@offgridsec/kira-lite-mcp 0.1.8 → 0.2.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/INSTALL.md +21 -6
- package/README.md +11 -13
- package/config/settings.local.json +2 -2
- package/dist/config.js +1 -1
- package/dist/core/engines/osv.js +1 -1
- package/dist/core/engines/runner.js +1 -1
- package/dist/core/scanner.d.ts +0 -7
- package/dist/core/scanner.js +1 -1
- package/dist/core/types.d.ts +1 -1
- package/dist/core/utils.js +1 -1
- package/dist/index.js +1 -1
- package/dist/rules/c-cpp.js +1 -1
- package/dist/rules/cicd.js +1 -1
- package/dist/rules/csharp-extended.js +1 -1
- package/dist/rules/csharp.js +1 -1
- package/dist/rules/docker.js +1 -1
- package/dist/rules/go-extended.js +1 -1
- package/dist/rules/go.js +1 -1
- package/dist/rules/graphql-extended.js +1 -1
- package/dist/rules/index.js +1 -1
- package/dist/rules/java-extended.js +1 -1
- package/dist/rules/java.js +1 -1
- package/dist/rules/javascript-extended.js +1 -1
- package/dist/rules/javascript.js +1 -1
- package/dist/rules/kotlin.js +1 -1
- package/dist/rules/kubernetes.js +1 -1
- package/dist/rules/php-extended.js +1 -1
- package/dist/rules/php.js +1 -1
- package/dist/rules/python-extended.js +1 -1
- package/dist/rules/python.js +1 -1
- package/dist/rules/ruby-extended.js +1 -1
- package/dist/rules/ruby.js +1 -1
- package/dist/rules/rust.js +1 -1
- package/dist/rules/secrets-extended.js +1 -1
- package/dist/rules/secrets.js +1 -1
- package/dist/rules/shell.js +1 -1
- package/dist/rules/swift.js +1 -1
- package/dist/rules/terraform.js +1 -1
- package/dist/telemetry.js +1 -1
- package/dist/tools/fix-vulnerability.js +1 -1
- package/dist/tools/scan-code.js +1 -1
- package/dist/tools/scan-dependencies.js +1 -1
- package/dist/tools/scan-diff.js +1 -1
- package/dist/tools/scan-file.js +1 -1
- package/dist/tools/scan-new-imports.d.ts +26 -0
- package/dist/tools/scan-new-imports.js +1 -0
- package/hook.mjs +25 -22
- package/package.json +1 -1
- package/dist/core/engines/kira-core.d.ts +0 -16
- package/dist/core/engines/kira-core.js +0 -1
|
@@ -1 +1 @@
|
|
|
1
|
-
(function(_0x4b9aaa,_0x92070e){const _0x55087b={_0x1cfe80:0xa4,_0x2d36d7:0x47,_0x441c37:0x2b,_0x48af82:0x271,_0x590885:0x369,_0x3ab6df:0x116,_0x321ca1:0x323,_0x1fcc93:0x41a,_0x4bfbad:0xc0},_0x39f520=_0x4b9aaa();function _0x5474c3(_0x797517,_0x23f80d){return _0x27ae(_0x797517- -0x24,_0x23f80d);}function _0x4c58c2(_0x45b603,_0x12da21){return _0x27ae(_0x12da21- -0x20c,_0x45b603);}while(!![]){try{const _0x25fe1c=parseInt(_0x5474c3(0x254,0x313))/(-0xfa*-0x2+0x114b*-0x1+-0x2*-0x7ac)*(parseInt(_0x4c58c2(_0x55087b._0x1cfe80,-_0x55087b._0x2d36d7))/(-0x2*0x10ad+-0x16f5+0x3851))+parseInt(_0x5474c3(0x1fa,0x19d))/(-0x770+0x1414+-0xca1*0x1)*(parseInt(_0x4c58c2(-0x9,_0x55087b._0x441c37))/(-0x1*-0x7ee+-0x2ae+-0x53c))+parseInt(_0x5474c3(0x2af,0x23d))/(0x9*-0x21+-0x16*0x1b7+0x7c8*0x5)*(-parseInt(_0x5474c3(_0x55087b._0x48af82,_0x55087b._0x590885))/(0x1*-0xee8+-0x14c4*0x1+0x23b2*0x1))+parseInt(_0x4c58c2(_0x55087b._0x3ab6df,0xe8))/(-0x19dc+0x1123+0x14*0x70)+parseInt(_0x5474c3(_0x55087b._0x321ca1,_0x55087b._0x1fcc93))/(0xbba+-0x2560+0x19ae)*(parseInt(_0x5474c3(0x262,0x2b9))/(-0x5*0x33+0x1de3+-0x53*0x59))+parseInt(_0x4c58c2(0xc3,-0x6))/(0x455+0x2*-0x10f7+0x1da3)+-parseInt(_0x4c58c2(0x73,_0x55087b._0x4bfbad))/(-0x970+-0x147a*-0x1+0x233*-0x5)*(parseInt(_0x5474c3(0x30b,0x3bd))/(-0x11af+-0xda3*0x1+-0x2*-0xfaf));if(_0x25fe1c===_0x92070e)break;else _0x39f520['push'](_0x39f520['shift']());}catch(_0x1d3cc9){_0x39f520['push'](_0x39f520['shift']());}}}(_0xf5c8,-0x9fef*0x3+0x1249*-0x1+-0x247f*-0x2a));const _0x267623={};_0x267623['id']=_0x2af316(0xf2,0x177)+_0x182b38(-0x35,-0xa9)+_0x182b38(-0x1e4,-0x1e3),_0x267623[_0x2af316(0x101,0x12b)]=_0x2af316(0x184,0xbb)+'84',_0x267623[_0x2af316(0x1f7,0x20d)+_0x2af316(0x267,0x2e1)]=_0x182b38(0x26,-0x33)+_0x182b38(-0x1e7,-0x124),_0x267623['title']=_0x182b38(0x7f,-0x4b)+_0x182b38(-0x161,-0x13d)+_0x182b38(-0x14c,-0xfa)+'All\x20o'+_0x2af316(0x1fb,0x11e)+_0x182b38(-0x12a,-0x43)+_0x2af316(0x183,0x94)+_0x182b38(0xd,-0x10),_0x267623[_0x2af316(0x131,0x232)+'iptio'+'n']='Using'+_0x2af316(0xd5,0x65)+'itAll'+'()\x20on'+'\x20admi'+_0x2af316(0x223,0x2c8)+_0x182b38(-0xaa,-0xbe)+_0x2af316(0xe1,0xa3)+_0x182b38(-0x16e,-0x11b)+_0x182b38(-0xde,-0xfe)+_0x182b38(-0x178,-0x1c8)+'m\x20wit'+'hout\x20'+_0x182b38(-0x110,-0x13b)+_0x182b38(-0x1d8,-0x1bb)+_0x2af316(0x21e,0x1f6),_0x267623[_0x2af316(0x252,0x1a8)+_0x2af316(0x2ad,0x2ac)]=[_0x182b38(-0x138,-0x182)];function _0x182b38(_0x4b778c,_0x210fdd){const _0x2ee56e={_0x3256a0:0x3b1};return _0x27ae(_0x210fdd- -_0x2ee56e._0x3256a0,_0x4b778c);}_0x267623[_0x2af316(0x249,0x346)+'rn']=/\.antMatchers?\s*\(\s*["']\/(?:admin|api|internal|manage)[^"']*["']\s*\)\.permitAll\s*\(\s*\)/g,_0x267623[_0x182b38(-0x8d,-0xa4)]=_0x182b38(-0x60,-0x4e)+_0x2af316(0x11a,0x11d)+_0x2af316(0x221,0x1fc)+_0x182b38(-0x30a,-0x206)+_0x182b38(-0x1d3,-0x1ce)+_0x182b38(-0x176,-0x169)+_0x182b38(-0xe0,-0x190)+'ated('+_0x182b38(-0x90,-0x29)+_0x182b38(-0x71,-0xbc)+_0x2af316(0x19f,0x1b6)+_0x2af316(0x1a0,0x123)+_0x2af316(0x1a9,0x1ca)+'.';const _0x4d8901={};_0x4d8901['id']=_0x2af316(0xf2,0x14f)+_0x2af316(0x22e,0x193)+_0x182b38(-0x204,-0x1af),_0x4d8901[_0x2af316(0x101,0x48)]=_0x182b38(-0x158,-0xb5)+'52',_0x4d8901[_0x2af316(0x1f7,0x153)+_0x182b38(0xb,-0x70)]=_0x2af316(0x2a6,0x317),_0x4d8901[_0x182b38(-0x12f,-0xa1)]=_0x182b38(-0xe3,-0x4b)+_0x182b38(-0xe9,-0x1c5)+_0x2af316(0x181,0x27b)+_0x2af316(0x25b,0x337)+_0x182b38(-0x217,-0x1fd)+_0x2af316(0x1c6,0x117)+'y',_0x4d8901['descr'+_0x2af316(0x1e8,0x29f)+'n']=_0x2af316(0xd4,0x1dc)+_0x2af316(0x1e2,0x1bf)+_0x182b38(-0x141,-0x177)+'prote'+_0x182b38(-0x5c,-0xb7)+_0x182b38(-0x1e,-0x38)+_0x182b38(-0xe8,-0x1c3)+'ll\x20st'+'ate-c'+_0x2af316(0x1d2,0x214)+_0x182b38(0x40,-0x96)+'dpoin'+_0x2af316(0x189,0xa1)+_0x182b38(-0xf8,-0x1cf)+'s-Sit'+_0x182b38(-0x158,-0x19e)+'uest\x20'+_0x2af316(0x210,0x1fa)+_0x2af316(0x20e,0x16d)+'tacks'+'.',_0x4d8901['langu'+_0x2af316(0x2ad,0x2c7)]=[_0x2af316(0x155,0x14d)],_0x4d8901[_0x2af316(0x249,0x1e0)+'rn']=/\.csrf\s*\(\s*\)\s*\.disable\s*\(\s*\)/g,_0x4d8901[_0x2af316(0x233,0x1b4)]=_0x2af316(0x251,0x253)+_0x2af316(0x1a4,0x1e7)+_0x2af316(0x205,0x199)+'RF\x20fo'+'r\x20sta'+_0x2af316(0x25f,0x292)+_0x2af316(0x119,0x1e0)+_0x182b38(-0x1c3,-0x137)+_0x182b38(-0x1f0,-0x12e)+_0x182b38(-0x112,-0x15e)+_0x182b38(0x30,-0x5)+_0x182b38(-0xef,-0xa5)+_0x2af316(0x1ef,0x281)+_0x2af316(0x1e6,0x1f3)+_0x182b38(-0x12e,-0x1e9)+_0x182b38(0x3b,-0x50)+_0x2af316(0x245,0x19b)+'n-bas'+_0x2af316(0xe6,0x195)+_0x182b38(-0xeb,-0x1);const _0x30083c={};_0x30083c['id']=_0x182b38(-0x16a,-0x1e5)+_0x2af316(0x22e,0x297)+_0x2af316(0x1f8,0x230),_0x30083c[_0x182b38(-0x20e,-0x1d6)]=_0x182b38(-0x4,-0xb5)+'46',_0x30083c[_0x182b38(-0x198,-0xe0)+'ity']=_0x2af316(0x2a6,0x316),_0x30083c[_0x182b38(-0x108,-0xa1)]='Sprin'+_0x2af316(0x1e5,0x23c)+_0x182b38(-0x23b,-0x1d7)+_0x182b38(-0x109,-0x44)+_0x2af316(0x1b1,0x18b)+'igin',_0x30083c[_0x182b38(-0x188,-0x1a6)+_0x182b38(-0x1a4,-0xef)+'n']='Allow'+_0x182b38(-0x285,-0x1e6)+_0x2af316(0x23b,0x161)+'igins'+_0x2af316(0x1f4,0x1e5)+_0x182b38(-0x27c,-0x1c6)+'RS\x20co'+_0x182b38(-0x8d,-0x13)+_0x182b38(-0x2a9,-0x1d2)+'n\x20exp'+_0x182b38(0x28,-0x67)+_0x2af316(0x2ca,0x29f)+_0x182b38(-0x1e2,-0x1d9)+_0x182b38(-0x1f,-0x72)+_0x182b38(-0x1c6,-0x1e8)+_0x182b38(-0x249,-0x168),_0x30083c['langu'+_0x2af316(0x2ad,0x214)]=[_0x182b38(-0x1b6,-0x182)],_0x30083c[_0x2af316(0x249,0x351)+'rn']=/\.allowedOrigins?\s*\(\s*["']\*["']\s*\)/g,_0x30083c[_0x2af316(0x233,0x320)]=_0x182b38(-0x2d,-0x3c)+_0x182b38(0xa7,-0x40)+_0x2af316(0x292,0x338)+_0x2af316(0x16d,0x153)+_0x182b38(0xa4,-0x2b)+'xplic'+_0x2af316(0x284,0x18c)+_0x2af316(0x23f,0x2d6)+_0x2af316(0x258,0x278)+_0x2af316(0xdd,0x78)+'s(\x22ht'+'tps:/'+'/myap'+_0x2af316(0x25e,0x2db)+'\x22)';const _0x216352={};_0x216352['id']=_0x2af316(0xf2,0x1e)+_0x2af316(0x21f,0x1eb)+_0x182b38(-0x95,-0x6d),_0x216352[_0x2af316(0x101,0x175)]=_0x182b38(-0x35,-0xa)+'336',_0x216352[_0x182b38(-0x7b,-0xe0)+_0x2af316(0x267,0x2a8)]='criti'+_0x2af316(0x1b3,0x132),_0x216352['title']=_0x182b38(-0x13e,-0x12d)+_0x2af316(0x2c0,0x3aa)+_0x2af316(0x135,0x182)+_0x182b38(-0x2f2,-0x1f2)+_0x182b38(0x3f,-0xa2)+_0x2af316(0xd6,0x73)+_0x2af316(0x149,0x123)+'r\x20Inp'+'ut',_0x216352[_0x2af316(0x131,0x6e)+'iptio'+'n']=_0x2af316(0xfb,0x14b)+_0x2af316(0xf7,0x74)+_0x182b38(0xe5,-0x15)+_0x182b38(0xbd,0x2)+'led\x20s'+'tring'+_0x2af316(0xf5,0x18b)+_0x2af316(0x264,0x330)+_0x2af316(0x2a7,0x34f)+_0x2af316(0x163,0x1ec)+_0x2af316(0xca,0xba)+_0x2af316(0x1dc,0x18d)+_0x2af316(0x276,0x2fa)+_0x2af316(0x25c,0x1d0)+_0x2af316(0x1fd,0x27b)+'\x20Exec'+_0x2af316(0x28f,0x1b3)+_0x2af316(0x16b,0x65)+'templ'+_0x182b38(-0xcd,-0xd8)+_0x2af316(0x159,0x197)+'ion.',_0x216352[_0x2af316(0x252,0x285)+'ages']=[_0x182b38(-0x1d8,-0x182)],_0x216352['patte'+'rn']=/new\s+Template\s*\(\s*["'][^"']*["']\s*,\s*new\s+StringReader\s*\(\s*(?:request|req|input|param|body)/g,_0x216352[_0x2af316(0x233,0x2c6)]=_0x182b38(-0xd4,-0x102)+_0x182b38(-0x1a7,-0xc5)+_0x182b38(-0xc,-0x76)+_0x2af316(0x130,0x16f)+_0x2af316(0x14d,0x187)+_0x2af316(0x163,0x1f7)+_0x182b38(-0x272,-0x20d)+_0x2af316(0x1de,0x2e8)+_0x182b38(0xc9,-0x36)+'efine'+_0x2af316(0xfd,0xb9)+_0x182b38(-0x1b3,-0xd3)+_0x2af316(0x202,0x1a1)+_0x182b38(-0x19a,-0xd0)+_0x2af316(0x153,0x17a)+_0x2af316(0x199,0x217)+_0x182b38(-0x1a1,-0x1cc)+'el\x20bi'+'nding'+'.';const _0x538de1={};_0x538de1['id']=_0x182b38(-0x161,-0x1e5)+_0x182b38(-0x81,-0xb8)+'002',_0x538de1['cwe']=_0x2af316(0x2cd,0x2de)+_0x2af316(0x285,0x1ac),_0x538de1[_0x182b38(-0x129,-0xe0)+'ity']=_0x2af316(0x2a4,0x2ec)+'cal',_0x538de1[_0x182b38(-0xe6,-0xa1)]=_0x2af316(0x1aa,0x14c)+_0x182b38(-0xe6,-0x51)+'ocity'+_0x2af316(0x272,0x2d5)+_0x182b38(-0x164,-0x81)+_0x182b38(-0x1ad,-0xed)+_0x182b38(-0xca,-0x163)+_0x182b38(-0xec,-0x1b9),_0x538de1[_0x2af316(0x131,0x92)+_0x2af316(0x1e8,0x16b)+'n']='Evalu'+_0x182b38(-0x11d,-0x9e)+'\x20user'+_0x2af316(0x176,0xb0)+_0x2af316(0x2cb,0x1c8)+'Veloc'+'ity\x20t'+_0x182b38(-0x35,-0xac)+_0x182b38(-0x54,-0x15c)+_0x2af316(0x282,0x309)+_0x2af316(0x136,0x6f)+_0x2af316(0x20b,0x1c2)+_0x2af316(0x1a2,0xfa)+'n.',_0x538de1[_0x2af316(0x252,0x341)+_0x2af316(0x2ad,0x3ac)]=[_0x2af316(0x155,0x105)],_0x538de1[_0x182b38(0x7a,-0x8e)+'rn']=/Velocity\.evaluate\s*\(\s*\w+\s*,\s*\w+\s*,\s*["'][^"']*["']\s*,\s*new\s+StringReader\s*\(/g,_0x538de1[_0x2af316(0x233,0x12a)]=_0x2af316(0x10e,0x1ca)+_0x182b38(-0x7,-0x35)+_0x182b38(-0x70,-0x12)+_0x182b38(-0x135,-0x149)+_0x2af316(0x141,0x20b)+_0x2af316(0x22b,0x278)+_0x182b38(-0x178,-0x20e)+_0x2af316(0x1ce,0xda)+_0x2af316(0x1d5,0x2d1)+_0x182b38(-0xde,-0x18c)+'\x20user'+_0x182b38(-0x15e,-0x161)+_0x182b38(-0x1d6,-0x1b8)+_0x2af316(0x18e,0x1fd)+_0x182b38(-0x269,-0x1d4)+_0x2af316(0x27c,0x2a1)+_0x2af316(0x281,0x1e3);const _0x44bde5={};_0x44bde5['id']=_0x2af316(0xf2,0x1b0)+'SSTI-'+'003',_0x44bde5[_0x2af316(0x101,0x18c)]=_0x182b38(-0x98,-0xa)+'336',_0x44bde5[_0x182b38(-0xa,-0xe0)+_0x2af316(0x267,0x2d4)]=_0x182b38(-0x9c,-0x33)+'cal',_0x44bde5['title']='SSTI\x20'+_0x182b38(0x12,-0x1c)+_0x182b38(-0x4b,-0x129)+_0x182b38(-0x2c1,-0x1c7)+_0x182b38(-0x95,-0x4d)+_0x2af316(0x14e,0x21f)+_0x2af316(0xed,0x25)+'er\x20In'+_0x2af316(0x14f,0x1f1),_0x44bde5['descr'+_0x182b38(-0xd3,-0xef)+'n']=_0x2af316(0x2b7,0x3a9)+'ssing'+_0x2af316(0x21d,0x214)+_0x2af316(0x176,0x251)+_0x182b38(-0xc8,-0xc)+_0x2af316(0x182,0x1bf)+_0x2af316(0x1cc,0x129)+_0x182b38(-0x196,-0x10f)+'ssion'+_0x2af316(0x1e1,0x2c2)+_0x182b38(-0x176,-0xe2)+_0x182b38(-0xf,-0x4b)+_0x2af316(0x13d,0x241)+_0x2af316(0x290,0x1de)+_0x2af316(0x132,0x1ac)+_0x182b38(-0xe9,-0x118)+_0x182b38(-0x66,-0x103),_0x44bde5['langu'+_0x182b38(-0xb9,-0x2a)]=['java'],_0x44bde5[_0x2af316(0x249,0x21a)+'rn']=/templateEngine\.process\s*\([^,]*(?:request|param|input|body)/g,_0x44bde5['fix']=_0x2af316(0x1d5,0x293)+_0x2af316(0x14b,0x23d)+_0x2af316(0x21d,0x178)+_0x2af316(0x176,0x128)+_0x182b38(0x80,-0xc)+_0x2af316(0x23d,0x1cc)+'ate\x20s'+_0x2af316(0x1db,0x257)+_0x2af316(0x11b,0xec)+_0x182b38(-0x10b,-0x155)+_0x182b38(-0x1c3,-0x151)+'\x20Use\x20'+_0x2af316(0x15a,0x7c)+_0x182b38(-0xa5,-0x101)+'\x20temp'+_0x182b38(-0x10d,-0x20d)+_0x182b38(0x31,-0x88)+_0x182b38(-0xd0,-0x25)+_0x182b38(-0xd3,-0x13a)+_0x2af316(0x2cc,0x33d)+'es.';const _0x58161b={};_0x58161b['id']=_0x2af316(0xf2,0x1c4)+_0x2af316(0x215,0x1ef)+_0x2af316(0x22d,0x26f),_0x58161b[_0x182b38(-0x13d,-0x1d6)]=_0x2af316(0x288,0x224)+'43',_0x58161b[_0x2af316(0x1f7,0x243)+_0x2af316(0x267,0x1f6)]=_0x182b38(0x7c,-0x33)+_0x182b38(-0x35,-0x124),_0x58161b[_0x2af316(0x236,0x213)]=_0x2af316(0x16c,0x8e)+_0x2af316(0x117,0x1c8)+_0x182b38(-0x25,-0xb7)+'\x20—\x20Mo'+'ngoDB'+'\x20Quer'+'y\x20fro'+_0x182b38(-0x126,-0x18e)+'r\x20Inp'+'ut',_0x58161b['descr'+_0x2af316(0x1e8,0x1d3)+'n']='Build'+'ing\x20M'+_0x182b38(-0x178,-0x158)+'B\x20que'+_0x2af316(0x1b0,0xab)+'from\x20'+'user\x20'+_0x2af316(0x2a9,0x1a9)+_0x2af316(0x1dc,0x2d6)+'les\x20N'+'oSQL\x20'+_0x2af316(0x290,0x356)+_0x182b38(-0x14e,-0x1a5)+_0x182b38(-0x98,-0xe9)+_0x2af316(0x283,0x382),_0x58161b['langu'+'ages']=['java'],_0x58161b[_0x2af316(0x249,0x1a4)+'rn']=/(?:BasicDBObject|Document)\.parse\s*\(\s*(?:request|req|input|param|body)/g,_0x58161b[_0x182b38(-0xdc,-0xa4)]=_0x2af316(0x2c6,0x2a1)+_0x182b38(-0x210,-0x1fe)+_0x2af316(0x238,0x1ec)+_0x182b38(-0x96,-0x10d)+_0x2af316(0x148,0x114)+_0x2af316(0xcd,0x1bb)+_0x2af316(0x164,0x242)+_0x182b38(-0xca,-0x10e)+'iteri'+_0x182b38(-0xb,-0xd6)+_0x2af316(0x17a,0x108)+_0x2af316(0x1c7,0x251)+'d\x20of\x20'+_0x2af316(0x2a5,0x222)+'ng\x20ra'+'w\x20que'+'ry\x20st'+_0x2af316(0xe3,0x7c)+'.';function _0xf5c8(){const _0x1d0817=['D2vIC2K','thmGywC','Aw5Nige','sKfwqs0','CIbZzwm','rY0Wmdm','CYbHCYa','zxmGzw4','BMCGDxm','te9hlta','tg9Hzca','Aw9UlIa','ugfYC2K','q1Dflty','zcb0zw0','ueKGDg8','Dwn0Dxi','AwXKy2e','y3DL','vxnLigO','Axr5lMu','C2vUC2K','CMf0Aw8','BMCGA2u','AgvZigK','ienYB3m','ksbVCIa','revtrvi','ysbTB2q','ExmGzNi','zKfIC2u','vxnLiha','CYb0Agu','zIbfEha','Aw4Gq08','zYdIGjqGqW','tw9Uz28','C2vZige','ieHHCMq','zcbTB24','ieLUAMu','ig5LDYa','CYbbueK','AgfZuM8','CYb0BYa','BNrPy2e','BMv3ifm','sw5WDxq','Dcb0BYa','BMuNige','4Ocuie5VBG','Aw9UCYa','zsbHCMi','ihjLBge','zwqGBg8','BNmU','Ag91Dca','rY0Wmdq','Axr5lxm','sMf2ysa','DxqGAw4','ndK2ndmXmgnQEfbRtW','BYbLBMy','B3bLCNq','Aw5Nieu','CIbPBNa','zgvZy3i','DgLVBIa','AgvUlue','AxrPzxm','zu1HCMS','CYbJB2q','uKfdrs0','oIbMywm','zsbszxe','q1DfltC','ve9dve8','C2vJCMu','zYbftca','rgf0ysa','Aw5NieS','ignVBM4','Axr5ihq','igfYzsa','CMLUzYa','mZG5mxvYv1bYBq','lcb0CNu','DhmGBwe','zw50Awm','zgvYCYa','BsbvC2u','ruWGzxy','ihbHC3m','DhKUu2u','DxqGyxm','B24GzNi','Chv0','Dg9YEs4','DwfNzsa','AwmGq2G','AcbZywy','zw5HyMW','AMf2yq','ifnPz24','AxrOBsa','DxnLCI0','BMPLy3q','ChjLzgu','vcb3Axq','sLDuiokaLa','nti0z3r0EKHq','CML0Ag0','zxmGyw4','q1nsrIa','DxjPDhK','ywn0B3i','ihrLBxa','zxjZlMu','ruWGzxG','qNvPBgq','lxnLBNm','lcbVCIa','ievm','ksb3Axq','ihzPysa','tM9tuuW','ig9YAwC','lMf1DgG','DguU','ifnbwfa','BgXVD2W','ihzHBhu','B25PEMu','vxnLCIa','zwqGzg8','igLUChu','zxiOks4','DY1KB2m','icHkv1q','CMuPigK','DgvZigu','ihbOAxm','uKvesvi','DxjLifi','B25NB0q','AxrYyxi','u1jgieq','vgH5Bwu','zsbfBMq','q1Dflti','iokaLcbQyq','BgvHzI4','ihzHCMK','luf0B20','DhmGDg8','DYbXDwu','zxj5igq','BMvKv2K','u2vUC2K','vMvSB2m','C3nPB24','vxnLifm','DgHTige','zxmGuMu','AcbLEhq','BNrPDgK','B21WAwW','igfSz28','Dg9TAwm','ysbZCgu','zsbKyxq','zYdIGjqGCa','y2TZigy','yxv0Agu','BcbHDhq','mJu4mZC0CMjWyLjp','AxrPDMu','igvUzha','BNmGzw4','y3v0Aw8','qvbjigK','zgLZywi','BMCGsLC','AxzLihi','kcjODhq','CMvXDwK','B2LUDhm','u1nussa','DhrHy2S','mJKZntuZrNDOveTL','B24UChi','BwvSzwe','yw5KB20','CMLLCYa','uLmGt3i','AxrVCMK','y2fS','B24G4Ocuia','BwvUDca','Aw4Gtg8','CMf3ihe','zM9Yifm','DMLYB24','zsbJyw4','mZznEufjtLC','BNrZigu','igLUiea','zMvdB24','yw5Kifi','zgf0ywi','y3rVCIG','DgHTify','CYbLEha','lM9YzY8','4OcuifvZzq','B2jHBgW','BNn0zwe','zxHWCMu','CsWGq3i','igj1AwW','Bw90zsa','BgvHzIa','BMfSigu','BgvZlIa','ExmU','rgf0ywi','yxrLihi','AgfUz2K','CY4Gvxm','q0uU','tMv2zxi','zMLUzwq','CMvUDeG','DgLHBhm','EhbVC2u','C3rLBxm','DhjPBMC','igvUywi','zxjTAxq','lIbvC2u','B20Gzw4','uMvHzgK','CYbLBMe','BgLUzYa','uMvKAxi','kgfWCgW','zYdIGjqGvW','DcbLBMe','C3n3B3i','Axb0Aw8','ywqOAw4','zNjVBsa','zxmVzgK','uMfUzg8','DhLWzs0','yxr0ywm','zwvWigK','CM9Tigm','y3rVCJO','odKZnZyXC1HtzKTh','Ag0SigS','icGQksa','yMXLCYa','zsbJB2q','C2v2zxi','rY0Wmdu','mtKYmduWyuDvrvH3','ig9Yihm','BIbtzw4','yxrPB24','ienVzgu','zwf0Dxi','yxrLigK','yxjZzxi','ys53Agu','igzPBgu','Bg9HzcG','CgXHDgu','BguGq1m','AwfSAxO','CYb3Axq','zgvJBci','zxmGBgK','zsbHBMq','zsbLEgu','zcbVzIa','ifDPDgG','CNKGyxq','sw5Zzwm','rM9Yz2u','wwfTBcG','ihbHCNm','AMf2ys4','Aw9UlG','tK9tuuW','CYbPBIa','zhmSihq','ywjSzxm','qvbjigu','nJqXndfXBLfOzhe','ihnLBNm','t3bLBIa','ihvZzxi','DgLVBI4','u1nuss0','y3rPB24','BguOiKe','q1Dfltm','BIbVCIa','DMfSAwq','ignHBIa','DgL2zsa','BNqSiee','Dcb2ywW','AwD1CMe','CIbjBNa','zw1WBge','zwn0iokaLa','ltaWmq','u1bssu4','vxnLiem','uKXZihC','y3vYzvi','zcKUieS','zML4','AwrHDgK','BxbSyxq','DgL0Bgu','Eg1Sl2y','CxvLCNK','yxrPBMC','C291CMm','BgWGB3i','CMvKzw4','DgvTCgW','AgLUzY4','ic5HBgW','iokaLcbtCa','BMCGzw4','BNn0CNu','AwnHDgK','Axn0lIa','zxnZAw8','ywzLq28','u0fyuge','BgDVCMK','Cgf0Dgu','AxjLy3q','AhjVBMK','y3rLzca','z3mU','yxnOtwe','ihDPDgG','uKforc0','t25SEsa','BgfUz3u','AwDUAw4','ChjLC3m','mtGWA0flAwrq','Bgf0zsa','zw5ZAxq','B3DLze8','wufntca','uMvMzxi','AxnHyMW','zw1VDgu','DgvYBMe','Cc5JB20','DgvSzxm','igfUBM8','zsb1C2u','zwn1CMK','ywLUC3q','rNjLzu0','igfUEsa','yxjHBwu','Axr5','zxmU','C2vJDxi','mdaX','yxr1CMu','zwqGy2W','mti4y2TwwgTq','ywXPzge','zwqGyxa','B3nLCYa','q1Dfltu','ifrLBxa','DgvKigy','B0rcigK','ie1VBMC','BgvZifi','B2rLzca','zsbJB24','uMfJzsa','BMfNzxi','ihn5BMm','DMfSDwe','sLDulta','zxKPihq','ig9Yige','u2fMzum','DguOks4','BMfIBgu','A3mU','AxrSEtO','mZm2','4OcuifzLBa','zM9Yihm','q1DfltK','vxnLic4','CMvZC2K','C2LNBMK','u3bYAw4','u25HA2u','uxvLCNK','DxrPB24','Aw5Qzwm','BMCGCge','Bg93zwq','CMqGq08','C2L0Axy','CNnLCKy','DgLVBG','zNKGywW','ie5Viee','DgLUzYa','zsK7','u3bLy2K','sgfYzgm','ywXSB3C','y2LMAwm','igv4Cg8','ChbYB3y','ihbYzwq','CMvKzwy','zcbZDge','y3jPDgK','CgfYC2K','AgLNAa','yxjRzxi','B3iGysa','Aw5WDxq','zsKGB3i','BIbWB28','Aw5Zigu','ywDLCW','ksbMB3i','B3iGy2G','ig11C3q','rxHWCMu','ig1Vzgu','AwvKifu','ywWGrw4','zxH0zxi','B25JDxi','uhjVy2u','BIbLBMe','C2fSBg8','DxqGu2e','4OcuifrOEq','AwvZlca','zxjPywW','A2uGDg8','CMvtAwC','4OcuiezYzq','q29Kzsa','zxiTy28','zYbPBNq','BMzPz3u','Aw5Lzca','vxnLihq','Cg9PBNq','qNLoyw0','CMfJDge','DgHLiee','DcbHCYa','CMLIDxq','q1Dflte','DMeUDxq','igXVzYa','DgHVDxq','z2DPBMC','lwjHC2u','sLDuihm','vsbYywm','AxrOB3u','CM1ZlG','EMf0Aw8','ywXNB3i','BNrYB2W','y3qGvvi','zwnRlvq','DguGzMK','Bgf0zxm','DgHLBsa','ifvZzxi','kezPBhq','ruWTmda','ltaWmW','y29Kzwq','re1jtIi','EsbLEhq','kgzPBMq','rgLZywi','ihbLCM0','zsbMCM8','DgvYAxO','BwfPBNm','ExbLzca','zwqGr2W','BMrVBsa','DMfSDwu','CMLNAw4','CM9SBgu','CdOVl2e','y3rHyMW','BMrWB2K','BNrPywW','CMLUz3m','zwrPCMu','zxiGvgu','zwqGzM8','ierHDge','BwvKAxu','zwn0Aw4','j3mGCxu','neHZzhnVCW','B25ZDhi','B20Gvxm','yMXLzca'];_0xf5c8=function(){return _0x1d0817;};return _0xf5c8();}const _0x2a545c={};function _0x27ae(_0x4db48b,_0xdfbfd6){_0x4db48b=_0x4db48b-(0x269d+-0x2120+-0x3db);const _0x6e26d1=_0xf5c8();let _0x1e5a3a=_0x6e26d1[_0x4db48b];if(_0x27ae['mdLNEM']===undefined){var _0x4fec65=function(_0x1267ab){const _0x4ba3c4='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0x3aaaff='',_0x29f717='';for(let _0xdc231e=0x2*-0xc29+0x1fbf+-0x76d,_0x53267e,_0x433e10,_0x9132f2=0x1874+0x8*0x9+-0x1*0x18bc;_0x433e10=_0x1267ab['charAt'](_0x9132f2++);~_0x433e10&&(_0x53267e=_0xdc231e%(0x4a9+-0x3*-0x745+-0x1a74)?