中危.4.API误用:不安全的框架绑定,缺陷36

whycxzp

2023-10-27 ac79b74a686aa0d02e9e4b0f3c6882be29042580

1
2
3
4
5
6
7
8
9
10
11
12
13
14
package com.whyc.controller;
 
import org.springframework.web.bind.WebDataBinder;
import org.springframework.web.bind.annotation.InitBinder;
import org.springframework.web.bind.annotation.RestController;
 
@RestController
public class BaseController {
 
    @InitBinder
    public void initBinder(WebDataBinder binder) {
        binder.setDisallowedFields("fieldForCheck");
    }
}