下面这样的方式，怎么处理微信说的XXE漏洞
XMLSerializer xmlSerializer = new XMLSerializer();
JSONObject json = (JSONObject) xmlSerializer.read(xml);
需要换成微信提供的方法，重写这部分XML解析的代码吗？
2 个回答
请 登录 后发表内容
相关文档
- project.miniapp.json: Mini Program/Development/Extended/Must Read Before Development/project.miniapp.json
- project.miniapp.json#XI. LBS: Mini Program/Development/Extended/Must Read Before Development/project.miniapp.json
- project.miniapp.json#II. SDK version: Mini Program/Development/Extended/Must Read Before Development/project.miniapp.json
- project.miniapp.json#III. CPU type: Mini Program/Development/Extended/Must Read Before Development/project.miniapp.json
- project.miniapp.json#VI. Application Icons: Mini Program/Development/Extended/Must Read Before Development/project.miniapp.json
我们内部也先查下修复方案
这个现在是怎么需要怎么修改？
您好，请提供您的商户号