??????????????????

???????????????

?????????????????????????

???????????????????

????1?????????GET???????URL??????Request Header????POST???????URL??????Form Data?? Upload FileData?? Request Header???????HTML?????

????2?????JBoss???Servlet????????????????????????????Response???????????????????????????????????

???????????????????HTML????????ò???????????????????·??????????????????ξ???“??????”??鴦???????????????′?????????????????????????????????????????????￡??????????????

????????????????????????????????????????????XSS?????????

????bug?????????

???????β????????7??bug??2???????????????????????????????BUG??????????????

????1??????“??????”??鴦?????POST??????Я????URL???????????

????????????????????????POST?????????洢????????????????????????????????

????2??POST?????????Я?????????????<??>??/??&???????“??????”??鴦????????????????????????????????????????????????鴦???????????

??????????????????????????1. ???????????????????????????2. ?????????????????????????

????3??POST?????????Я?????????????????????????“??????”??鴦????????????????????ξ?????鴦???????encode??“+”??????ξ?????鴦???????encode“+”???“%2B”?????o???Server?????deconde???????????“+”???????????

????????????????????encode?????????????????????????????????ngx_unescape_uri????????????ò??? NGX_UNESCAPE_WWW_FORM

????4?????????POST???????????POST Data ????????content type?application/x-www-form-urlencoded??

???????????????????????????POST??????????????????????μ??