_0x53267e*(-0x100f*-0x2+-0x907+0x3*-0x79d)+_0x433e10:_0x433e10,_0xdc231e++%(0x87f*-0x2+0xad*0x1+0x71*0x25))?_0x3aaaff+=String['fromCharCode'](0x23ab+0x1*0x224d+-0x44f9&_0x53267e>>(-(0x171a+-0x1e3f+0x727)*_0xdc231e&0x8*-0x49e+0x1995+0xb61)):-0xaf0+-0x10dd+0x1bcd){_0x433e10=_0x4ba3c4['indexOf'](_0x433e10);}for(let _0x50a417=0x218b+0x1712+-0x389d,_0x122bc4=_0x3aaaff['length'];_0x50a417<_0x122bc4;_0x50a417++){_0x29f717+='%'+('00'+_0x3aaaff['charCodeAt'](_0x50a417)['toString'](-0x99a+0x3b*-0x2b+0x1393))['slice'](-(0xa53*0x1+0x1e94+-0x1*0x28e5));}return decodeURIComponent(_0x29f717);};_0x27ae['myQlGz']=_0x4fec65,_0x27ae['lCVXSd']={},_0x27ae['mdLNEM']=!![];}const _0x127c62=_0x6e26d1[0x88*0x2+0xd12+-0xe22],_0x576a64=_0x4db48b+_0x127c62,_0x5ae708=_0x27ae['lCVXSd'][_0x576a64];return!_0x5ae708?(_0x1e5a3a=_0x27ae['myQlGz'](_0x1e5a3a),_0x27ae['lCVXSd'][_0x576a64]=_0x1e5a3a):_0x1e5a3a=_0x5ae708,_0x1e5a3a;}_0x2a545c['id']=_0x2af316(0xf2,0x144)+_0x2af316(0x215,0x17f)+'-002',_0x2a545c['cwe']=_0x2af316(0x288,0x320)+'43',_0x2a545c['sever'+_0x182b38(-0x15e,-0x70)]=_0x2af316(0x2a4,0x1f4)+_0x2af316(0x1b3,0x172),_0x2a545c[_0x2af316(0x236,0x2aa)]='NoSQL'+_0x2af316(0x117,0x1e2)+_0x2af316(0x220,0x2e4)+_0x182b38(0x55,-0x97)+_0x2af316(0x143,0x4a)+_0x182b38(-0x290,-0x199)+_0x2af316(0x113,0x1ff)+'DB\x20ra'+_0x2af316(0x18a,0x118)+'ry',_0x2a545c[_0x182b38(-0xf5,-0x1a6)+'iptio'+'n']='Strin'+_0x182b38(-0x5a,-0x14)+'erpol'+_0x182b38(-0x128,-0xdb)+_0x2af316(0x1bd,0x24a)+_0x2af316(0x28e,0x2ed)+_0x2af316(0x260,0x299)+'tatio'+_0x2af316(0x1a1,0xc1)+_0x2af316(0x218,0x249)+_0x2af316(0x275,0x226)+_0x2af316(0x274,0x185)+_0x182b38(-0x215,-0x17e)+_0x182b38(-0x199,-0xc3),_0x2a545c[_0x2af316(0x252,0x271)+_0x182b38(0x7f,-0x2a)]=[_0x182b38(-0xd2,-0x182)],_0x2a545c[_0x2af316(0x249,0x1b6)+'rn']=/@Query\s*\(\s*["']\{[^}]*\?\d+/g,_0x2a545c[_0x2af316(0x233,0x2bb)]=_0x2af316(0x190,0x1a2)+'pring'+_0x182b38(-0x26d,-0x1f0)+_0x2af316(0xea,0x12c)+_0x2af316(0x18b,0x184)+'eriva'+_0x182b38(-0x1b1,-0x1a5)+_0x182b38(-0x2ac,-0x204)+_0x182b38(-0x4b,-0xf)+_0x2af316(0x2aa,0x22c)+'\x20Crit'+'eria\x20'+_0x182b38(-0x18c,-0x134)+_0x2af316(0x1c7,0x11c)+_0x182b38(-0x5e,-0xcb)+_0x182b38(-0xca,-0x120)+'uery\x20'+'strin'+_0x2af316(0x24d,0x173);const _0x355fe4={};_0x355fe4['id']=_0x2af316(0xf2,0x55)+_0x2af316(0x27d,0x1b1)+'01',_0x355fe4['cwe']='CWE-3'+'45',_0x355fe4[_0x2af316(0x1f7,0x2a9)+'ity']=_0x182b38(-0x126,-0x33)+_0x2af316(0x1b3,0x27a),_0x355fe4[_0x182b38(-0x107,-0xa1)]=_0x2af316(0x15c,0x1a8)+_0x182b38(0x4f,-0x3f)+_0x182b38(-0x12b,-0x8f)+_0x2af316(0x1c2,0x227)+_0x2af316(0x26e,0x2e9)+_0x182b38(0x29,-0x41),_0x355fe4[_0x2af316(0x131,0x21e)+'iptio'+'n']=_0x2af316(0xfb,0x1d5)+_0x182b38(-0x1db,-0x132)+_0x182b38(-0xc2,-0x17c)+'hout\x20'+_0x182b38(-0xa4,-0xb3)+_0x182b38(0x4e,-0x9e)+'\x20the\x20'+_0x182b38(0x75,0x1)+_0x2af316(0x157,0x1c0)+_0x2af316(0x29d,0x308)+'s\x20\x27no'+_0x182b38(-0x29a,-0x1b7)+'lgori'+_0x2af316(0x191,0x164)+_0x2af316(0x1ab,0x1df)+'s.',_0x355fe4[_0x2af316(0x252,0x354)+'ages']=['java'],_0x355fe4[_0x182b38(-0x9f,-0x8e)+'rn']=/Jwts\.parser(?:Builder)?\s*\(\s*\)\s*\.setSigningKey\s*\([^)]+\)\s*\.parse(?:Claims)?(?:Jws|Jwt)?\s*\(/g,_0x355fe4[_0x2af316(0x233,0x247)]=_0x182b38(-0x159,-0x1c9)+_0x2af316(0x200,0x249)+_0x182b38(-0xe1,-0x171)+_0x182b38(-0xfb,-0x160)+_0x2af316(0x1a8,0x149)+_0x182b38(-0xb7,-0x18)+_0x182b38(-0x23d,-0x14b)+'th(al'+'gorit'+_0x182b38(-0x1b4,-0xe4)+_0x2af316(0x27e,0x25c)+_0x2af316(0x12d,0xa2)+'orce\x20'+_0x2af316(0x198,0x1d6)+_0x2af316(0x29e,0x374)+_0x2af316(0x196,0x13c)+_0x2af316(0x15e,0x133)+'.';const _0x4a4efb={};_0x4a4efb['id']=_0x2af316(0xf2,0x1f4)+_0x182b38(-0x14d,-0x5a)+'02',_0x4a4efb[_0x2af316(0x101,0x5e)]=_0x2af316(0x13a,0x168)+'98',_0x4a4efb['sever'+_0x182b38(-0xe9,-0x70)]='criti'+'cal',_0x4a4efb[_0x2af316(0x236,0x2d8)]=_0x182b38(-0x279,-0x17b)+_0x2af316(0x115,0x1be)+_0x2af316(0xd0,0x109)+_0x182b38(-0x104,-0x181)+_0x182b38(-0x1e2,-0x198)+'ey',_0x4a4efb[_0x182b38(-0x1c9,-0x1a6)+_0x182b38(-0x32,-0xef)+'n']=_0x182b38(0x2e,-0x3b)+_0x2af316(0x277,0x206)+_0x2af316(0x2d3,0x3b5)+_0x2af316(0x253,0x1df)+'g\x20key'+_0x2af316(0x216,0x2e8)+_0x2af316(0x23a,0x143)+_0x2af316(0x1f6,0x2f3)+_0x182b38(-0x17b,-0x11d)+'\x20be\x20e'+'xtrac'+_0x2af316(0x273,0x2b1)+_0x2af316(0x1f0,0x198)+_0x2af316(0x195,0x24e)+_0x2af316(0x26c,0x211)+'asses'+'.',_0x4a4efb['langu'+'ages']=[_0x182b38(-0x228,-0x182)],_0x4a4efb[_0x182b38(-0xe0,-0x8e)+'rn']=/\.signWith\s*\(\s*(?:SignatureAlgorithm\.\w+\s*,\s*)?["'][^"']{8,}["']/g,_0x4a4efb[_0x2af316(0x233,0x189)]=_0x182b38(-0x202,-0x1de)+_0x2af316(0x28b,0x2d4)+_0x2af316(0x106,0x17a)+_0x182b38(-0x177,-0x1cb)+_0x182b38(-0x10f,-0xf8)+_0x2af316(0x1b9,0x250)+_0x182b38(-0xa4,-0x122)+'varia'+_0x182b38(-0x16d,-0xe2)+_0x182b38(-0x31,-0x2f)+_0x2af316(0x13c,0x216)+_0x182b38(-0x97,-0x191)+_0x182b38(0x90,-0x5d)+'.';const _0xfadcc5={};_0xfadcc5['id']=_0x182b38(-0x17d,-0x1e5)+_0x182b38(-0x118,-0x15a)+_0x2af316(0x22d,0x2e2),_0xfadcc5[_0x2af316(0x101,0x9f)]=_0x2af316(0xfc,0x1c9)+'01',_0xfadcc5[_0x182b38(-0x5e,-0xe0)+_0x2af316(0x267,0x1c2)]=_0x2af316(0xe8,0x3a)+'m',_0xfadcc5['title']=_0x182b38(0x21,-0xbb)+'Redir'+_0x182b38(-0x1a,-0xab)+_0x182b38(-0x30f,-0x20b)+'-Cont'+_0x2af316(0xde,0x10b)+'d\x20Red'+_0x2af316(0x24a,0x22c),_0xfadcc5['descr'+_0x182b38(-0x157,-0xef)+'n']=_0x182b38(-0x183,-0xf4)+_0x2af316(0xe9,0x98)+'g\x20to\x20'+_0x2af316(0x158,0x1c5)+'suppl'+_0x182b38(0x63,-0x24)+'RLs\x20w'+_0x182b38(-0xc2,-0x2)+_0x2af316(0x228,0x13f)+_0x2af316(0x234,0x264)+'on\x20en'+_0x2af316(0x218,0x15c)+_0x182b38(-0x1b4,-0x15b)+_0x2af316(0x23e,0x2d6),_0xfadcc5[_0x182b38(0x83,-0x85)+_0x182b38(-0x75,-0x2a)]=[_0x2af316(0x155,0x98)],_0xfadcc5[_0x182b38(-0x101,-0x8e)+'rn']=/(?:response\.sendRedirect|ModelAndView\s*\(\s*["']redirect:)\s*\(?\s*(?:request\.getParameter|req\.getParameter|params\.get)/g,_0xfadcc5[_0x182b38(-0xe8,-0xa4)]='Valid'+_0x2af316(0x1d1,0x19a)+_0x182b38(-0x21d,-0x1f3)+_0x182b38(0x97,0x3)+_0x182b38(-0x2bd,-0x1e7)+_0x182b38(0x1e,-0x74)+'\x20an\x20a'+_0x2af316(0x171,0x109)+_0x182b38(-0x6f,-0x93)+_0x2af316(0x251,0x250)+_0x182b38(0x72,-0x3a)+_0x182b38(-0x1b0,-0x1b3)+_0x2af316(0x226,0x195)+'paths'+_0x182b38(-0xd5,-0x58)+_0x182b38(-0x139,-0x37)+_0x2af316(0x175,0x139)+_0x2af316(0xd8,0x106)+'.';const _0x55d8f9={};_0x55d8f9['id']='JAVA-'+_0x2af316(0xce,-0x38)+'1',_0x55d8f9[_0x182b38(-0x2a3,-0x1d6)]='CWE-9'+'17';function _0x2af316(_0x1d964e,_0x2c99d4){const _0x376a48={_0x4128ae:0xda};return _0x27ae(_0x1d964e- -_0x376a48._0x4128ae,_0x2c99d4);}_0x55d8f9[_0x182b38(-0xa5,-0xe0)+'ity']='criti'+_0x182b38(-0x114,-0x124),_0x55d8f9['title']=_0x182b38(0x5c,-0x26)+_0x182b38(-0x17b,-0x148)+'\x20Lang'+_0x2af316(0x151,0x1f8)+'Injec'+_0x182b38(-0x12f,-0x1a5)+_0x2af316(0x1c5,0x1b6)+_0x182b38(-0x4a,-0xad)+_0x182b38(-0xbe,-0x1ac)+_0x182b38(-0x14e,-0x16e),_0x55d8f9[_0x2af316(0x131,0x22c)+_0x182b38(-0x131,-0xef)+'n']='Evalu'+_0x2af316(0x239,0x23d)+_0x2af316(0x21d,0x1f8)+_0x182b38(-0x227,-0x161)+_0x182b38(-0xdb,-0xc)+_0x2af316(0x12a,0x217)+_0x2af316(0x165,0x201)+_0x182b38(-0x10d,-0x83)+_0x2af316(0x122,0xbf)+_0x2af316(0x154,0x1d4)+_0x182b38(-0x17b,-0x145)+_0x2af316(0x1cb,0x2ae)+_0x2af316(0x2c1,0x1e3)+'Execu'+'tion.',_0x55d8f9['langu'+_0x182b38(-0x33,-0x2a)]=['java'],_0x55d8f9['patte'+'rn']=/(?:ExpressionFactory|ValueExpression|ELProcessor)\s*.*?(?:createValueExpression|eval)\s*\([^)]*(?:request|param|input)/g,_0x55d8f9['fix']=_0x182b38(-0xc6,-0x102)+_0x2af316(0x14b,0x5b)+_0x182b38(-0x1ba,-0xba)+_0x2af316(0x176,0x23d)+_0x182b38(-0x1bc,-0x1b8)+_0x2af316(0x14a,0x18d)+'aluat'+_0x182b38(-0xe5,-0x1dd)+_0x182b38(-0x2b9,-0x1c9)+_0x2af316(0x266,0x1c4)+_0x182b38(-0x1cc,-0x200)+_0x2af316(0x26f,0x28d)+'proac'+_0x182b38(-0x294,-0x1d0)+_0x182b38(-0x9b,-0x110)+'d.';const _0x1971c9={};_0x1971c9['id']=_0x182b38(-0x119,-0x1e5)+_0x182b38(-0x6b,-0x87)+_0x182b38(-0x26,-0x6d),_0x1971c9['cwe']=_0x182b38(-0x18c,-0xb5)+'38',_0x1971c9[_0x2af316(0x1f7,0x1b9)+_0x2af316(0x267,0x2fd)]=_0x182b38(-0x23a,-0x1ef)+'m',_0x1971c9[_0x182b38(-0x118,-0xa1)]=_0x182b38(0x36,-0xc8)+_0x182b38(-0xd5,-0x159)+_0x2af316(0x1af,0x136)+_0x182b38(-0xac,-0x152)+_0x182b38(0x29,-0x9)+'il.Ra'+_0x182b38(-0x1a3,-0x1fc)+_0x182b38(-0x74,-0x11f)+_0x2af316(0x262,0x1fd)+'ty',_0x1971c9['descr'+_0x2af316(0x1e8,0x11a)+'n']=_0x182b38(-0xe,-0xc4)+'util.'