update ognl test-case

baidu · Oct 24, 2017 · 4052a81 · 4052a81
1 parent f4c8b9b
commit 4052a81
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/integration-test/app/ognl.jsp b/integration-test/app/ognl.jsp
@@ -1,6 +1,6 @@
 <%@ page import="java.io.*" %>
 <%@ page import="ognl.Ognl" %>
 <%
-    Object value = Ognl.parseExpression("java.lang.Runtime");
+    Object value = Ognl.parseExpression("@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec('whoami').getInputStream())");
     out.println(value);
 %>
diff --git a/integration-test/rasp/plugins/plugin.js b/integration-test/rasp/plugins/plugin.js
@@ -109,7 +109,7 @@ plugin.register('xxe', function (params, context) {
 plugin.register('ognl', function (params, context) {
     checkContext(context);
     plugin.log('ognl', params);
-    if (params.expression === 'java.lang.Runtime') {
+    if (params.expression === "@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec('whoami').getInputStream())") {
         return {
             action: 'block'
         }