javaagent:C:\Program Files\JetBrains\IntelliJ IDEA 2023.3.2\lib\idea_rt.jar=3686:C:\Program Files\JetBrains\IntelliJ IDEA 2023.3.2\bin" -Dfile.encoding=UTF...

Open Graph Description: E:\jdk\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\bin\java.exe "-javaagent:C:\Program Files\JetBrains\IntelliJ IDEA 2023.3.2\lib\idea_rt.jar=3686:C:\Program Files\JetBrains\Intelli...

X Description: E:\jdk\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\bin\java.exe "-javaagent:C:\Program Files\JetBrains\IntelliJ IDEA 2023.3.2\lib\idea_rt.jar=3686:C:\Program Files\JetBrains\In...

Opengraph URL: https://github.com/Boogipop/JavaSec/issues/1

X: @github

direct link

Domain: github.com


Hey, it has json ld scripts:
{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"hessian xslt 链反序列化报错","articleBody":"E:\\jdk\\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\\bin\\java.exe \"-javaagent:C:\\Program Files\\JetBrains\\IntelliJ IDEA 2023.3.2\\lib\\idea_rt.jar=3686:C:\\Program Files\\JetBrains\\IntelliJ IDEA 2023.3.2\\bin\" -Dfile.encoding=UTF-8 -classpath E:\\jdk\\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\\jre\\lib\\charsets.jar;E:\\jdk\\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\\jre\\lib\\ext\\access-bridge-64.jar;E:\\jdk\\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\\jre\\lib\\ext\\cldrdata.jar;E:\\jdk\\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\\jre\\lib\\ext\\dnsns.jar;E:\\jdk\\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\\jre\\lib\\ext\\jaccess.jar;E:\\jdk\\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\\jre\\lib\\ext\\localedata.jar;E:\\jdk\\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\\jre\\lib\\ext\\nashorn.jar;E:\\jdk\\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\\jre\\lib\\ext\\sunec.jar;E:\\jdk\\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\\jre\\lib\\ext\\sunjce_provider.jar;E:\\jdk\\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\\jre\\lib\\ext\\sunmscapi.jar;E:\\jdk\\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\\jre\\lib\\ext\\sunpkcs11.jar;E:\\jdk\\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\\jre\\lib\\ext\\zipfs.jar;E:\\jdk\\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\\jre\\lib\\jce.jar;E:\\jdk\\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\\jre\\lib\\jsse.jar;E:\\jdk\\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\\jre\\lib\\management-agent.jar;E:\\jdk\\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\\jre\\lib\\resources.jar;E:\\jdk\\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\\jre\\lib\\rt.jar;D:\\workspace\\JavaSec\\target\\classes;C:\\Users\\admin\\.m2\\repository\\io\\minio\\minio\\8.3.3\\minio-8.3.3.jar;C:\\Users\\admin\\.m2\\repository\\com\\carrotsearch\\thirdparty\\simple-xml-safe\\2.7.1\\simple-xml-safe-2.7.1.jar;C:\\Users\\admin\\.m2\\repository\\com\\google\\guava\\guava\\30.1.1-jre\\guava-30.1.1-jre.jar;C:\\Users\\admin\\.m2\\repository\\com\\google\\guava\\failureaccess\\1.0.1\\failureaccess-1.0.1.jar;C:\\Users\\admin\\.m2\\repository\\com\\google\\guava\\listenablefuture\\9999.0-empty-to-avoid-conflict-with-guava\\listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar;C:\\Users\\admin\\.m2\\repository\\com\\google\\code\\findbugs\\jsr305\\3.0.2\\jsr305-3.0.2.jar;C:\\Users\\admin\\.m2\\repository\\com\\google\\errorprone\\error_prone_annotations\\2.5.1\\error_prone_annotations-2.5.1.jar;C:\\Users\\admin\\.m2\\repository\\com\\google\\j2objc\\j2objc-annotations\\1.3\\j2objc-annotations-1.3.jar;C:\\Users\\admin\\.m2\\repository\\com\\squareup\\okhttp3\\okhttp\\4.8.1\\okhttp-4.8.1.jar;C:\\Users\\