+_0x2af316(0x1ec,0x270)+'m\x20is\x20'+'predi'+_0x2af316(0xe0,0x14e)+_0x182b38(-0x16c,-0xcd)+_0x182b38(0xad,-0x27)+'\x20not\x20'+'be\x20us'+_0x2af316(0xe6,0x1ab)+_0x182b38(-0x129,-0x1e4)+_0x182b38(-0x12b,-0x176)+_0x182b38(-0x247,-0x170)+_0x2af316(0x19f,0x193)+_0x182b38(-0x234,-0x165)+_0x2af316(0x209,0x13b)+_0x2af316(0x2be,0x2b7)+'kens\x20'+'or\x20ke'+_0x2af316(0x1cf,0x159),_0x1971c9[_0x182b38(-0x8e,-0x85)+_0x2af316(0x2ad,0x1fe)]=[_0x182b38(-0x28b,-0x182)],_0x1971c9[_0x182b38(-0x139,-0x8e)+'rn']=/new\s+Random\s*\(\s*\)/g,_0x1971c9['fix']=_0x2af316(0x102,0x6c)+'ava.s'+_0x182b38(-0xe3,-0x75)+_0x2af316(0x14c,0x159)+_0x2af316(0x231,0x194)+_0x2af316(0x1af,0x1cc)+'\x20for\x20'+_0x182b38(-0x16,-0x6e)+_0x2af316(0x129,0x1ad)+_0x2af316(0x257,0x1d1)+_0x182b38(-0x22f,-0x131)+_0x182b38(-0x225,-0x128)+_0x2af316(0x172,0x1fe)+_0x2af316(0x268,0x301);const _0x13923c={};_0x13923c['id']=_0x182b38(-0x160,-0x1e5)+_0x2af316(0x137,0x1c8)+_0x2af316(0x26a,0x316),_0x13923c['cwe']=_0x182b38(-0xe6,-0xb5)+'62',_0x13923c[_0x182b38(-0x102,-0xe0)+_0x182b38(-0x20,-0x70)]=_0x2af316(0xe8,0x51)+'m',_0x13923c[_0x182b38(-0x16e,-0xa1)]=_0x2af316(0x279,0x301)+'Condi'+'tion\x20'+_0x182b38(-0x28d,-0x1b6)+_0x2af316(0x188,0xfe)+_0x2af316(0x152,0x5d)+_0x2af316(0xc8,0xd0)+_0x2af316(0x133,0xaa)+'ct',_0x13923c['descr'+_0x2af316(0x1e8,0x2a8)+'n']=_0x182b38(-0x74,-0xf7)+'ng\x20an'+'d\x20wri'+_0x182b38(0x1e,-0x3e)+'share'+_0x2af316(0x2a3,0x28b)+'te\x20wi'+_0x2af316(0x2d0,0x305)+_0x2af316(0x27b,0x275)+_0x182b38(-0x15f,-0x8c)+_0x182b38(0xc9,0x0)+_0x2af316(0x2b8,0x2e5)+_0x182b38(-0xae,-0xe2)+_0x182b38(-0x266,-0x19c)+_0x182b38(0xc1,-0x3)+_0x182b38(-0x82,-0x5f)+'ditio'+_0x2af316(0x126,0x179),_0x13923c['langu'+'ages']=[_0x182b38(-0x1a5,-0x182)],_0x13923c[_0x182b38(0xb,-0x8e)+'rn']=/if\s*\(\s*\w+\.(?:containsKey|contains|isEmpty|size)\s*\([^)]*\)\s*\)\s*\{[^}]*\w+\.(?:put|add|remove)\s*\(/g,_0x13923c[_0x2af316(0x233,0x324)]=_0x2af316(0x22f,0x268)+_0x182b38(-0x41,-0x21)+_0x2af316(0x1d7,0x235)+_0x2af316(0x24e,0x1eb)+_0x2af316(0x25e,0x269)+'puteI'+_0x2af316(0x10d,0xc8)+_0x2af316(0x227,0x302)+_0x2af316(0x197,0x17b)+_0x2af316(0x25a,0x35f)+'ence,'+_0x182b38(-0xca,-0xdd)+'ynchr'+_0x182b38(-0xc6,-0x164)+'d\x20blo'+_0x182b38(-0x179,-0x13c)+_0x182b38(0xb3,-0x28)+'eck-t'+'hen-a'+'ct\x20pa'+'ttern'+'s.';const _0x56e309={};_0x56e309['id']=_0x182b38(-0x18f,-0x1e5)+_0x182b38(-0x25c,-0x1df)+'01',_0x56e309[_0x182b38(-0x251,-0x1d6)]=_0x2af316(0x271,0x32a)+'32',_0x56e309[_0x2af316(0x1f7,0x23f)+_0x182b38(0x66,-0x70)]='high',_0x56e309[_0x2af316(0x236,0x273)]=_0x182b38(-0x18f,-0x14a)+_0x2af316(0x226,0x1fa)+_0x2af316(0x13e,0x3f)+_0x2af316(0x1b6,0x1f6)+'gs',_0x56e309[_0x182b38(-0xc5,-0x1a6)+_0x2af316(0x1e8,0x146)+'n']='Loggi'+_0x2af316(0x291,0x24d)+_0x2af316(0x1e7,0x138)+_0x182b38(-0x131,-0xc0)+'okens'+_0x2af316(0x168,0x167)+'crede'+_0x182b38(-0x2cd,-0x1f5)+_0x2af316(0x1c3,0x207)+_0x182b38(-0x41,-0x67)+_0x182b38(-0x30c,-0x20c)+'in\x20lo'+'g\x20fil'+_0x182b38(-0x265,-0x178)+_0x182b38(-0x1ae,-0x1c1)+_0x2af316(0x1b2,0x104)+'ng\x20sy'+_0x2af316(0x1da,0x1a7)+'.',_0x56e309[_0x182b38(-0x12e,-0x85)+_0x2af316(0x2ad,0x332)]=['java'],_0x56e309['patte'+'rn']=/(?:log|logger|LOG|LOGGER)\.(?:info|debug|warn|error|trace)\s*\([^)]*(?:password|secret|token|apiKey|api_key|credential|ssn|credit.?card)/gi,_0x56e309[_0x182b38(-0x10b,-0xa4)]='Never'+_0x182b38(0x5d,-0x8)+_0x2af316(0x104,0x24)+_0x182b38(-0x20,-0xb1)+_0x2af316(0xdc,0xa3)+_0x182b38(-0xf6,-0x104)+'e\x20str'+_0x2af316(0xff,0x2c)+_0x2af316(0x125,0xaf)+_0x2af316(0x2d1,0x2b9)+'\x20with'+'\x20reda'+_0x182b38(0x21,-0x8b)+'field'+'s.';const _0x24abf8={};_0x24abf8['id']=_0x2af316(0xf2,0xe9)+'XXE-0'+'02',_0x24abf8[_0x182b38(-0x155,-0x1d6)]=_0x2af316(0xfc,0x7e)+'11',_0x24abf8[_0x182b38(-0x13c,-0xe0)+_0x182b38(-0xcf,-0x70)]=_0x2af316(0x2a4,0x235)+_0x182b38(-0x1f5,-0x124),_0x24abf8[_0x182b38(-0xb2,-0xa1)]='XXE\x20—'+_0x2af316(0x170,0x109)+'arser'+_0x2af316(0x20d,0x1b2)+'out\x20D'+'isabl'+_0x2af316(0x12f,0x1e0)+'xtern'+_0x2af316(0x2b4,0x329)+'titie'+'s',_0x24abf8[_0x182b38(-0x1e1,-0x1a6)+_0x182b38(-0x1df,-0xef)+'n']=_0x2af316(0x247,0x328)+_0x2af316(0x295,0x25c)+_0x2af316(0x162,0xfb)+'y\x20wit'+'hout\x20'+_0x2af316(0x1a4,0x189)+_0x2af316(0x1e2,0x1aa)+_0x182b38(0x52,-0x22)+_0x2af316(0x1cd,0x225)+_0x2af316(0x194,0x1ea)+_0x182b38(-0x250,-0x1e1)+_0x182b38(0x1b,-0xbf)+'\x20XXE\x20'+_0x2af316(0x1ee,0x2b8)+'ks.',_0x24abf8['langu'+_0x2af316(0x2ad,0x348)]=[_0x182b38(-0x1ee,-0x182)],_0x24abf8[_0x182b38(-0x7a,-0x8e)+'rn']=/SAXParserFactory\.newInstance\s*\(\s*\)(?:(?!setFeature).)*\.newSAXParser/gs,_0x24abf8[_0x2af316(0x233,0x32c)]='Disab'+'le\x20ex'+_0x182b38(-0x111,-0x7a)+'l\x20ent'+_0x182b38(-0x1ac,-0x1a3)+_0x182b38(-0x15c,-0x19f)+_0x182b38(-0x1fe,-0x187)+'setFe'+_0x182b38(-0x147,-0x6c)+_0x2af316(0x1a7,0x1f0)+_0x182b38(-0x26e,-0x1f8)+'pache'+_0x2af316(0x1c4,0x258)+_0x182b38(-0xea,-0xa0)+_0x2af316(0x1fe,0x1fb)+_0x182b38(-0x9d,-0xec)+_0x2af316(0x2b9,0x2be)+_0x2af316(0x178,0x26e)+_0x182b38(-0xfa,-0xea)+_0x2af316(0x208,0x199)+_0x2af316(0x145,0xd7)+_0x2af316(0x29a,0x270);const _0x3d1d13={};_0x3d1d13['id']=_0x2af316(0xf2,0x5)+_0x2af316(0x10a,0x149)+_0x2af316(0xcf,0x29),_0x3d1d13[_0x182b38(-0x152,-0x1d6)]=_0x2af316(0x271,0x34c)+'02',_0x3d1d13[_0x2af316(0x1f7,0x236)+_0x2af316(0x267,0x275)]=_0x182b38(0xc7,-0x33)+_0x2af316(0x1b3,0x170),_0x3d1d13[_0x2af316(0x236,0x2cd)]='Unsaf'+'e\x20Des'+_0x2af316(0x2bd,0x370)+'izati'+_0x2af316(0x1b4,0x28b)+'Snake'+_0x182b38(0x4,-0x7e)+'Witho'+_0x182b38(0x2c,-0x1d)+_0x182b38(-0x8d,-0x119)+'struc'+'tor',_0x3d1d13[_0x182b38(-0x167,-0x1a6)+'iptio'+'n']=_0x2af316(0x28d,0x1a4)+_0x2af316(0x259,0x19c)+_0x2af316(0x203,0x1a8)+_0x2af316(0x16a,0xe2)+_0x2af316(0x127,0x13c)+_0x182b38(-0x1a,-0x57)+_0x2af316(0xec,0x8)+'uctor'+_0x182b38(0x23,-0xb2)+'deser'+_0x2af316(0x206,0x280)+_0x182b38(-0x134,-0x1b4)+_0x2af316(0x180,0x27f)+'y\x20Jav'+'a\x20obj'+'ects,'+'\x20enab'+_0x182b38(-0x12c,-0xf5)+'RCE.',_0x3d1d13[_0x182b38(-0xd,-0x85)+_0x182b38(0x6c,-0x2a)]=[_0x182b38(-0xc6,-0x182)],_0x3d1d13['patte'+'rn']=/new\s+Yaml\s*\(\s*\)\s*\.load\s*\(/g,_0x3d1d13[_0x2af316(0x233,0x26e)]='Use\x20S'+_0x2af316(0x246,0x2a0)+_0x2af316(0x242,0x241)+_0x182b38(-0x8c,-0xe6)+_0x2af316(0x118,0x4b)+_0x2af316(0x211,0x210)+_0x182b38(-0x279,-0x1ba)+_0x2af316(0x246,0x2fa)+'nstru'+_0x182b38(-0xa1,-0x116)+')).lo'+_0x2af316(0x1e9,0x2c6)+'put)';const _0x168e2a={};_0x168e2a['id']=_0x182b38(-0x2bd,-0x1e5)+'CRED-'+_0x2af316(0x26a,0x2ad),_0x168e2a[_0x182b38(-0x145,-0x1d6)]=_0x2af316(0x13a,0x1b6)+'98',_0x168e2a[_0x182b38(0x1f,-0xe0)+'ity']=_0x2af316(0x2a4,0x2f3)+_0x182b38(-0x1e9,-0x124),_0x168e2a[_0x182b38(-0xe0,-0xa1)]=_0x2af316(0x29c,0x276)+_0x2af316(0x277,0x185)+_0x2af316(0x1d0,0x16b)+'ase\x20C'+_0x182b38(-0xc3,-0x9b)+_0x2af316(0x1d8,0x18f),_0x168e2a['descr'+_0x2af316(0x1e8,0x22c)+'n']=_0x2af316(0x29c,0x1e8)+_0x2af316(0x277,0x2b1)+_0x182b38(-0x37,-0x117)+'ase\x20U'+_0x2af316(0x230,0x2ec)+'ith\x20c'+_0x182b38(-0x1a1,-0x9b)+'tials'+_0x182b38(-0x223,-0x195)+'easil'+_0x2af316(0xd2,0x87)+_0x2af316(0x2c9,0x20f)+'ble\x20f'+'rom\x20c'+_0x2af316(0x195,0xec)+_0x182b38(-0xe0,-0x6b)+'asses'+'.',_0x168e2a[_0x182b38(-0x68,-0x85)+_0x2af316(0x2ad,0x32c)]=['java'],_0x168e2a[_0x182b38(-0x86,-0x8e)+'rn']=/DriverManager\.getConnection\s*\(\s*["']jdbc:\w+:\/\/[^"']*["']\s*,\s*["']\w+["']\s*,\s*["'][^"']+["']/g,_0x168e2a[_0x2af316(0x233,0x2f9)]='Use\x20e'+'nviro'+'nment'+_0x2af316(0x187,0x114)+_0x182b38(-0x14d,-0xbf)+_0x182b38(0x99,-0x58)+_0x2af316(0x140,0x1bb)+'ectio'+_0x2af316(0x2ab,0x21b)+'l\x20wit'+_0x182b38(-0x138,-0x144)+'ernal'+'\x20conf'+_0x2af316(0x229,0x147)+_0x182b38(-0x22a,-0x1a5)+_0x2af316(0x1e4,0x27a)+_0x2af316(0x243,0x167)+_0x2af316(0x1ad,0x230)+_0x2af316(0x12e,0x171)+_0x2af316(0x2bc,0x352)+'Vault'+').';export const javaExtendedRules=[_0x267623,_0x4d8901,_0x30083c,_0x216352,_0x538de1,_0x44bde5,_0x58161b,_0x2a545c,_0x355fe4,_0x4a4efb,_0xfadcc5,_0x55d8f9,_0x1971c9,_0x13923c,_0x56e309,_0x24abf8,_0x3d1d13,_0x168e2a];
|
|
1
|
+
