gitea-mirror/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2026-01-27 07:14:29 -08:00
Code Issues Packages Projects Releases Wiki Activity

Normalize page header for SSTI, SAML, SSI

Browse Source
This commit is contained in:
Swissky
2024-11-10 19:14:16 +01:00
parent 1a3e605d64
commit a338b2f12a
13 changed files with 105 additions and 44 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
Server Side Template Injection/Java.md
View File

@@ -1,5 +1,8 @@
# Server Side Template Injection - Java
> Server-Side Template Injection (SSTI) is a security vulnerability that occurs when user input is embedded into server-side templates in an unsafe manner, allowing attackers to inject and execute arbitrary code. In Java, SSTI can be particularly dangerous due to the power and flexibility of Java-based templating engines such as JSP (JavaServer Pages), Thymeleaf, and FreeMarker.
## Summary
- [Templating Libraries](#templating-libraries)