admin\\.m2\\repository\\com\\squareup\\okio\\okio\\2.7.0\\okio-2.7.0.jar;C:\\Users\\admin\\.m2\\repository\\org\\jetbrains\\kotlin\\kotlin-stdlib-common\\1.3.70\\kotlin-stdlib-common-1.3.70.jar;C:\\Users\\admin\\.m2\\repository\\org\\jetbrains\\kotlin\\kotlin-stdlib\\1.3.72\\kotlin-stdlib-1.3.72.jar;C:\\Users\\admin\\.m2\\repository\\org\\jetbrains\\annotations\\13.0\\annotations-13.0.jar;C:\\Users\\admin\\.m2\\repository\\com\\fasterxml\\jackson\\core\\jackson-annotations\\2.11.2\\jackson-annotations-2.11.2.jar;C:\\Users\\admin\\.m2\\repository\\com\\fasterxml\\jackson\\core\\jackson-core\\2.11.2\\jackson-core-2.11.2.jar;C:\\Users\\admin\\.m2\\repository\\com\\fasterxml\\jackson\\core\\jackson-databind\\2.11.2\\jackson-databind-2.11.2.jar;C:\\Users\\admin\\.m2\\repository\\org\\bouncycastle\\bcprov-jdk15on\\1.69\\bcprov-jdk15on-1.69.jar;C:\\Users\\admin\\.m2\\repository\\com\\thoughtworks\\xstream\\xstream\\1.4.16\\xstream-1.4.16.jar;C:\\Users\\admin\\.m2\\repository\\io\\github\\x-stream\\mxparser\\1.2.1\\mxparser-1.2.1.jar;C:\\Users\\admin\\.m2\\repository\\xmlpull\\xmlpull\\1.1.3.1\\xmlpull-1.1.3.1.jar;C:\\Users\\admin\\.m2\\repository\\com\\caucho\\resin\\4.0.64\\resin-4.0.64.jar;C:\\Users\\admin\\.m2\\repository\\com\\caucho\\javaee-16\\4.0.64\\javaee-16-4.0.64.jar;C:\\Users\\admin\\.m2\\repository\\com\\caucho\\quercus\\4.0.64\\quercus-4.0.64.jar;C:\\Users\\admin\\.m2\\repository\\javax\\activation\\activation\\1.1\\activation-1.1.jar;C:\\Users\\admin\\.m2\\repository\\javax\\mail\\mail\\1.4.1\\mail-1.4.1.jar;C:\\Users\\admin\\.m2\\repository\\org\\springframework\\boot\\spring-boot-starter-web\\2.6.7\\spring-boot-starter-web-2.6.7.jar;C:\\Users\\admin\\.m2\\repository\\org\\springframework\\boot\\spring-boot-starter\\2.6.7\\spring-boot-starter-2.6.7.jar;C:\\Users\\admin\\.m2\\repository\\org\\springframework\\boot\\spring-boot\\2.6.7\\spring-boot-2.6.7.jar;C:\\Users\\admin\\.m2\\repository\\org\\springframework\\boot\\spring-boot-autoconfigure\\2.6.7\\spring-boot-autoconfigure-2.6.7.jar;C:\\Users\\admin\\.m2\\repository\\org\\springframework\\boot\\spring-boot-starter-logging\\2.6.7\\spring-boot-starter-logging-2.6.7.jar;C:\\Users\\admin\\.m2\\repository\\ch\\qos\\logback\\logback-classic\\1.2.11\\logback-classic-1.2.11.jar;C:\\Users\\admin\\.m2\\repository\\ch\\qos\\logback\\logback-core\\1.2.11\\logback-core-1.2.11.jar;C:\\Users\\admin\\.m2\\repository\\org\\apache\\logging\\log4j\\log4j-to-slf4j\\2.17.2\\log4j-to-slf4j-2.17.2.jar;C:\\Users\\admin\\.m2\\repository\\org\\apache\\logging\\log4j\\log4j-api\\2.17.2\\log4j-api-2.17.2.jar;C:\\Users\\admin\\.m2\\repository\\org\\slf4j\\jul-to-slf4j\\1.7.36\\jul-to-slf4j-1.7.36.jar;C:\\Users\\admin\\.m2\\repository\\jakarta\\annotation\\jakarta.annotation-api\\1.3.5\\jakarta.annotation-api-1.3.5.jar;C:\\Users\\admin\\.m2\\repository\\org\\yaml\\snakeyaml\\1.29\\snakeyaml-1.29.jar;C:\\Users\\admin\\.m2\\repository\\org\\springframework\\boot\\spring-boot-starter-tomcat\\2.6.7\\spring-boot-starter-tomcat-2.6.7.jar;C:\\Users\\admin\\.m2\\repository\\org\\apache\\tomcat\\embed\\tomcat-embed-el\\9.0.62\\tomcat-embed-el-9.0.62.jar;C:\\Users\\admin\\.m2\\repository\\org\\apache\\tomcat\\embed\\tomcat-embed-websocket\\9.0.62\\tomcat-embed-websocket-9.0.62.jar;C:\\Users\\admin\\.m2\\repository\\org\\springframework\\spring-web\\5.3.19\\spring-web-5.3.19.jar;C:\\Users\\admin\\.m2\\repository\\org\\springframework\\spring-webmvc\\5.3.19\\spring-webmvc-5.3.19.jar;C:\\Users\\admin\\.m2\\repository\\commons-collections\\commons-collections\\3.2.2\\commons-collections-3.2.2.jar;C:\\Users\\admin\\.m2\\repository\\commons-logging\\commons-logging