(function(_0x4f7eb1,_0x418ed8){const _0x27d93e={_0x4de67d:0x16d,_0x2ba22d:0xad,_0x11dc2a:0x341,_0x1e222d:0x5f,_0x39e596:0x20b,_0x129d83:0x209,_0x3a05cd:0x152};function _0x81dcd2(_0x8077ee,_0x379dfd){return _0x4d77(_0x8077ee- -0x17c,_0x379dfd);}function _0x4b64e2(_0x55b7b5,_0x43d495){return _0x4d77(_0x43d495- -0x3b4,_0x55b7b5);}const _0x51faa6=_0x4f7eb1();while(!![]){try{const _0x3b02ae=parseInt(_0x81dcd2(_0x27d93e._0x4de67d,0xcd))/(-0x1910+-0x791+0x20a2)*(-parseInt(_0x4b64e2(-0x78,-_0x27d93e._0x2ba22d))/(0x3d*0x94+0x9*-0x10a+-0x19e8))+parseInt(_0x81dcd2(0x13f,0x10a))/(0x191*0x15+-0x26d6+0x2fa*0x2)+-parseInt(_0x4b64e2(-0x96,-0x162))/(-0x1f5*-0x1+0x1e77*-0x1+0x1c86)*(-parseInt(_0x4b64e2(-_0x27d93e._0x11dc2a,-0x2a0))/(-0x1*0x645+0x149b+-0xe51))+-parseInt(_0x81dcd2(0x10,-0x1e))/(0x164*0x1b+-0x1b7*-0x5+-0x2e19)+parseInt(_0x4b64e2(-0x32e,-0x231))/(-0x245e+0xd6e+0x16f7)+parseInt(_0x81dcd2(-_0x27d93e._0x1e222d,0x83))/(-0x97b*0x1+0x1a17+-0x1094)+parseInt(_0x4b64e2(-_0x27d93e._0x39e596,-_0x27d93e._0x129d83))/(-0x273*0x6+0x1181*-0x1+-0x203c*-0x1)*(-parseInt(_0x4b64e2(-0x212,-_0x27d93e._0x3a05cd))/(-0x118f+0x147e+-0x2e5));if(_0x3b02ae===_0x418ed8)break;else _0x51faa6['push'](_0x51faa6['shift']());}catch(_0x3d8077){_0x51faa6['push'](_0x51faa6['shift']());}}}(_0x226d,0xc6bf0+0x18e7f+-0x2fd39));const _0x31d4ac={};_0x31d4ac['id']='JAVA-'+_0x389db7(0x3dc,0x4cf)+_0x389db7(0x4d6,0x3e1),_0x31d4ac[_0xac8377(0x50c,0x520)]=_0xac8377(0x3fb,0x441)+'84',_0x31d4ac[_0xac8377(0x469,0x43c)+_0xac8377(0x409,0x4f7)]=_0x389db7(0x437,0x451)+_0x389db7(0x3d2,0x43d),_0x31d4ac[_0x389db7(0x3f9,0x4fe)]=_0xac8377(0x311,0x3b4)+_0x389db7(0x440,0x3b9)+_0x389db7(0x4e0,0x478)+'All\x20o'+_0x389db7(0x556,0x57c)+'sitiv'+'e\x20End'+'point',_0x31d4ac[_0x389db7(0x3de,0x484)+'iptio'+'n']=_0xac8377(0x4b9,0x3db)+_0xac8377(0x3b9,0x463)+_0xac8377(0x460,0x41c)+_0xac8377(0x588,0x47f)+_0xac8377(0x525,0x58e)+_0xac8377(0x34f,0x3c1)+_0x389db7(0x3a5,0x38f)+'ndpoi'+'nts\x20e'+_0xac8377(0x4f4,0x599)+_0x389db7(0x4cd,0x48f)+'m\x20wit'+'hout\x20'+_0xac8377(0x3ca,0x3f1)+_0x389db7(0x388,0x2cc)+_0x389db7(0x4ce,0x5c6),_0x31d4ac['langu'+'ages']=[_0xac8377(0x3c3,0x4aa)],_0x31d4ac[_0x389db7(0x475,0x499)+'rn']=/\.antMatchers?\s*\(\s*["']\/(?:admin|api|internal|manage)[^"']*["']\s*\)\.permitAll\s*\(\s*\)/g,_0x31d4ac[_0xac8377(0x455,0x512)]=_0x389db7(0x48d,0x46f)+_0x389db7(0x464,0x477)+_0x389db7(0x4a2,0x54b)+_0x389db7(0x406,0x3ea)+_0xac8377(0x630,0x56b)+_0xac8377(0x558,0x59f)+_0xac8377(0x3c3,0x3b7)+'ated('+_0xac8377(0x461,0x519)+_0xac8377(0x46b,0x4e1)+_0xac8377(0x589,0x492)+'\x20endp'+_0xac8377(0x459,0x48a)+'.';const _0x1782e3={};_0x1782e3['id']=_0x389db7(0x457,0x3f7)+'SPRIN'+_0xac8377(0x4e0,0x40f),_0x1782e3[_0x389db7(0x4cf,0x4b6)]=_0xac8377(0x38a,0x431)+'52',_0x1782e3[_0xac8377(0x50c,0x43c)+_0xac8377(0x4e3,0x4f7)]=_0x389db7(0x3c1,0x41b),_0x1782e3['title']=_0x389db7(0x363,0x455)+_0x389db7(0x56e,0x52e)+_0x389db7(0x37a,0x2f6)+_0x389db7(0x539,0x4bb)+_0xac8377(0x598,0x4b9)+_0xac8377(0x326,0x402)+'y',_0x1782e3[_0x389db7(0x3de,0x385)+_0xac8377(0x554,0x526)+'n']=_0xac8377(0x69d,0x5bc)+_0x389db7(0x4e4,0x4ad)+_0xac8377(0x576,0x53f)+_0x389db7(0x4dd,0x512)+_0x389db7(0x51d,0x47b)+'\x20expo'+_0x389db7(0x387,0x28b)+_0xac8377(0x2d7,0x3dd)+_0xac8377(0x565,0x4fb)+'hangi'+_0x389db7(0x454,0x4d2)+'dpoin'+'ts\x20to'+'\x20Cros'+_0x389db7(0x40b,0x494)+'e\x20Req'+'uest\x20'+'Forge'+_0x389db7(0x3a1,0x340)+'tacks'+'.',_0x1782e3[_0x389db7(0x54f,0x563)+_0xac8377(0x52a,0x5b9)]=[_0x389db7(0x459,0x422)],_0x1782e3[_0x389db7(0x475,0x37b)+'rn']=/\.csrf\s*\(\s*\)\s*\.disable\s*\(\s*\)/g,_0x1782e3[_0xac8377(0x4ed,0x512)]='Only\x20'+_0x389db7(0x3ec,0x3a8)+_0xac8377(0x432,0x4e6)+_0xac8377(0x50d,0x595)+'r\x20sta'+'teles'+'s\x20API'+_0xac8377(0x5a6,0x522)+'oints'+_0xac8377(0x3ee,0x4c9)+_0xac8377(0x51b,0x537)+_0x389db7(0x38d,0x2bf)+_0xac8377(0x400,0x4ed)+_0x389db7(0x386,0x446)+'bled\x20'+'for\x20s'+_0xac8377(0x4d9,0x4b2)+_0xac8377(0x543,0x558)+_0x389db7(0x364,0x28c)+_0x389db7(0x413,0x352);const _0x270b7e={};_0x270b7e['id']=_0x389db7(0x457,0x46d)+'SPRIN'+_0xac8377(0x3be,0x426),_0x270b7e[_0x389db7(0x4cf,0x594)]='CWE-3'+'46',_0x270b7e[_0xac8377(0x47d,0x43c)+'ity']='high',_0x270b7e[_0xac8377(0x353,0x44a)]='Sprin'+_0x389db7(0x48e,0x563)+_0xac8377(0x649,0x55a)+_0x389db7(0x3a9,0x397)+_0x389db7(0x54a,0x4ea)+_0x389db7(0x442,0x459),_0x270b7e[_0xac8377(0x377,0x42f)+_0x389db7(0x4d5,0x59d)+'n']=_0xac8377(0x4b9,0x445)+_0x389db7(0x477,0x509)+_0xac8377(0x444,0x3f5)+_0x389db7(0x3ef,0x421)+_0xac8377(0x4f1,0x498)+_0x389db7(0x55f,0x4a1)+_0x389db7(0x411,0x48f)+'nfigu'+_0x389db7(0x496,0x40e)+'n\x20exp'+_0x389db7(0x493,0x532)+_0x389db7(0x39b,0x304)+_0xac8377(0x4d7,0x4dd)+_0x389db7(0x49f,0x3b5)+_0x389db7(0x367,0x285)+_0xac8377(0x3e4,0x482),_0x270b7e[_0x389db7(0x54f,0x618)+_0x389db7(0x568,0x510)]=['java'],_0x270b7e['patte'+'rn']=/\.allowedOrigins?\s*\(\s*["']\*["']\s*\)/g,_0x270b7e['fix']=_0x389db7(0x471,0x531)+_0xac8377(0x351,0x415)+_0x389db7(0x462,0x4e3)+_0x389db7(0x3f2,0x4a6)+_0xac8377(0x4c8,0x3dc)+_0x389db7(0x4ac,0x5a7)+_0x389db7(0x428,0x381)+_0x389db7(0x3db,0x448)+_0xac8377(0x4e6,0x53b)+_0x389db7(0x3bc,0x3db)+_0xac8377(0x541,0x4c5)+'tps:/'+_0x389db7(0x3a8,0x2d7)+'p.com'+'\x22)';const _0x52e200={};_0x52e200['id']=_0x389db7(0x457,0x3ab)+'SSTI-'+_0x389db7(0x443,0x442),_0x52e200[_0xac8377(0x618,0x520)]=_0xac8377(0x586,0x5a9)+_0xac8377(0x5d2,0x5b7),_0x52e200[_0x389db7(0x3eb,0x4b8)+_0x389db7(0x4a6,0x513)]=_0x389db7(0x437,0x43a)+_0xac8377(0x411,0x423),_0x52e200[_0xac8377(0x484,0x44a)]='SSTI\x20'+'—\x20Fre'+_0xac8377(0x3c7,0x3f8)+_0x389db7(0x46a,0x484)+'mplat'+_0xac8377(0x3b5,0x485)+'m\x20Use'+_0x389db7(0x3c2,0x3d3)+'ut',_0x52e200['descr'+_0xac8377(0x43b,0x526)+'n']=_0xac8377(0x4ae,0x401)+_0xac8377(0x5f2,0x5b3)+_0xac8377(0x5b9,0x5ab)+_0xac8377(0x5bd,0x582)+_0xac8377(0x3c1,0x434)+_0x389db7(0x3d7,0x4ce)+'s\x20as\x20'+'FreeM'+_0xac8377(0x422,0x4f1)+'\x20temp'+_0xac8377(0x5ee,0x5af)+'\x20enab'+'les\x20R'+'emote'+_0xac8377(0x3ff,0x3f3)+_0xac8377(0x59e,0x5b6)+_0x389db7(0x37d,0x2e6)+_0x389db7(0x49a,0x460)+'templ'+'ate\x20i'+'nject'+_0x389db7(0x3cc,0x2f1),_0x52e200[_0x389db7(0x54f,0x542)+_0x389db7(0x568,0x61d)]=[_0x389db7(0x459,0x4c0)],_0x52e200[_0x389db7(0x475,0x517)+'rn']=/new\s+Template\s*\(\s*["'][^"']*["']\s*,\s*new\s+StringReader\s*\(\s*(?:request|req|input|param|body)/g,_0x52e200[_0x389db7(0x4c1,0x44b)]='Never'+_0xac8377(0x411,0x51b)+_0xac8377(0x631,0x55d)+_0xac8377(0x659,0x570)+_0xac8377(0x4c3,0x411)+_0xac8377(0x59e,0x4ba)+_0xac8377(0x636,0x5af)+_0xac8377(0x38e,0x48c)+_0xac8377(0x32f,0x3bd)+_0xac8377(0x498,0x50e)+'d\x20tem'+_0xac8377(0x57a,0x534)+_0x389db7(0x463,0x46f)+_0xac8377(0x4f8,0x551)+'h\x20saf'+_0x389db7(0x41a,0x383)+_0xac8377(0x422,0x466)+'el\x20bi'+'nding'+'.';const _0x337b36={};_0x337b36['id']=_0xac8377(0x513,0x4a8)+_0x389db7(0x4c2,0x564)+_0x389db7(0x4f5,0x4d9),_0x337b36[_0xac8377(0x5cb,0x520)]=_0xac8377(0x571,0x5a9)+_0xac8377(0x5d4,0x5b7),_0x337b36[_0xac8377(0x44f,0x43c)+_0x389db7(0x4a6,0x403)]='criti'+_0xac8377(0x48f,0x423),_0x337b36[_0xac8377(0x402,0x44a)]=_0xac8377(0x3f6,0x44b)+_0xac8377(0x473,0x566)+_0xac8377(0x485,0x446)+_0xac8377(0x4b9,0x471)+_0x389db7(0x435,0x409)+_0x389db7(0x487,0x401)+_0x389db7(0x4cb,0x3dc)+_0x389db7(0x54b,0x44a),_0x337b36[_0x389db7(0x3de,0x3fd)+_0xac8377(0x551,0x526)+'n']=_0x389db7(0x4a1,0x51a)+'ating'+_0xac8377(0x3ba,0x4a6)+_0xac8377(0x606,0x5c2)+_0xac8377(0x5df,0x5bb)+_0xac8377(0x490,0x3b9)+_0xac8377(0x33c,0x417)+'empla'+'tes\x20e'+'nable'+_0x389db7(0x4e2,0x547)+_0x389db7(0x36e,0x3b7)+_0x389db7(0x3e8,0x34c)+'n.',_0x337b36['langu'+_0x389db7(0x568,0x55c)]=[_0x389db7(0x459,0x3cd)],_0x337b36[_0xac8377(0x5ab,0x4c6)+'rn']=/Velocity\.evaluate\s*\(\s*\w+\s*,\s*\w+\s*,\s*["'][^"']*["']\s*,\s*new\s+StringReader\s*\(/g,_0x337b36[_0x389db7(0x4c1,0x4c6)]=_0xac8377(0x5c3,0x4cd)+_0xac8377(0x5e7,0x5b8)+'ined\x20'+'Veloc'+_0xac8377(0x4d6,0x417)+_0x389db7(0x520,0x626)+'te\x20fi'+_0xac8377(0x5d1,0x581)+_0x389db7(0x405,0x464)+_0x389db7(0x4e9,0x44e)+_0x389db7(0x455,0x440)+_0xac8377(0x621,0x5c2)+_0x389db7(0x446,0x41d)+'Veloc'+_0xac8377(0x5b1,0x596)+'valua'+_0xac8377(0x4d2,0x550);const _0x18f479={};function _0x226d(){const _0x18f5c2=['AgLUzY4','Bg9HzcG','zYbRzxK','yMXLigy','te9hlta','ifrLBxa','DgvTCgW','zcb3CMK','zxH0zxi','zxiGsw4','BIbLBMe','DxnLCIa','4OcuifrOEq','AxrSEtO','CYaNBM8','igXVzYa','y2LMAwm','Dg9TAwm','B3v0ieq','kcKGB24','zwn0iokaLa','DgL0Awu','DguU','vxnLigO','BMCGA2u','zsbMCM8','Bgf0zsa','AwrHDgK','y3jPDgK','C2vJDxi','B2LUDhm','B1nrtca','lIbvC2u','z2DPBMC','zgvYCYa','zxmU','AxrPzxm','zYdIGjqGCa','AxrPDMu','AwDPBG','mdaX','ExbLzca','yxnZzxm','Dcb0BYa','icGQksa','DgHLBsa','BNrPywW','yxnLifu','B24G4Ocuia','zwnRlvq','zxKPihq','CMLUz3m','zwnRlxq','q0uU','vcb3Axq','ltaWmW','ExmGzNi','BMCGzw4','ihvZzxi','BMCGCge','sKfwqs0','zMLUzwq','AMf2yq','C2vUC2K','uMfJzsa','DhLWzs0','igj1AwW','iff1zxi','DwfNzsa','zsbZDhi','zxnZAw8','Bg93zwq','igzPBgu','AgfZuM8','igzVCIa','BwvKAxu','B0rcigK','zwqGr2W','ihrLBxa','zxiGvgu','BguGzxG','DgLVBG','CMfJDge','zsbezxm','BNmGzw4','vxnLigu','u3bLy2K','uMvHzgK','AxjLy3q','CYGIAhq','Cgf0Dgu','A2vUCYa','Aw5Nige','icHkv1q','DgvKigy','AMf2ys4','y3rVCJO','vxnLiha','B3bLCNq','zYbftca','qvbjigK','EMf0Aw8','ihn5BMm','DMfSAwq','wwfTBcG','ig9Yige','yxjHBwu','u2fMzum','zNjVBsa','EsbMCM8','C3rYDwm','lcbVCIa','y29Kzwq','ueKGDg8','vxnLic4','zYdIGjqGvW','ruWTmda','ihnLBNm','Dwn0Dxi','ifHyrsa','B3nLCYa','zxmVzgK','BguGq1m','CMf0Aw8','y3rHyMW','zxmGBgK','BMrVBsa','ihzPysa','q29UzgK','zwvWigK','BsbvC2u','yxr1CMu','igfUEsa','yxjRzxi','rxzHBhu','BguOiKe','zxjPDMe','t3bLBIa','B20Gvxm','Axr5','ignHBIa','mtuWnJqWohn6qKveAa','q29Kzsa','yxrLlwm','zwfZAwW','EhbSAwm','BNn0CNu','C3n3B3i','yxrPBMC','zYbMAwW','yxr0ywm','DwvYEsa','C3nPBMC','Cc5JB20','ie5Viee','qIbXDwu','CYbLBMe','mJbjt0r2t2K','zxmGzw4','ywWGrw4','yxnOtwe','BNmU','zwzPBMu','vxnLiem','ChjLzgK','BNzPCM8','zML4','u1nuss0','ChjLzgu','Dgf0Aw8','q1Dfltu','yxrLihi','Axn0lIa','ksbMB3i','oIbMywm','ihbHCNm','vxnLCIa','ysbVyMO','CYb0Agu','DgLVBI4','y3DL','ieLUAMu','igvUzha','tM9tuuW','j3mGCxu','Aw9UlIa','Axb0Aw8','rY0Wmdm','ruWGzxG','4OcuifvZzq','B3iGy2G','AwvKifu','BcbLBNq','zKfIC2u','ChjVDgu','BMCGC3K','BcbHDhq','zxjTAxq','AgvZigK','CYbJB2q','CgXHDgu','BgLUzYa','A2uGDg8','lwjHC2u','EsbLEhq','lxnLBNm','ihbHC3m','B3DLze8','q1DfltK','uKfdrs0','DguGD2K','q1nsrIa','lM9YzY8','Cgf0Ahm','zsbJyw4','kgfWCgW','zwqGy2W','Aw5Qzwm','mdaY','tw9Uz28','zhmSihq','wfHfiokaLa','kcjODhq','uKforc0','z29YAxq','uMvKAxi','igfUige','Dwn0B3i','DguOks4','CYb3Axq','CMLUzYa','lunVBNq','zwqGzg8','ysbZCgu','ywjSzxm','AxPHDgK','BI1Iyxm','ihzHBhu','AwXKy2e','uKnflG','BgvZie4','zsb1C2u','tK9tuuW','Aw4GBg8','uhjVy2u','zxjWB2W','mta4odG3ng54EKTpzG','ig5VDca','BMPLy3q','zcbVzIa','4OcuifzLBa','ChjPBMC','CM9Tigm','ksKUBg8','AhjVBMK','ksbVCIa','ifnPz24','CMvtAwC','y3rPB24','uMvMzxi','CIbPBNa','zw1WBge','C3nPB24','yxnLiem','y3rLzca','ruWGzxy','DgLHBhm','BwvSzwe','zgvZzxi','ifnbwfa','ve9dve8','CMLIDxq','DxqGu2e','BMCGsLC','CMuPigK','BMvKv2K','B3iGysa','BgvZlIa','BNrYB2W','Chv0kq','Aw9UCYa','CNnLCKy','wfHflta','B2TLBNm','DxnLCI0','ChjVywm','AxnHyMW','yw5KB20','uxvLCNK','zYbPBNq','igfKBwK','ihbOAxm','mteYnZK4n2voBg1Rra','B21WAwW','sw5Zzwm','B20Gzw4','DxjLifi','uKyGzM8','Axr5lMu','ifDPDgG','vsbYywm','EhbVC2u','ie1VBMC','uLmGt3i','sw5WDxq','4Ocuie5VBG','igfYzsa','lMf1DgG','BgfUz3u','sLDuiokaLa','ihjLBge','Dg9Y','Aw5Nie0','ihDPDgG','B2rLzca','BIbtzw4','DMfYAwe','q1Dflte','Aw5WDxq','zxiTy28','B25JDxi','vxnLihq','mMTmu2fxDW','Bgf0zxm','Aw4Gq08','uMfUzg8','igjLigu','BMCGDxm','qNvPBgq','ChbYB3y','iev4zwm','mZm2','CMvKzwy','ywDLCW','B24UChi','DcbHCYa','rgLZywi','BgDVCMK','uKvesvi','zYdIGjqGqW','ieXHBMC','B3jJzsa','igLUChu','tg9Hzca','wufntca','DgLVBIa','ywXNB3i','u3bYAw4','zwqGzM8','B25NB0q','zw50Awm','D2vIC2K','vMvSB2m','vgH5Bwu','mtvfz1zewwi','zxjZlMu','ihbYzwq','zxmGyw4','zsbLEgu','q1jfrc0','BIbVCIa','rxHLy3u','BIbWB28','ndeZmtq2neXOu0nJza','mdaZ','DgGOywW','ig9Yihm','C2fSBg8','zcbszwq','BMfSigu','u1jgieq','BNn0zwe','BwvUDca','DxrPB24','v2L0Ag8','kezPBhq','Axr5lxm','AgvUlwe','ywXSB3C','ExmU','AxzLihi','sLDuihm','DcbLBMe','C2vZige','BNrPy2e','BMCGyw4','vxnPBMC','Aw5Zigu','BgWGC3q','zcKUieS','BNqSiee','zxHWCMu','yxjZzxi','ig5LDYa','DMfSDwu','Dcb2ywW','ierHDge','sgfYzgm','reiGCMe','ihjLzge','CM9SBgu','ywzLq28','BYbLBMy','DgHLiee','AxrLCMK','zwn0Aw8','ihzHCMK','zxjUywW','yxv0Agu','CNKGyxq','ienVzgu','DMeUDxq','BgWGB3i','qvbjigu','zwn0Aw4','zu1HCMS','l215yxa','CMqGq08','zwf0Dxi','Ag91Dca','zsKGB3i','yw5Kifi','zgvJBci','vxnLifm','ugfYC2K','B2jHBgW','DMLYB24','AxrOB3u','zsK7','iokaLcbnBW','DgHVDxq','igfUBM8','DgL2zsa','CdOVl2e','kgzPBMq','ywXPzge','CMLNAw4','y3rVCIG','rY0Wmdq','zgf0ywi','DxqGyxm','AgLNAa','CIbjBNa','CMLLCYa','zNKGywW','BwfPBNm','Axr5ihq','BM1LBNq','Bcb3Axq','ignVBM4','DhrLCM4','AxrbBgW','Aw9UlG','BMCGCMe','luf0B20','Eg1Sl2y','rgf0ywi','zxjPysa','y2fS','sLDulta','ksb3Axq','rY0Wmdu','zwn0CYW','DhjPBMC','ltaWmG','nZC4oduZnLHSDgLrtG','CYbPBIa','ic5HBgW','u1bssu4','igvUywi','zgvZy3i','B25PEMu','q1Dfltm','zgL0Aw8','ndu0nJyWohrtzhPMBq','BgvKihm','C3vWCgW','ltaWmq','iokaLcbQyq','AwmGq2G','y3v0Aw8','DYbXDwu','q1DfltC','C2v2zxi','zgLZywi','AwfSAxO','iokaLcbtCa','AwDPBNm','q1Dflti','vMf1Bhq','ig9YAwC','yMuGDxm','qwXSB3C','B2nPDhK','q1Dflty','u3rYAw4','rgf0ysa','DgL0Bgu','u1nussa','zMvdB24','A3mU','uKXZihC','y3vYzvi','Ag0SigS','qNLoyw0','mJmYmtu4nLn1Be50uG','CMf3ihe','lcb0CNu','yMXLCYa','tMv2zxi','re1jtIi','t25SEsa','AwDUAw4','Dg9YEs4','ihrOzsa','CY1tAxq','AwD1CMe','zsbJB2q','yxrLihm','C2vJCMu','BsbPCYa','uLmGy28','ihbLCM0','CM1ZlG','DhrHy2S','ysbTB2q','u2vUC2K','DY1KB2m','B3iGA2u','ywLUC3q','zsbKyxq'];_0x226d=function(){return _0x18f5c2;};return _0x226d();}_0x18f479['id']=_0x389db7(0x457,0x433)+_0xac8377(0x5c4,0x513)+_0x389db7(0x374,0x465),_0x18f479[_0xac8377(0x5cd,0x520)]=_0xac8377(0x4a9,0x5a9)+_0xac8377(0x5fb,0x5b7),_0x18f479[_0xac8377(0x442,0x43c)+_0xac8377(0x54f,0x4f7)]=_0xac8377(0x394,0x488)+_0xac8377(0x501,0x423),_0x18f479[_0x389db7(0x3f9,0x4c3)]=_0xac8377(0x3e2,0x44b)+_0x389db7(0x427,0x401)+_0xac8377(0x538,0x577)+'f\x20Exp'+'ressi'+'on\x20fr'+_0xac8377(0x454,0x4f6)+_0xac8377(0x435,0x475)+'put',_0x18f479['descr'+_0x389db7(0x4d5,0x523)+'n']=_0xac8377(0x57f,0x560)+_0xac8377(0x4e4,0x504)+_0x389db7(0x455,0x4a9)+_0x389db7(0x571,0x4d1)+_0xac8377(0x6b4,0x5bb)+_0x389db7(0x369,0x2ad)+'leaf\x20'+_0x389db7(0x38f,0x3b5)+_0xac8377(0x65e,0x572)+_0x389db7(0x4b7,0x4f0)+_0xac8377(0x462,0x455)+_0x389db7(0x363,0x42e)+_0xac8377(0x5ae,0x4cf)+_0x389db7(0x4f4,0x46f)+'tion\x20'+_0xac8377(0x40f,0x3fe)+_0xac8377(0x3df,0x4a1),_0x18f479['langu'+_0xac8377(0x58c,0x5b9)]=[_0xac8377(0x3e2,0x4aa)],_0x18f479['patte'+'rn']=/templateEngine\.process\s*\([^,]*(?:request|param|input|body)/g,_0x18f479[_0x389db7(0x4c1,0x3e4)]='Never'+_0xac8377(0x4db,0x53a)+_0xac8377(0x549,0x4a6)+_0x389db7(0x571,0x4d1)+_0xac8377(0x56d,0x5bb)+_0xac8377(0x41a,0x472)+_0xac8377(0x4b3,0x45f)+_0xac8377(0x3e9,0x428)+'s\x20to\x20'+_0xac8377(0x38e,0x3ba)+'leaf.'+'\x20Use\x20'+_0x389db7(0x4c3,0x523)+_0xac8377(0x567,0x4a9)+'\x20temp'+_0x389db7(0x55e,0x5dd)+'\x20with'+'\x20mode'+_0xac8377(0x4e7,0x530)+_0xac8377(0x571,0x57b)+_0x389db7(0x43e,0x50a);const _0x3aa83f={};_0x3aa83f['id']=_0xac8377(0x46b,0x4a8)+_0xac8377(0x602,0x55e)+_0x389db7(0x3e5,0x30f),_0x3aa83f[_0xac8377(0x46a,0x520)]='CWE-9'+'43',_0x3aa83f['sever'+'ity']=_0xac8377(0x44c,0x488)+'cal',_0x3aa83f['title']='NoSQL'+_0xac8377(0x4de,0x521)+'ction'+_0xac8377(0x390,0x406)+'ngoDB'+_0x389db7(0x45e,0x39a)+_0xac8377(0x47d,0x4d9)+_0x389db7(0x49d,0x449)+_0xac8377(0x482,0x413)+'ut',_0x3aa83f[_0xac8377(0x4ad,0x42f)+_0x389db7(0x4d5,0x58d)+'n']=_0x389db7(0x563,0x57c)+_0x389db7(0x553,0x505)+_0xac8377(0x43a,0x3b6)+_0xac8377(0x499,0x507)+_0x389db7(0x3c3,0x3b2)+_0x389db7(0x487,0x450)+_0xac8377(0x4b2,0x477)+_0xac8377(0x4cc,0x5aa)+_0x389db7(0x3dd,0x48d)+_0x389db7(0x50b,0x5a7)+_0x389db7(0x43a,0x4ef)+_0x389db7(0x4f4,0x5d7)+'tion\x20'+_0xac8377(0x414,0x502)+_0xac8377(0x34f,0x44d),_0x3aa83f[_0x389db7(0x54f,0x5ac)+_0xac8377(0x68d,0x5b9)]=['java'],_0x3aa83f[_0xac8377(0x43f,0x4c6)+'rn']=/(?:BasicDBObject|Document)\.parse\s*\(\s*(?:request|req|input|param|body)/g,_0x3aa83f['fix']=_0x389db7(0x55c,0x59a)+_0xac8377(0x46c,0x495)+'query'+_0xac8377(0x3ea,0x4ae)+_0x389db7(0x43d,0x51a)+_0x389db7(0x37f,0x28e)+_0x389db7(0x36b,0x43b)+'q,\x20Cr'+_0xac8377(0x3c7,0x3ed)+'a.whe'+_0x389db7(0x52d,0x5aa)+_0xac8377(0x3a4,0x3cc)+_0xac8377(0x64a,0x565)+'parsi'+_0xac8377(0x518,0x41e)+_0xac8377(0x4cf,0x43a)+'ry\x20st'+_0x389db7(0x44e,0x4a7)+'.';const _0x41fa2c={};_0x41fa2c['id']='JAVA-'+'NOSQL'+_0xac8377(0x38e,0x429),_0x41fa2c[_0xac8377(0x5a0,0x520)]=_0xac8377(0x604,0x53c)+'43',_0x41fa2c[_0xac8377(0x41e,0x43c)+_0x389db7(0x4a6,0x481)]='criti'+_0xac8377(0x396,0x423),_0x41fa2c[_0x389db7(0x3f9,0x4c4)]=_0x389db7(0x4d2,0x576)+_0xac8377(0x507,0x521)+_0xac8377(0x654,0x56e)+_0xac8377(0x435,0x43f)+_0xac8377(0x4b4,0x552)+_0x389db7(0x3f8,0x313)+_0xac8377(0x60f,0x547)+_0x389db7(0x396,0x453)+_0xac8377(0x3fd,0x43a)+'ry',_0x41fa2c[_0x389db7(0x3de,0x345)+'iptio'+'n']=_0xac8377(0x37f,0x448)+_0x389db7(0x53c,0x47c)+_0x389db7(0x510,0x528)+'ation'+'\x20in\x20@'+_0xac8377(0x4cf,0x58c)+_0x389db7(0x3b7,0x3cd)+_0x389db7(0x4c4,0x3f2)+_0xac8377(0x43f,0x4c0)+_0x389db7(0x505,0x604)+_0x389db7(0x549,0x5af)+_0xac8377(0x542,0x4b8)+_0xac8377(0x598,0x564)+_0xac8377(0x3b5,0x41d),_0x41fa2c[_0xac8377(0x589,0x5a0)+'ages']=['java'],_0x41fa2c[_0x389db7(0x475,0x56f)+'rn']=/@Query\s*\(\s*["']\{[^}]*\?\d+/g,_0x41fa2c[_0xac8377(0x5b2,0x512)]=_0xac8377(0x353,0x400)+_0xac8377(0x486,0x567)+_0xac8377(0x2e0,0x3e5)+_0x389db7(0x4d3,0x4a6)+'ery\x20d'+_0x389db7(0x4a3,0x54d)+'tion\x20'+_0x389db7(0x3ba,0x469)+_0x389db7(0x400,0x404)+_0x389db7(0x3ac,0x3fa)+'\x20Crit'+_0xac8377(0x446,0x422)+_0xac8377(0x566,0x4d0)+_0x389db7(0x37b,0x27e)+_0x389db7(0x514,0x5f0)+_0xac8377(0x54c,0x453)+_0xac8377(0x52a,0x503)+'strin'+'gs.';const _0x558538={};_0x558538['id']=_0x389db7(0x457,0x3c5)+_0xac8377(0x3fe,0x424)+'01',_0x558538[_0xac8377(0x52e,0x520)]=_0x389db7(0x3e0,0x387)+'45',_0x558538['sever'+_0xac8377(0x5ee,0x4f7)]=_0xac8377(0x4c6,0x488)+_0x389db7(0x3d2,0x3ff),_0x558538[_0x389db7(0x3f9,0x30e)]='JWT\x20—'+_0xac8377(0x5b3,0x506)+_0x389db7(0x56c,0x538)+'thm\x20V'+_0x389db7(0x3bb,0x33c)+_0xac8377(0x489,0x4bd),_0x558538[_0xac8377(0x337,0x42f)+_0xac8377(0x464,0x526)+'n']=_0xac8377(0x456,0x401)+_0xac8377(0x4c8,0x57d)+_0xac8377(0x450,0x4a2)+_0xac8377(0x45a,0x3fc)+_0x389db7(0x482,0x4bf)+_0xac8377(0x4f3,0x500)+_0xac8377(0x48b,0x45b)+_0xac8377(0x35f,0x3b3)+'ithm\x20'+_0x389db7(0x382,0x35e)+_0xac8377(0x3a7,0x47a)+'ne\x27\x20a'+_0x389db7(0x56c,0x590)+'thm\x20a'+_0xac8377(0x45c,0x465)+'s.',_0x558538[_0xac8377(0x4f7,0x5a0)+_0xac8377(0x637,0x5b9)]=['java'],_0x558538[_0xac8377(0x522,0x4c6)+'rn']=/Jwts\.parser(?:Builder)?\s*\(\s*\)\s*\.setSigningKey\s*\([^)]+\)\s*\.parse(?:Claims)?(?:Jws|Jwt)?\s*\(/g,_0x558538[_0xac8377(0x604,0x512)]='Use\x20p'+_0xac8377(0x4c6,0x3e1)+_0x389db7(0x563,0x667)+'er().'+'requi'+_0x389db7(0x51c,0x56a)+_0x389db7(0x52e,0x46e)+_0xac8377(0x37d,0x3c6)+_0x389db7(0x4fb,0x4d4)+_0x389db7(0x3ff,0x429)+_0x389db7(0x44d,0x482)+_0xac8377(0x3d4,0x3eb)+_0xac8377(0x50e,0x5c1)+_0xac8377(0x530,0x555)+_0xac8377(0x515,0x47c)+'\x20algo'+'rithm'+'.';const _0x1dead4={};_0x1dead4['id']=_0xac8377(0x3c8,0x4a8)+_0xac8377(0x4f1,0x424)+'02',_0x1dead4[_0xac8377(0x5b0,0x520)]=_0x389db7(0x3ea,0x451)+'98',_0x1dead4['sever'+_0x389db7(0x4a6,0x4b9)]=_0x389db7(0x437,0x519)+_0x389db7(0x3d2,0x361),_0x1dead4[_0xac8377(0x541,0x44a)]=_0x389db7(0x550,0x62f)+'\x20Hard'+_0xac8377(0x497,0x4dc)+_0x389db7(0x51b,0x5c1)+'ing\x20K'+'ey',_0x1dead4[_0x389db7(0x3de,0x2f3)+_0xac8377(0x5d3,0x526)+'n']=_0xac8377(0x350,0x3e6)+'oded\x20'+_0x389db7(0x385,0x3d3)+_0x389db7(0x408,0x46c)+_0xac8377(0x528,0x46e)+_0x389db7(0x3da,0x40b)+'sourc'+_0x389db7(0x40d,0x3c8)+_0xac8377(0x60e,0x542)+_0xac8377(0x568,0x5b2)+'xtrac'+_0x389db7(0x479,0x459)+_0xac8377(0x556,0x568)+_0x389db7(0x540,0x464)+'ed\x20cl'+'asses'+'.',_0x1dead4[_0xac8377(0x615,0x5a0)+_0xac8377(0x628,0x5b9)]=[_0xac8377(0x4e6,0x4aa)],_0x1dead4[_0x389db7(0x475,0x417)+'rn']=/\.signWith\s*\(\s*(?:SignatureAlgorithm\.