SafeResolver.java

SafeResolver.java �tR V p�tR V package example; import org.apache.commons.beanutils.expression.DefaultResolver; public class SafeResolver extends DefaultResolver { @Override public String next(String expression) { String property = super.next(expression); if ("class".equalsIgnoreCase(property)) { return ""; } return property; } } SafeResolverListener.java �S�R V ` �R V package example; import java

[aufheben]

脆弱性の対応方法。ちょっとコメントした。