\\1.2\\commons-logging-1.2.jar;C:\\Users\\admin\\.m2\\repository\\org\\apache\\commons\\commons-collections4\\4.0\\commons-collections4-4.0.jar;C:\\Users\\admin\\.m2\\repository\\org\\springframework\\spring-core\\4.1.3.RELEASE\\spring-core-4.1.3.RELEASE.jar;C:\\Users\\admin\\.m2\\repository\\commons-beanutils\\commons-beanutils\\1.9.0\\commons-beanutils-1.9.0.jar;C:\\Users\\admin\\.m2\\repository\\org\\springframework\\spring-beans\\4.1.3.RELEASE\\spring-beans-4.1.3.RELEASE.jar;C:\\Users\\admin\\.m2\\repository\\org\\apache\\shiro\\shiro-core\\1.2.4\\shiro-core-1.2.4.jar;C:\\Users\\admin\\.m2\\repository\\org\\slf4j\\slf4j-api\\1.6.4\\slf4j-api-1.6.4.jar;C:\\Users\\admin\\.m2\\repository\\org\\apache\\flex\\blazeds\\flex-messaging-common\\4.8.0\\flex-messaging-common-4.8.0.jar;C:\\Users\\admin\\.m2\\repository\\org\\apache\\flex\\blazeds\\flex-messaging-core\\4.8.0\\flex-messaging-core-4.8.0.jar;C:\\Users\\admin\\.m2\\repository\\com\\rometools\\rome\\2.1.0\\rome-2.1.0.jar;C:\\Users\\admin\\.m2\\repository\\com\\rometools\\rome-utils\\2.1.0\\rome-utils-2.1.0.jar;C:\\Users\\admin\\.m2\\repository\\org\\jdom\\jdom2\\2.0.6.1\\jdom2-2.0.6.1.jar;C:\\Users\\admin\\.m2\\repository\\rome\\rome\\1.0\\rome-1.0.jar;C:\\Users\\admin\\.m2\\repository\\jdom\\jdom\\1.0\\jdom-1.0.jar;C:\\Users\\admin\\.m2\\repository\\org\\springframework\\spring-aop\\5.0.0.RELEASE\\spring-aop-5.0.0.RELEASE.jar;C:\\Users\\admin\\.m2\\repository\\org\\postgresql\\postgresql\\42.3.1\\postgresql-42.3.1.jar;C:\\Users\\admin\\.m2\\repository\\org\\checkerframework\\checker-qual\\3.5.0\\checker-qual-3.5.0.jar;C:\\Users\\admin\\.m2\\repository\\com\\google\\code\\gson\\gson\\2.10.1\\gson-2.10.1.jar;C:\\Users\\admin\\.m2\\repository\\com\\ibm\\db2\\jcc\\11.5.0.0\\jcc-11.5.0.0.jar;C:\\Users\\admin\\.m2\\repository\\org\\apache\\derby\\derby\\10.10.1.1\\derby-10.10.1.1.jar;C:\\Users\\admin\\.m2\\repository\\org\\modeshape\\modeshape-jdbc\\5.4.1.Final\\modeshape-jdbc-5.4.1.Final.jar;C:\\Users\\admin\\.m2\\repository\\org\\modeshape\\modeshape-common\\5.4.1.Final\\modeshape-common-5.4.1.Final.jar;C:\\Users\\admin\\.m2\\repository\\org\\modeshape\\modeshape-jcr-api\\5.4.1.Final\\modeshape-jcr-api-5.4.1.Final.jar;C:\\Users\\admin\\.m2\\repository\\org\\modeshape\\modeshape-jdbc-local\\5.4.1.Final\\modeshape-jdbc-local-5.4.1.Final.jar;C:\\Users\\admin\\.m2\\repository\\org\\codehaus\\jettison\\jettison\\1.3.3\\jettison-1.3.3.jar;C:\\Users\\admin\\.m2\\repository\\org\\apache\\httpcomponents\\httpcore\\4.4\\httpcore-4.4.jar;C:\\Users\\admin\\.m2\\repository\\org\\apache\\httpcomponents\\httpclient\\4.4\\httpclient-4.4.jar;C:\\Users\\admin\\.m2\\repository\\commons-codec\\commons-codec\\1.9\\commons-codec-1.9.jar;C:\\Users\\admin\\.m2\\repository\\com\\h2database\\h2\\1.4.191\\h2-1.4.191.jar;C:\\Users\\admin\\.m2\\repository\\com\\alibaba\\fastjson\\1.2.43\\fastjson-1.2.43.jar;C:\\Users\\admin\\.m2\\repository\\org\\aspectj\\aspectjweaver\\1.9.2\\aspectjweaver-1.9.2.jar;C:\\Users\\admin\\.m2\\repository\\org\\springframework\\spring-context\\4.1.3.RELEASE\\spring-context-4.1.3.RELEASE.jar;C:\\Users\\admin\\.m2\\repository\\org\\springframework\\spring-expression\\4.1.3.RELEASE\\spring-expression-4.1.3.RELEASE.jar;C:\\Users\\admin\\.m2\\repository\\mysql\\mysql-connector-java\\8.0.19\\mysql-connector-java-8.0.19.jar;C:\\Users\\admin\\.m2\\repository\\com\\google\\protobuf\\protobuf-java\\3.6.1\\protobuf-java-3.6.1.jar;C:\\Users\\admin\\.m2\\repository\\com\\caucho\\hessian\\4.0.63\\hessian-4.0.63.jar;C:\\Users\\admin\\.m2\\repository\\org\\springdoc\\springdoc-openapi-ui\\1.6.14\\springdoc-openapi-ui-1.6.14.jar;C:\\Users\\admin\