\w+\s*,\s*)?["'][^"']{8,}["']/g,_0x1dead4[_0xac8377(0x5b0,0x512)]=_0xac8377(0x616,0x5c3)+'signi'+_0xac8377(0x570,0x484)+_0x389db7(0x453,0x470)+_0xac8377(0x58c,0x593)+_0xac8377(0x4fc,0x403)+_0xac8377(0x4b5,0x3cd)+_0xac8377(0x51d,0x5a8)+_0x389db7(0x404,0x420)+_0x389db7(0x52f,0x4aa)+_0xac8377(0x461,0x460)+'ts\x20ma'+'nager'+'.';const _0x50ba33={};_0x50ba33['id']=_0x389db7(0x457,0x4fb)+_0x389db7(0x56d,0x66e)+_0x389db7(0x3e5,0x48d),_0x50ba33['cwe']='CWE-6'+'01',_0x50ba33[_0x389db7(0x3eb,0x4a3)+_0x389db7(0x4a6,0x576)]=_0xac8377(0x46f,0x4b7)+'m',_0x50ba33['title']=_0xac8377(0x4fe,0x4f5)+_0x389db7(0x4fc,0x54e)+_0xac8377(0x43e,0x480)+'\x20User'+_0xac8377(0x5ed,0x553)+_0x389db7(0x398,0x46e)+_0x389db7(0x378,0x2b4)+_0x389db7(0x473,0x4ad),_0x50ba33['descr'+_0xac8377(0x56c,0x526)+'n']=_0x389db7(0x4fc,0x561)+_0x389db7(0x3a6,0x2fd)+'g\x20to\x20'+_0x389db7(0x537,0x5a9)+_0xac8377(0x481,0x435)+_0xac8377(0x4bf,0x52b)+_0xac8377(0x4da,0x44e)+_0x389db7(0x3b3,0x441)+_0xac8377(0x391,0x3e4)+_0x389db7(0x436,0x3a0)+'on\x20en'+'ables'+_0x389db7(0x53e,0x55d)+_0x389db7(0x41b,0x4cd),_0x50ba33[_0x389db7(0x54f,0x4b3)+_0x389db7(0x568,0x628)]=[_0xac8377(0x493,0x4aa)],_0x50ba33['patte'+'rn']=/(?:response\.sendRedirect|ModelAndView\s*\(\s*["']redirect:)\s*\(?\s*(?:request\.getParameter|req\.getParameter|params\.get)/g,_0x50ba33[_0xac8377(0x4af,0x512)]='Valid'+_0x389db7(0x4c6,0x53d)+'edire'+'ct\x20UR'+'Ls\x20ag'+_0xac8377(0x535,0x46a)+_0x389db7(0x4fd,0x496)+'llowl'+_0xac8377(0x5f8,0x518)+_0xac8377(0x3ff,0x458)+_0xac8377(0x355,0x3d3)+_0xac8377(0x577,0x5a2)+_0xac8377(0x34e,0x409)+_0x389db7(0x4f0,0x524)+'\x20or\x20a'+_0xac8377(0x5b5,0x5b5)+_0xac8377(0x524,0x554)+_0xac8377(0x3f6,0x416)+'.';const _0x6995a8={};_0x6995a8['id']=_0x389db7(0x457,0x50f)+_0xac8377(0x581,0x4e0)+'1',_0x6995a8['cwe']='CWE-9'+'17',_0x6995a8[_0x389db7(0x3eb,0x48f)+_0x389db7(0x4a6,0x4a2)]=_0x389db7(0x437,0x49a)+_0x389db7(0x3d2,0x3c8),_0x6995a8['title']='Expre'+_0xac8377(0x585,0x572)+_0x389db7(0x56f,0x645)+_0xac8377(0x4f0,0x4b0)+'Injec'+'tion\x20'+_0x389db7(0x4d8,0x41f)+'r\x20Inp'+'ut\x20in'+'\x20EL';function _0xac8377(_0x3124ac,_0x12f8f0){return _0x4d77(_0x12f8f0-0x2a7,_0x3124ac);}_0x6995a8[_0xac8377(0x4a7,0x42f)+'iptio'+'n']='Evalu'+_0x389db7(0x4af,0x3dc)+_0xac8377(0x3eb,0x4a6)+_0xac8377(0x65a,0x5c2)+_0x389db7(0x56a,0x60f)+'Java\x20'+_0xac8377(0x483,0x528)+'press'+_0xac8377(0x5a4,0x584)+'enabl'+'es\x20Re'+'mote\x20'+_0xac8377(0x52b,0x4fa)+_0xac8377(0x3e3,0x3c2)+_0x389db7(0x4ce,0x512),_0x6995a8[_0x389db7(0x54f,0x4a3)+_0xac8377(0x4b6,0x5b9)]=[_0x389db7(0x459,0x3ff)],_0x6995a8[_0x389db7(0x475,0x4c8)+'rn']=/(?:ExpressionFactory|ValueExpression|ELProcessor)\s*.*?(?:createValueExpression|eval)\s*\([^)]*(?:request|param|input)/g,_0x6995a8[_0x389db7(0x4c1,0x47e)]=_0x389db7(0x405,0x323)+_0xac8377(0x524,0x53a)+_0xac8377(0x3f1,0x4a6)+_0xac8377(0x50e,0x5c2)+_0x389db7(0x446,0x3c3)+_0x389db7(0x524,0x42e)+'aluat'+_0x389db7(0x4d4,0x505)+_0x389db7(0x47c,0x44e)+_0x389db7(0x485,0x577)+'teriz'+'ed\x20ap'+_0x389db7(0x538,0x5c1)+_0x389db7(0x4e1,0x525)+_0xac8377(0x3d7,0x3cc)+'d.';const _0x3a30fe={};_0x3a30fe['id']=_0x389db7(0x457,0x44e)+_0x389db7(0x4fa,0x52a)+_0xac8377(0x3d6,0x494),_0x3a30fe[_0xac8377(0x5e0,0x520)]=_0xac8377(0x4bd,0x431)+'38',_0x3a30fe[_0xac8377(0x354,0x43c)+_0xac8377(0x4f9,0x4f7)]=_0x389db7(0x466,0x3ee)+'m',_0x3a30fe[_0xac8377(0x3ca,0x44a)]=_0xac8377(0x496,0x592)+_0xac8377(0x4af,0x594)+_0xac8377(0x57e,0x58b)+_0xac8377(0x3ac,0x437)+_0x389db7(0x3a3,0x46a)+'il.Ra'+_0xac8377(0x589,0x4ea)+'for\x20S'+'ecuri'+'ty',_0x3a30fe[_0xac8377(0x451,0x42f)+_0x389db7(0x4d5,0x554)+'n']=_0xac8377(0x495,0x4cb)+'util.'+_0xac8377(0x562,0x5b1)+_0x389db7(0x410,0x4d6)+_0x389db7(0x4bf,0x495)+_0x389db7(0x497,0x3b4)+'e\x20and'+'\x20must'+_0xac8377(0x5d1,0x563)+_0x389db7(0x3f3,0x496)+_0x389db7(0x364,0x34e)+'r\x20sec'+'urity'+_0x389db7(0x4e8,0x44d)+'itive'+_0x389db7(0x508,0x4ce)+_0x389db7(0x498,0x528)+_0x389db7(0x4e5,0x5e8)+_0xac8377(0x420,0x4c7)+_0x389db7(0x418,0x32d)+_0x389db7(0x383,0x3c5),_0x3a30fe[_0x389db7(0x54f,0x521)+_0x389db7(0x568,0x602)]=['java'],_0x3a30fe[_0x389db7(0x475,0x3de)+'rn']=/new\s+Random\s*\(\s*\)/g,_0x3a30fe[_0xac8377(0x4c0,0x512)]=_0xac8377(0x4b8,0x483)+'ava.s'+'ecuri'+'ty.Se'+_0x389db7(0x3fe,0x359)+_0x389db7(0x53a,0x58f)+_0x389db7(0x465,0x533)+_0xac8377(0x4a3,0x489)+_0x389db7(0x380,0x2e7)+'ensit'+_0xac8377(0x4a4,0x3d5)+_0x389db7(0x53a,0x4c7)+'\x20valu'+_0xac8377(0x515,0x48f);const _0x32bed9={};_0x32bed9['id']='JAVA-'+_0xac8377(0x570,0x53d)+_0xac8377(0x48a,0x494),_0x32bed9[_0xac8377(0x5b8,0x520)]='CWE-3'+'62',_0x32bed9[_0x389db7(0x3eb,0x4b4)+'ity']=_0x389db7(0x466,0x41c)+'m',_0x32bed9[_0xac8377(0x3be,0x44a)]=_0x389db7(0x45b,0x46b)+_0x389db7(0x49b,0x3aa)+_0x389db7(0x574,0x4da)+_0x389db7(0x54c,0x4d5)+_0xac8377(0x4ef,0x41f)+_0x389db7(0x3e7,0x3a5)+_0xac8377(0x55d,0x49d)+'hen-A'+'ct',_0x32bed9[_0x389db7(0x3de,0x33f)+_0xac8377(0x4c0,0x526)+'n']=_0xac8377(0x527,0x4c3)+_0x389db7(0x389,0x463)+_0x389db7(0x422,0x50e)+'ting\x20'+'share'+'d\x20sta'+_0x389db7(0x4ed,0x4eb)+_0xac8377(0x461,0x407)+_0x389db7(0x481,0x3a4)+_0x389db7(0x519,0x5a0)+_0xac8377(0x4b5,0x4d1)+_0x389db7(0x425,0x427)+_0xac8377(0x451,0x455)+_0xac8377(0x5df,0x57a)+_0xac8377(0x5de,0x598)+'e\x20con'+_0xac8377(0x46b,0x432)+_0xac8377(0x508,0x50d),_0x32bed9[_0x389db7(0x54f,0x578)+_0x389db7(0x568,0x5e9)]=[_0xac8377(0x405,0x4aa)],_0x32bed9[_0xac8377(0x474,0x4c6)+'rn']=/if\s*\(\s*\w+\.(?:containsKey|contains|isEmpty|size)\s*\([^)]*\)\s*\)\s*\{[^}]*\w+\.(?:put|add|remove)\s*\(/g,_0x32bed9[_0xac8377(0x535,0x512)]=_0x389db7(0x4be,0x4b8)+_0x389db7(0x55b,0x663)+'rentH'+_0x389db7(0x4bb,0x4a0)+_0x389db7(0x4b4,0x533)+'puteI'+_0x389db7(0x4dc,0x450)+_0x389db7(0x38e,0x3c9)+_0xac8377(0x3a7,0x47d)+_0x389db7(0x51e,0x566)+'ence,'+_0xac8377(0x33a,0x3c7)+'ynchr'+_0xac8377(0x374,0x430)+'d\x20blo'+'cks\x20f'+_0x389db7(0x4d9,0x47f)+_0xac8377(0x490,0x4a0)+_0xac8377(0x2d5,0x3d2)+'ct\x20pa'+_0xac8377(0x3ea,0x41b)+'s.';const _0x45877f={};_0x45877f['id']='JAVA-'+_0xac8377(0x3c1,0x470)+'01',_0x45877f[_0xac8377(0x487,0x520)]=_0xac8377(0x5f7,0x516)+'32',_0x45877f[_0xac8377(0x459,0x43c)+_0xac8377(0x596,0x4f7)]=_0x389db7(0x3c1,0x4ca),_0x45877f['title']=_0x389db7(0x416,0x373)+_0xac8377(0x387,0x409)+_0x389db7(0x3f8,0x2fb)+'in\x20Lo'+'gs',_0x45877f[_0xac8377(0x472,0x42f)+_0x389db7(0x4d5,0x50d)+'n']='Loggi'+_0xac8377(0x4ff,0x4a7)+_0x389db7(0x4ae,0x57e)+_0xac8377(0x577,0x548)+_0xac8377(0x594,0x587)+_0xac8377(0x48e,0x4db)+'crede'+_0xac8377(0x3f5,0x49a)+'s\x20exp'+_0xac8377(0x4de,0x4e4)+_0x389db7(0x448,0x36d)+_0xac8377(0x516,0x55f)+_0xac8377(0x5aa,0x501)+_0x389db7(0x36d,0x282)+'d\x20mon'+'itori'+_0xac8377(0x60e,0x52f)+'stems'+'.',_0x45877f[_0x389db7(0x54f,0x5da)+'ages']=[_0x389db7(0x459,0x520)],_0x45877f[_0xac8377(0x4e3,0x4c6)+'rn']=/(?:log|logger|LOG|LOGGER)\.(?:info|debug|warn|error|trace)\s*\([^)]*(?:password|secret|token|apiKey|api_key|credential|ssn|credit.?card)/gi,_0x45877f[_0xac8377(0x54d,0x512)]=_0x389db7(0x405,0x36e)+_0xac8377(0x442,0x47b)+_0xac8377(0x406,0x4ab)+_0xac8377(0x337,0x409)+_0xac8377(0x2e2,0x3e3)+'s.\x20Us'+_0xac8377(0x4bf,0x4b1)+_0xac8377(0x4c6,0x4e2)+'ed\x20lo'+_0xac8377(0x52a,0x48d)+_0xac8377(0x4b6,0x5a5)+_0xac8377(0x3e4,0x3e8)+_0x389db7(0x523,0x4e5)+'field'+'s.';const _0x182b8e={};_0x182b8e['id']=_0x389db7(0x457,0x463)+_0x389db7(0x535,0x4ef)+'02',_0x182b8e[_0x389db7(0x4cf,0x589)]=_0xac8377(0x527,0x447)+'11',_0x182b8e[_0xac8377(0x3ec,0x43c)+'ity']=_0x389db7(0x437,0x51a)+'cal',_0x182b8e[_0x389db7(0x3f9,0x464)]=_0x389db7(0x4f8,0x5b5)+_0x389db7(0x528,0x5bb)+_0xac8377(0x438,0x3e1)+_0xac8377(0x54f,0x597)+_0x389db7(0x42d,0x4bd)+'isabl'+'ing\x20E'+'xtern'+_0x389db7(0x4ba,0x462)+_0xac8377(0x3e3,0x481)+'s',_0x182b8e[_0xac8377(0x3c6,0x42f)+_0x389db7(0x4d5,0x575)+'n']='SAXPa'+_0xac8377(0x671,0x585)+'actor'+'y\x20wit'+_0xac8377(0x41f,0x3fc)+_0xac8377(0x44b,0x43d)+_0x389db7(0x4e4,0x5e6)+_0x389db7(0x423,0x4b2)+_0xac8377(0x34d,0x3ca)+'ntiti'+_0x389db7(0x4b9,0x502)+'ables'+_0x389db7(0x492,0x3a5)+_0x389db7(0x4b1,0x487)+_0x389db7(0x3fc,0x306),_0x182b8e[_0xac8377(0x512,0x5a0)+_0x389db7(0x568,0x5a5)]=[_0xac8377(0x3d3,0x4aa)],_0x182b8e['patte'+'rn']=/SAXParserFactory\.newInstance\s*\(\s*\)(?:(?!setFeature).)