\.m2\\repository\\org\\springdoc\\springdoc-openapi-webmvc-core\\1.6.14\\springdoc-openapi-webmvc-core-1.6.14.jar;C:\\Users\\admin\\.m2\\repository\\org\\springdoc\\springdoc-openapi-common\\1.6.14\\springdoc-openapi-common-1.6.14.jar;C:\\Users\\admin\\.m2\\repository\\io\\swagger\\core\\v3\\swagger-core\\2.2.7\\swagger-core-2.2.7.jar;C:\\Users\\admin\\.m2\\repository\\org\\apache\\commons\\commons-lang3\\3.12.0\\commons-lang3-3.12.0.jar;C:\\Users\\admin\\.m2\\repository\\com\\fasterxml\\jackson\\dataformat\\jackson-dataformat-yaml\\2.14.0\\jackson-dataformat-yaml-2.14.0.jar;C:\\Users\\admin\\.m2\\repository\\com\\fasterxml\\jackson\\datatype\\jackson-datatype-jsr310\\2.14.0\\jackson-datatype-jsr310-2.14.0.jar;C:\\Users\\admin\\.m2\\repository\\io\\swagger\\core\\v3\\swagger-annotations\\2.2.7\\swagger-annotations-2.2.7.jar;C:\\Users\\admin\\.m2\\repository\\io\\swagger\\core\\v3\\swagger-models\\2.2.7\\swagger-models-2.2.7.jar;C:\\Users\\admin\\.m2\\repository\\jakarta\\validation\\jakarta.validation-api\\2.0.2\\jakarta.validation-api-2.0.2.jar;C:\\Users\\admin\\.m2\\repository\\org\\webjars\\swagger-ui\\4.15.5\\swagger-ui-4.15.5.jar;C:\\Users\\admin\\.m2\\repository\\org\\webjars\\webjars-locator-core\\0.52\\webjars-locator-core-0.52.jar;C:\\Users\\admin\\.m2\\repository\\io\\github\\classgraph\\classgraph\\4.8.149\\classgraph-4.8.149.jar;C:\\Users\\admin\\.m2\\repository\\org\\springframework\\boot\\spring-boot-starter-test\\2.7.14\\spring-boot-starter-test-2.7.14.jar;C:\\Users\\admin\\.m2\\repository\\org\\springframework\\boot\\spring-boot-test\\2.7.14\\spring-boot-test-2.7.14.jar;C:\\Users\\admin\\.m2\\repository\\org\\springframework\\boot\\spring-boot-test-autoconfigure\\2.7.14\\spring-boot-test-autoconfigure-2.7.14.jar;C:\\Users\\admin\\.m2\\repository\\com\\jayway\\jsonpath\\json-path\\2.7.0\\json-path-2.7.0.jar;C:\\Users\\admin\\.m2\\repository\\net\\minidev\\json-smart\\2.4.7\\json-smart-2.4.7.jar;C:\\Users\\admin\\.m2\\repository\\net\\minidev\\accessors-smart\\2.4.7\\accessors-smart-2.4.7.jar;C:\\Users\\admin\\.m2\\repository\\org\\ow2\\asm\\asm\\9.1\\asm-9.1.jar;C:\\Users\\admin\\.m2\\repository\\jakarta\\xml\\bind\\jakarta.xml.bind-api\\2.3.3\\jakarta.xml.bind-api-2.3.3.jar;C:\\Users\\admin\\.m2\\repository\\jakarta\\activation\\jakarta.activation-api\\1.2.2\\jakarta.activation-api-1.2.2.jar;C:\\Users\\admin\\.m2\\repository\\org\\assertj\\assertj-core\\3.22.0\\assertj-core-3.22.0.jar;C:\\Users\\admin\\.m2\\repository\\org\\hamcrest\\hamcrest\\2.2\\hamcrest-2.2.jar;C:\\Users\\admin\\.m2\\repository\\org\\junit\\jupiter\\junit-jupiter\\5.8.2\\junit-jupiter-5.8.2.jar;C:\\Users\\admin\\.m2\\repository\\org\\junit\\jupiter\\junit-jupiter-api\\5.8.2\\junit-jupiter-api-5.8.2.jar;C:\\Users\\admin\\.m2\\repository\\org\\opentest4j\\opentest4j\\1.2.0\\opentest4j-1.2.0.jar;C:\\Users\\admin\\.m2\\repository\\org\\junit\\platform\\junit-platform-commons\\1.8.2\\junit-platform-commons-1.8.2.jar;C:\\Users\\admin\\.m2\\repository\\org\\apiguardian\\apiguardian-api\\1.1.2\\apiguardian-api-1.1.2.jar;C:\\Users\\admin\\.m2\\repository\\org\\junit\\jupiter\\junit-jupiter-params\\5.8.2\\junit-jupiter-params-5.8.2.jar;C:\\Users\\admin\\.m2\\repository\\org\\junit\\jupiter\\junit-jupiter-engine\\5.8.2\\junit-jupiter-engine-5.8.2.jar;C:\\Users\\admin\\.m2\\repository\\org\\junit\\platform\\junit-platform-engine\\1.8.2\\junit-platform-engine-1.8.2.jar;C:\\Users\\admin\\.m2\\repository\\org\\mockito\\mockito-core\\4.5.1\\mockito-core-4.5.1.jar;C:\\Users\\admin\\.m2\\repository\\net\\bytebuddy\\byte-buddy\\1.12.9\\byte-buddy-1.12.9.jar;C:\\Users\\admin\\.m2\\repository\\net\\bytebuddy\\byte-buddy-agent\\1.12.9\\byte-buddy-agent-1.12.9.jar;C:\\Users\\admin\\.m2\\repository\\org\\objenesis\\objenesis\\3.2\\objenesis-3.2.jar;C:\\Users\\admin\\.m2\\repository\\org\\mockito\\mockito-junit-jupiter\\4.5.1\\mockito-junit-jupiter-4.5.1.jar;C:\\Users\\admin\\.m2\\repository\\org\\skyscreamer\\jsonassert\\1.5.1\\jsonassert-1.5.1.jar;C:\\Users\\admin\\.m2\\repository\\com\\vaadin\\external\\google\\android-json\\0.0.20131108.vaadin1\\android-json-0.0.20131108.vaadin1.jar;C:\\Users\\admin\\.m2\\repository\\org\\springframework\\spring-test\\5.3.29\\spring-test-5.3.29.jar;C:\\Users\\admin\\.m2\\repository\\org\\xmlunit\\xmlunit-core\\2.9.1\\xmlunit-core-2.9.1.jar;C:\\Users\\admin\\.m2\\repository\\javassist\\javassist\\3.12.1.GA\\javassist-3.12.1.GA.jar;C:\\Users\\admin\\.m2\\repository\\org\\apache\\tomcat\\embed\\tomcat-embed-core\\9.0.55\\tomcat-embed-core-9.0.55.jar;C:\\Users\\admin\\.m2\\repository\\org\\apache\\tomcat\\tomcat-annotations-api\\9.0.55\\tomcat-annotations-api-9.0.55.jar;C:\\Users\\admin\\.m2\\repository\\org\\hibernate\\hibernate-core\\4.3.11.Final\\hibernate-core-4.3.11.Final.jar;C:\\Users\\admin\\.m2\\repository\\org\\jboss\\logging\\jboss-logging\\3.1.3.GA\\jboss-logging-3.1.3.GA.jar;C:\\Users\\admin\\.m2\\repository\\org\\jboss\\logging\\jboss-logging-annotations\\1.2.0.Beta1\\jboss-logging-annotations-1.2.0.Beta1.jar;C:\\Users\\admin\\.m2\\repository\\org\\jboss\\spec\\javax\\transaction\\jboss-transaction-api_1.2_spec\\1.0.0.Final\\jboss-transaction-api_1.2_spec-1.0.0.Final.jar;C:\\Users\\admin\\.m2\\repository\\dom4j\\dom4j\\1.6.1\\dom4j-1.6.1.jar;C:\\Users\\admin\\.m2\\repository\\xml-apis\\xml-apis\\1.0.b2\\xml-apis-1.0.b2.jar;C:\\Users\\admin\\.m2\\repository\\org\\hibernate\\common\\hibernate-commons-annotations\\4.0.5.Final\\hibernate-commons-annotations-4.0.5.Final.jar;C:\\Users\\admin\\.m2\\repository\\org\\hibernate\\javax\\persistence\\hibernate-jpa-2.1-api\\1.0.0.Final\\hibernate-jpa-2.1-api-1.0.0.Final.jar;C:\\Users\\admin\\.m2\\repository\\org\\javassist\\javassist\\3.18.1-GA\\javassist-3.18.1-GA.jar;C:\\Users\\admin\\.m2\\repository\\antlr\\antlr\\2.7.7\\antlr-2.7.7.jar;C:\\Users\\admin\\.m2\\repository\\org\\jboss\\jandex\\1.1.0.Final\\jandex-1.1.0.Final.jar;C:\\Users\\admin\\.m2\\repository\\rhino\\js\\1.7R2\\js-1.7R2.jar;C:\\Users\\admin\\.m2\\repository\\javax\\jcr\\jcr\\2.0\\jcr-2.0.jar;C:\\Users\\admin\\.m2\\repository\\org\\apache\\jackrabbit\\jackrabbit-jcr-rmi\\2.21.10\\jackrabbit-jcr-rmi-2.21.10.jar;C:\\Users\\admin\\.m2\\repository\\org\\apache\\jackrabbit\\jackrabbit-jcr2dav\\2.0-beta6\\jackrabbit-jcr2dav-2.0-beta6.jar;C:\\Users\\admin\\.m2\\repository\\org\\apache\\jackrabbit\\jackrabbit-jcr2spi\\2.0-beta6\\jackrabbit-jcr2spi-2.0-beta6.jar;C:\\Users\\admin\\.m2\\repository\\org\\apache\\jackrabbit\\jackrabbit-spi\\2.0-beta6\\jackrabbit-spi-2.0-beta6.jar;C:\\Users\\admin\\.m2\\repository\\org\\apache\\jackrabbit\\jackrabbit-spi-commons\\2.0-beta6\\jackrabbit-spi-commons-2.0-beta6.jar;C:\\Users\\admin\\.m2\\repository\\commons-io\\commons-io\\1.4\\commons-io-1.4.jar;C:\\Users\\admin\\.m2\\repository\\org\\apache\\jackrabbit\\jackrabbit-jcr-commons\\2.0-beta6\\jackrabbit-jcr-commons-2.0-beta6.jar;C:\\Users\\admin\\.m2\\repository\\org\\apache\\jackrabbit\\jackrabbit-api\\2.0-beta6\\jackrabbit-api-2.0-beta6.jar;C:\\Users\\admin\\.m2\\repository\\org\\apache\\jackrabbit\\jackrabbit-spi2dav\\2.0-beta6\\jackrabbit-spi2dav-2.0-beta6.jar;C:\\Users\\admin\\.m2\\repository\\org\\apache\\jackrabbit\\jackrabbit-webdav\\2.0-beta6\\jackrabbit-webdav-2.0-beta6.jar;C:\\Users\\admin\\.m2\\repository\\commons-httpclient\\commons-httpclient\\3.0\\commons-httpclient-3.0.jar;C:\\Users\\admin\\.m2\\repository\\org\\slf4j\\jcl-over-slf4j\\1.5.8\\jcl-over-slf4j-1.5.8.jar;C:\\Users\\admin\\.m2\\repository\\org\\apache\\jackrabbit\\jackrabbit-jcr-server\\2.0-beta6\\jackrabbit-jcr-server-2.0-beta6.jar;C:\\Users\\admin\\.m2\\repository\\org\\slf4j\\slf4j-simple\\1.5.8\\slf4j-simple-1.5.8.jar;C:\\Users\\admin\\.m2\\repository\\org\\apache\\xbean\\xbean-naming\\4.20\\xbean-naming-4.20.jar com.javasec.pocs.hessian.HessianProxyLVFileWrite2\r\nException in thread \"main\" com.caucho.hessian.io.HessianFieldException: sun.misc.URLClassPath.path: java.net.URL:java.lang.NullPointerException\r\n\tat com.caucho.hessian.io.FieldDeserializer2FactoryUnsafe.logDeserializeError(FieldDeserializer2FactoryUnsafe.java:532)\r\n\tat com.caucho.hessian.io.FieldDeserializer2FactoryUnsafe$ObjectFieldDeserializer.deserialize(FieldDeserializer2FactoryUnsafe.java:169)\r\n\tat com.caucho.hessian.io.UnsafeDeserializer.readObject(UnsafeDeserializer.java:237)\r\n\tat com.caucho.hessian.io.UnsafeDeserializer.readObject(UnsafeDeserializer.java:148)\r\n\tat com.caucho.hessian.io.Hessian2Input.readObjectInstance(Hessian2Input.java:2202)\r\n\tat com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:1715)\r\n\tat com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:1699)\r\n\tat com.caucho.hessian.io.FieldDeserializer2FactoryUnsafe$ObjectFieldDeserializer.deserialize(FieldDeserializer2FactoryUnsafe.java:165)\r\n\tat com.caucho.hessian.io.UnsafeDeserializer.readObject(UnsafeDeserializer.java:265)\r\n\tat com.caucho.hessian.io.UnsafeDeserializer.readObject(UnsafeDeserializer.java:166)\r\n\tat com.caucho.hessian.io.Hessian2Input.readObjectInstance(Hessian2Input.java:2199)\r\n\tat com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:1715)\r\n\tat com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:1699)\r\n\tat com.caucho.hessian.io.FieldDeserializer2FactoryUnsafe$ObjectFieldDeserializer.deserialize(FieldDeserializer2FactoryUnsafe.java:165)\r\n\tat com.caucho.hessian.io.UnsafeDeserializer.readObject(UnsafeDeserializer.java:265)\r\n\tat com.caucho.hessian.io.UnsafeDeserializer.readObject(UnsafeDeserializer.java:166)\r\n\tat com.caucho.hessian.io.Hessian2Input.readObjectInstance(Hessian2Input.java:2199)\r\n\tat com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:1715)\r\n\tat com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:1699)\r\n\tat com.caucho.hessian.io.FieldDeserializer2FactoryUnsafe$ObjectFieldDeserializer.deserialize(FieldDeserializer2FactoryUnsafe.java:165)\r\n\tat com.caucho.hessian.io.UnsafeDeserializer.readObject(UnsafeDeserializer.java:237)\r\n\tat com.caucho.hessian.io.UnsafeDeserializer.readObject(UnsafeDeserializer.java:148)\r\n\tat com.caucho.hessian.io.Hessian2Input.readObjectInstance(Hessian2Input.java:2202)\r\n\tat com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:1715)\r\n\tat com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:1699)\r\n\tat com.caucho.hessian.io.ArrayDeserializer.readLengthList(ArrayDeserializer.java:142)\r\n\tat com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:1766)\r\n\tat com.caucho.hessian.io.FieldDeserializer2FactoryUnsafe$ObjectFieldDeserializer.deserialize(FieldDeserializer2FactoryUnsafe.java:165)\r\n\tat com.caucho.hessian.io.UnsafeDeserializer.readObject(UnsafeDeserializer.java:237)\r\n\tat com.caucho.hessian.io.UnsafeDeserializer.readObject(UnsafeDeserializer.java:148)\r\n\tat com.caucho.hessian.io.Hessian2Input.readObjectInstance(Hessian2Input.java:2202)\r\n\tat com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:1715)\r\n\tat com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:1699)\r\n\tat com.caucho.hessian.io.FieldDeserializer2FactoryUnsafe$ObjectFieldDeserializer.deserialize(FieldDeserializer2FactoryUnsafe.java:165)\r\n\tat com.caucho.hessian.io.UnsafeDeserializer.readObject(UnsafeDeserializer.java:237)\r\n\tat com.caucho.hessian.io.UnsafeDeserializer.readObject(UnsafeDeserializer.java:148)\r\n\tat com.caucho.hessian.io.Hessian2Input.readObjectInstance(Hessian2Input.java:2202)\r\n\tat com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:2123)\r\n\tat com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:2107)\r\n\tat com.caucho.hessian.io.MapDeserializer.readMap(MapDeserializer.java:114)\r\n\tat com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:1691)\r\n\tat com.caucho.hessian.io.FieldDeserializer2FactoryUnsafe$ObjectFieldDeserializer.deserialize(FieldDeserializer2FactoryUnsafe.java:165)\r\n\tat com.caucho.hessian.io.UnsafeDeserializer.readObject(UnsafeDeserializer.java:237)\r\n\tat com.caucho.hessian.io.UnsafeDeserializer.readObject(UnsafeDeserializer.java:148)\r\n\tat com.caucho.hessian.io.Hessian2Input.readObjectInstance(Hessian2Input.java:2202)\r\n\tat com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:2123)\r\n\tat com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:2107)\r\n\tat com.javasec.utils.SerializeUtils.HessianDeserial(SerializeUtils.java:290)\r\n\tat com.javasec.pocs.hessian.HessianProxyLVFileWrite2.main(HessianProxyLVFileWrite2.java:28)\r\nCaused by: com.caucho.hessian.io.IOExceptionWrapper: java.net.URL:java.lang.NullPointerException\r\n\tat com.caucho.hessian.io.UnsafeDeserializer.readObject(UnsafeDeserializer.java:249)\r\n\tat com.caucho.hessian.io.UnsafeDeserializer.readObject(UnsafeDeserializer.java:148)\r\n\tat com.caucho.hessian.io.Hessian2Input.readObjectInstance(Hessian2Input.java:2202)\r\n\tat com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:2123)\r\n\tat com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:2107)\r\n\tat com.caucho.hessian.io.CollectionDeserializer.readLengthList(CollectionDeserializer.java:93)\r\n\tat com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:1788)\r\n\tat com.caucho.hessian.io.FieldDeserializer2FactoryUnsafe$ObjectFieldDeserializer.deserialize(FieldDeserializer2FactoryUnsafe.java:165)\r\n\t... 47 more\r\nCaused by: java.lang.NullPointerException\r\n\tat java.net.URL.readResolve(URL.java:1311)\r\n\tat sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)\r\n\tat sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)\r\n\tat sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)\r\n\tat java.lang.reflect.Method.invoke(Method.java:498)\r\n\tat com.caucho.hessian.io.UnsafeDeserializer.resolve(UnsafeDeserializer.java:289)\r\n\tat com.caucho.hessian.io.UnsafeDeserializer.readObject(UnsafeDeserializer.java:240)\r\n\t... 54 more\r\n\r\nProcess finished with exit code 1\r\n","author":{"url":"https://github.com/SuperXiaoxiong","@type":"Person","name":"SuperXiaoxiong"},"datePublished":"2024-04-26T16:52:52.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/1/JavaSec/issues/1"}

route-pattern/_view_fragments/issues/show/:user_id/:repository/:id/issue_layout(.:format)
route-controllervoltron_issues_fragments
route-actionissue_layout
fetch-noncev2:27cdbe52-118a-fa20-808a-a853cd9b31a2
current-catalog-service-hash81bb79d38c15960b92d99bca9288a9108c7a47b18f2423d0f6438c5b7bcd2114
request-idBD10:1D83E0:475104:5F999D:6A5B2A24
html-safe-nonce4178eefc59def9bf1c0ac07e626c73e04797061850f2bc0cc47e76d121986bcd
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJCRDEwOjFEODNFMDo0NzUxMDQ6NUY5OTlEOjZBNUIyQTI0IiwidmlzaXRvcl9pZCI6IjIzNDYyODI0MTMwMTI0OTQ4ODQiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ==
visitor-hmace95ecaa82eabff2fe27b8e70c6db3039b0e55f66211aa1fc4e9323e4b1dcdc33
hovercard-subject-tagissue:2266157448
github-keyboard-shortcutsrepository,issues,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///voltron/issues_fragments/issue_layout
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/_view_fragments/issues/show/Boogipop/JavaSec/1/issue_layout
twitter:imagehttps://opengraph.githubassets.com/57a003bb3f918e3e86f438b3408e7c51973e242f661577545d4526fe209ca5a5/Boogipop/JavaSec/issues/1
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/57a003bb3f918e3e86f438b3408e7c51973e242f661577545d4526fe209ca5a5/Boogipop/JavaSec/issues/1
og:image:altE:\jdk\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\bin\java.exe "-javaagent:C:\Program Files\JetBrains\IntelliJ IDEA 2023.3.2\lib\idea_rt.jar=3686:C:\Program Files\JetBrains\Intelli...
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
og:author:usernameSuperXiaoxiong
hostnamegithub.com
expected-hostnamegithub.com
None5290d7e14309ad1e76106a9c4237bd1041517e83ea182c8ab756752cb0c6940b
turbo-cache-controlno-preview
go-importgithub.com/Boogipop/JavaSec git https://github.com/Boogipop/JavaSec.git
octolytics-dimension-user_id114604850
octolytics-dimension-user_loginBoogipop
octolytics-dimension-repository_id682494312
octolytics-dimension-repository_nwoBoogipop/JavaSec
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id682494312
octolytics-dimension-repository_network_root_nwoBoogipop/JavaSec
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release9c975978430e9ad293956f2bbdaf153b1bd84a99
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/Boogipop/JavaSec/issues/1#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FBoogipop%2FJavaSec%2Fissues%2F1
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/open-source/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/open-source/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FBoogipop%2FJavaSec%2Fissues%2F1
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fissues_fragments%2Fissue_layout&source=header-repo&source_repo=Boogipop%2FJavaSec
Reloadhttps://github.com/Boogipop/JavaSec/issues/1
Reloadhttps://github.com/Boogipop/JavaSec/issues/1
Reloadhttps://github.com/Boogipop/JavaSec/issues/1
Boogipop https://github.com/Boogipop
JavaSechttps://github.com/Boogipop/JavaSec
Notifications https://github.com/login?return_to=%2FBoogipop%2FJavaSec
Fork 3 https://github.com/login?return_to=%2FBoogipop%2FJavaSec
Star 47 https://github.com/login?return_to=%2FBoogipop%2FJavaSec
Code https://github.com/Boogipop/JavaSec
Issues 1 https://github.com/Boogipop/JavaSec/issues
Pull requests 0 https://github.com/Boogipop/JavaSec/pulls
Actions https://github.com/Boogipop/JavaSec/actions
Projects https://github.com/Boogipop/JavaSec/projects
Security and quality 0 https://github.com/Boogipop/JavaSec/security
Insights https://github.com/Boogipop/JavaSec/pulse
Code https://github.com/Boogipop/JavaSec
Issues https://github.com/Boogipop/JavaSec/issues
Pull requests https://github.com/Boogipop/JavaSec/pulls
Actions https://github.com/Boogipop/JavaSec/actions
Projects https://github.com/Boogipop/JavaSec/projects
Security and quality https://github.com/Boogipop/JavaSec/security
Insights https://github.com/Boogipop/JavaSec/pulse
hessian xslt 链反序列化报错https://github.com/Boogipop/JavaSec/issues/1#top
https://github.com/SuperXiaoxiong
SuperXiaoxionghttps://github.com/SuperXiaoxiong
on Apr 26, 2024https://github.com/Boogipop/JavaSec/issues/1#issue-2266157448
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width


URLs of crawlers that visited me.