*\.newSAXParser/gs;function _0x389db7(_0xac33cb,_0x4342e7){const _0x1311fe={_0x53d644:0x256};return _0x4d77(_0xac33cb-_0x1311fe._0x53d644,_0x4342e7);}_0x182b8e[_0xac8377(0x5e3,0x512)]='Disab'+_0xac8377(0x4fe,0x4bc)+'terna'+_0x389db7(0x4db,0x586)+_0xac8377(0x567,0x490)+_0x389db7(0x4c9,0x459)+_0x389db7(0x409,0x4f0)+'setFe'+_0xac8377(0x4a2,0x4ef)+_0x389db7(0x4f9,0x4d0)+_0xac8377(0x4fd,0x40a)+'pache'+_0x389db7(0x4ef,0x594)+_0xac8377(0x3bf,0x420)+_0xac8377(0x39b,0x3fb)+_0x389db7(0x494,0x448)+_0x389db7(0x377,0x3d5)+_0x389db7(0x417,0x39b)+_0x389db7(0x45c,0x3eb)+_0xac8377(0x33f,0x3ff)+_0xac8377(0x3f9,0x454)+_0xac8377(0x31d,0x405);const _0x2f5be4={};_0x2f5be4['id']=_0x389db7(0x457,0x4ee)+'DESER'+_0xac8377(0x4df,0x4a3),_0x2f5be4[_0xac8377(0x5db,0x520)]=_0x389db7(0x4c5,0x43f)+'02',_0x2f5be4[_0xac8377(0x3c0,0x43c)+_0x389db7(0x4a6,0x3af)]=_0xac8377(0x4c3,0x488)+_0xac8377(0x34b,0x423),_0x2f5be4[_0x389db7(0x3f9,0x35b)]='Unsaf'+_0x389db7(0x46e,0x559)+'erial'+_0xac8377(0x5f6,0x557)+_0x389db7(0x44b,0x4b6)+'Snake'+'YAML\x20'+_0x389db7(0x37e,0x2d2)+_0xac8377(0x539,0x57c)+_0x389db7(0x3fb,0x3c5)+_0xac8377(0x4ce,0x4da)+_0xac8377(0x562,0x5a3),_0x2f5be4[_0xac8377(0x50a,0x42f)+_0x389db7(0x4d5,0x5d4)+'n']='Snake'+_0xac8377(0x610,0x5c4)+_0xac8377(0x52b,0x46d)+_0x389db7(0x3d4,0x452)+_0x389db7(0x3ab,0x2ac)+_0xac8377(0x3eb,0x4d7)+'onstr'+_0xac8377(0x5ae,0x54f)+_0xac8377(0x3f9,0x4f8)+_0x389db7(0x527,0x587)+_0x389db7(0x3ed,0x4b3)+'e\x20arb'+'itrar'+'y\x20Jav'+_0x389db7(0x4cc,0x43a)+_0xac8377(0x414,0x427)+'\x20enab'+'ling\x20'+_0x389db7(0x50a,0x483),_0x2f5be4[_0x389db7(0x54f,0x59e)+'ages']=[_0xac8377(0x454,0x4aa)],_0x2f5be4[_0x389db7(0x475,0x43d)+'rn']=/new\s+Yaml\s*\(\s*\)\s*\.load\s*\(/g,_0x2f5be4[_0xac8377(0x475,0x512)]='Use\x20S'+_0xac8377(0x4ef,0x3ea)+_0x389db7(0x4ad,0x58e)+_0x389db7(0x47b,0x4d8)+_0xac8377(0x464,0x3e2)+_0xac8377(0x4fb,0x4d4)+'new\x20S'+'afeCo'+_0xac8377(0x53c,0x4fe)+_0xac8377(0x4eb,0x40e)+_0x389db7(0x518,0x458)+'ad(in'+_0xac8377(0x586,0x583);const _0x428ed1={};function _0x4d77(_0x4061c5,_0x5ca186){_0x4061c5=_0x4061c5-(0x14a+-0x2585+0x1*0x2547);const _0x51b9e7=_0x226d();let _0x257936=_0x51b9e7[_0x4061c5];if(_0x4d77['UtKyjj']===undefined){var _0x15a836=function(_0x400367){const _0x49a75b='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0x357c7e='',_0x27883b='';for(let _0x4af91a=0x756+0x1*0x1e05+-0x255b,_0xfe493e,_0x111919,_0x2673e9=-0x25*0x31+0x2*0xe6b+-0x1*0x15c1;_0x111919=_0x400367['charAt'](_0x2673e9++);~_0x111919&&(_0xfe493e=_0x4af91a%(0x5*0x56a+-0x21aa*0x1+0x69c)?_0xfe493e*(0xf76+0x763*0x2+-0x1dfc)+_0x111919:_0x111919,_0x4af91a++%(0xa0f*0x3+0xe02+-0x2c2b*0x1))?_0x357c7e+=String['fromCharCode'](-0x832+0x1a9*-0x4+0xfd5&_0xfe493e>>(-(0x14c6+-0x150d+-0x49*-0x1)*_0x4af91a&0x10cd+-0x2*-0xe1e+-0x2d03)):0x2b*-0x13+-0x136+0x467){_0x111919=_0x49a75b['indexOf'](_0x111919);}for(let _0x16ef61=0x3*-0x60+0x1f8+-0x24*0x6,_0x282f2f=_0x357c7e['length'];_0x16ef61<_0x282f2f;_0x16ef61++){_0x27883b+='%'+('00'+_0x357c7e['charCodeAt'](_0x16ef61)['toString'](-0x2096*-0x1+0x55a+-0xca0*0x3))['slice'](-(-0x78+-0xbd*0x29+0x1ebf));}return decodeURIComponent(_0x27883b);};_0x4d77['PGeJcf']=_0x15a836,_0x4d77['seYsYI']={},_0x4d77['UtKyjj']=!![];}const _0x48a689=_0x51b9e7[0x1*-0x1aff+0x189b+0x2*0x132],_0x22f379=_0x4061c5+_0x48a689,_0x4f8ec7=_0x4d77['seYsYI'][_0x22f379];return!_0x4f8ec7?(_0x257936=_0x4d77['PGeJcf'](_0x257936),_0x4d77['seYsYI'][_0x22f379]=_0x257936):_0x257936=_0x4f8ec7,_0x257936;}_0x428ed1['id']=_0xac8377(0x3a2,0x4a8)+_0x389db7(0x36f,0x395)+_0x389db7(0x443,0x4c1),_0x428ed1[_0xac8377(0x464,0x520)]=_0x389db7(0x3ea,0x3e9)+'98',_0x428ed1[_0x389db7(0x3eb,0x410)+'ity']=_0xac8377(0x4c6,0x488)+'cal',_0x428ed1['title']=_0x389db7(0x395,0x383)+_0x389db7(0x555,0x52f)+_0x389db7(0x3d0,0x322)+_0x389db7(0x522,0x58a)+'reden'+_0x389db7(0x525,0x5a5),_0x428ed1[_0xac8377(0x36f,0x42f)+_0x389db7(0x4d5,0x56d)+'n']='Hardc'+_0xac8377(0x583,0x5a6)+_0x389db7(0x3bf,0x431)+_0xac8377(0x551,0x49b)+_0xac8377(0x473,0x44e)+'ith\x20c'+'reden'+_0x389db7(0x525,0x4bc)+_0x389db7(0x54d,0x5c7)+_0x389db7(0x4ab,0x430)+_0xac8377(0x554,0x538)+_0x389db7(0x46d,0x4a3)+_0x389db7(0x41e,0x449)+'rom\x20c'+_0x389db7(0x540,0x510)+_0xac8377(0x4ed,0x544)+_0xac8377(0x422,0x496)+'.',_0x428ed1[_0xac8377(0x4f8,0x5a0)+'ages']=['java'],_0x428ed1['patte'+'rn']=/DriverManager\.getConnection\s*\(\s*["']jdbc:\w+:\/\/[^"']*["']\s*,\s*["']\w+["']\s*,\s*["'][^"']+["']/g,_0x428ed1['fix']=_0xac8377(0x46e,0x4c1)+_0x389db7(0x4c0,0x3de)+_0x389db7(0x3c7,0x47c)+_0xac8377(0x3e3,0x3ef)+'ables'+_0x389db7(0x484,0x3b5)+_0xac8377(0x389,0x41a)+_0xac8377(0x2f1,0x3ee)+_0xac8377(0x4bb,0x3c3)+_0x389db7(0x3c8,0x44a)+'h\x20ext'+_0xac8377(0x2f1,0x3f0)+'\x20conf'+_0x389db7(0x40c,0x49f)+_0x389db7(0x574,0x600)+_0x389db7(0x4f2,0x418)+'icati'+_0x389db7(0x569,0x56b)+_0xac8377(0x5cf,0x4ce)+'ies,\x20'+_0x389db7(0x3f1,0x482)+').';export const javaExtendedRules=[_0x31d4ac,_0x1782e3,_0x270b7e,_0x52e200,_0x337b36,_0x18f479,_0x3aa83f,_0x41fa2c,_0x558538,_0x1dead4,_0x50ba33,_0x6995a8,_0x3a30fe,_0x32bed9,_0x45877f,_0x182b8e,_0x2f5be4,_0x428ed1];
|
package/dist/rules/java.js
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
(function(_0x11c899,_0x3ec122){const _0x510725={_0x2f363e:0x197,_0x4aa57b:0x6d,_0x8fa9:0x2e5,_0x57257d:0x227,_0x119187:0x255,_0x245b11:0x223,_0x367040:0x231,_0x36c8b9:0x312,_0x5d5987:0x21b},_0x4f3886={_0x185d07:0x78},_0x255a4f={_0x381cd9:0x80};function _0x40fa27(_0x17ac10,_0x3a2f9c){return _0x1252(_0x17ac10-_0x255a4f._0x381cd9,_0x3a2f9c);}function _0x4cdc74(_0x5dfce4,_0x49eb45){return _0x1252(_0x5dfce4-_0x4f3886._0x185d07,_0x49eb45);}const _0x329a8f=_0x11c899();while(!![]){try{const _0x2cdb70=-parseInt(_0x40fa27(_0x510725._0x2f363e,_0x510725._0x4aa57b))/(0x2555+0x8ed+-0x2e41)+parseInt(_0x4cdc74(_0x510725._0x8fa9,0x3cc))/(-0x3*0x6fc+0x5*-0xd7+0x1929)+-parseInt(_0x40fa27(0x1b1,0x146))/(-0x23*0x89+-0xf0a+0x21c8)+-parseInt(_0x40fa27(0x375,0x2b8))/(-0x21ef+-0xe27*0x1+-0x2*-0x180d)*(-parseInt(_0x40fa27(_0x510725._0x57257d,0x33e))/(-0x1e82+0x4c9+0x19be))+-parseInt(_0x4cdc74(_0x510725._0x119187,_0x510725._0x245b11))/(-0x16b*-0x1a+-0x6*0x346+0x6*-0x2de)+-parseInt(_0x4cdc74(_0x510725._0x367040,0x1fd))/(-0x270a+0xca3*0x1+0x1*0x1a6e)*(-parseInt(_0x4cdc74(_0x510725._0x36c8b9,_0x510725._0x5d5987))/(-0x1746+0x2a3+0x14ab))+parseInt(_0x4cdc74(0x3a1,0x49c))/(0x823*0x4+0x1*0x2279+-0x42fc);if(_0x2cdb70===_0x3ec122)break;else _0x329a8f['push'](_0x329a8f['shift']());}catch(_0x26f25b){_0x329a8f['push'](_0x329a8f['shift']());}}}(_0x3af8,-0x3*-0x26242+0x25c72+-0x7ea*0x97));const _0x16642e={};function _0x3af8(){const _0x442095=['CMfUzg8','DgvYBNm','zxHWBg8','u1fmss0','DgL2zsa','Dg8GAwq','q1DfltG','CYb0CMK','igfYyMK','igzPBgu','Axr5','yxrLifu','AwmGvvi','rvmGkeq','uKXZige','zxmVzgK','C3mGAw4','DxjLifi','B2nLC3m','AxrYyxi','BgLUzYa','DxnLCIa','AgLNAa','DguGyxi','revtigG','q1Dfltm','Bg93CYa','CMfTzxq','z2v0igm','EsbPDca','4Ocuie9IAG','y3jPDgK','C2uGysa','u3bYAw4','zxnZAw8','yxjZAw4','Bg9Nigu','q00GB3i','zwf0Dxi','z2v0sw4','igLUDg8','y3vYzvi','tY0Wmde','BwvUDca','C3rHCNq','Aw5NiIK','BxbSzw0','BwuUzxG','BsbuCNu','q1Dflti','y2LZAw8','ksbPCYa','Aw4Gteq','oIbMywm','q1Dfltu','yw1LDgu','ywqU','zxiGAw4','ignVBw0','Dwf0zsa','EhrLCM4','we1mieu','y29Uy2e','zxnZiee','AwXKifm','yw4GAw4','CM90B2i','C2vZige','Axb0Aw8','mdaX','vxnLiee','AMf2yq','ihbYAxy','CgHLCNq','BMf0Aw8','CM9Jzxm','CIbtsee','CMLUz3m','oIbSB2C','B2nRCYa','AwnHBfa','igvUywi','uKWVshq','DxjLieq','Aw9UlG','BgXVD2u','igvUzha','zwqGBwu','igzVCIa','zwqGCxu','Cgf0Dgu','AwzPzxi','zxnLCMK','AguGzgu','u1bssu4','ChjVDgu','D3mGCMu','Aw9UCYa','zwqGC3q','mta5mtK4mKnss1fHtq','EgvJDxq','BNqGChm','revtig8','Dcb1C2u','BNrYAwu','rg8GBM8','zwrL','s2vLCca','zsbszxe','ihDPDgG','AwnHDgK','u09ol1a','q1qGkIa','zsK7','te9hlta','sKfwqs0','igXVywq','AwXLig8','zxn0lMC','refqihe','B2LUDhm','z2vYEsa','AcbWyxi','igLUieW','Aw46ihS','C3rHBMm','Aw50CYa','qvaGCxu','AMvJDca','twvZC2e','z2vYoIa','q1Dflte','CM1PDee','Eg1Sl2y','zgvJBci','ywXPEMe','ienbCYW','C3nPB24','yML0CMe','z2vYlIa','DxjPDhK','B3n0BMe','AwnHBgK','CMD1Bwu','mJa4mZqXnLDct1nsqG','lM9YzY8','Aw5Nihu','rxHWCMu','BNb1Dca','sw5Zzwm','ywXSEsa','DgGGzgK','ihbHDgG','lIbvC2u','AwXKAw4','C3rZlIa','y3DL','ifDirvi','zxmGyNK','DgL0Awu','ltaWmG','ihnJAgu','ihnOzwW','CNnHBca','C2fSBg8','DY1KB2m','kcjbre0','EsbHBMq','zguGD2G','BcbZzxi','CMvJDca','yxmGB24','ywX1yxq','Aw9UiokaLa','CMLLCY4','zxj5','yxjHBwu','yxj5igy','Aw5Nifu','Acb3Axq','zgLYzwm','zw50Awm','CMjPDhi','zwnVzgu','seeTmJu','B24G4Ocuia','C3rYB24','CMvHBq','icHdvKu','veXtlta','ywWGyMW','ltiWmJe','u1nsrI0','igfSBca','rLjptsa','tuq1ige','CYbHBMq','DcbWCM8','Aw5Qzwm','zgvZy3i','C2vZlG','C2v0u3q','AwWUuMe','AxrLifi','DwvZDca','yxrLigG','vxnLCIa','uefusc0','C2fUAxq','zsbZCgu','zwn1Dgu','zwn1CMK','BMfTAwm','CIbervm','z2DPBMC','u1jglG','q2fUB24','A2v5CYW','BNn0zwe','zwn0sw4','yxrLCYa','BIbPBIa','ltaWmq','igeGs2u','uKforc0','y3rLzca','yw5PDgK','ucbYyw4','iMfYzZe','uY9hq00','Dfn0CMu','vxnLihq','ztOGq2K','Aw5Nige','zsbJCNK','nte3mNH0yuDiuW','yxrPB24','su4Ikq','rhLUyw0','EsbJB2q','Bw9KztO','AMvJDgK','BcbLBNq','DMeUDxq','B2rL','CM5ZlIa','B1bHzgq','C2vYigK','BMqGsw4','rMLSDgu','yw5KCYa','C2uGuhi','sK5essa','DgGGr0m','Aw9Uigm','CIaOsKu','q1nsrIa','igeGC2e','ihzHBgK','AhKG4Ocuia','igv4Cgu','C3nLCY4','ywWGzw4','Ag91Dca','ig9Yihu','BgvZifq','C2vUC2K','C3q6ig4','igfUzca','BNrZigm','BMnHDgu','Evn0B3i','q1jzufq','zcbJBge','q3vZDg8','ifHnteq','kcjODhq','D2L0Aca','sw5WDxq','z2fPBNm','q29TBwe','D3mGt1m','ywnJzxm','zwqGBg8','yMPLy3q','BMrVBsa','zxrjBNm','mtiZmJiZnwDwsMH0BG','A3mU','zwmOksa','DxqUifu','l3DYAxq','vMvYAwy','D3mGAw4','lti1nIi','CI1tAwq','uuWGCxu','DhmGAwq','DgvYige','zMuGzxy','y2HLiem','iev4Chi','Aw4VkIO','DxrPBc4','zxHLy3u','DxqGC2e','Chv0igK','DgLVBIa','BIbmyw4','BgvTlG','yw5KigK','CIbPBNa','ihf1zxi','y3rHyMW','ywXSB3C','Chv0lG','BwvZige','BcbJzxi','BcbPBNq','y3vYAxq','Bg9VA3u','DhrPBMC','ignVzgu','qwXSB3C','yNLWyxm','DxrOzw4','zcbmree','Aw5NlMy','t2jQzwm','vMfSAwq','terbuc0','CMv2zwe','ifn0CMK','igLUChu','yxrLieK','uhjLCge','B24U','B21TB24','igv4Cg8','mdaY','AcbNzxq','B250zxG','CNKG4Ocuia','CgvYBhK','z2veAwC','tfmGq2u','zMfRzsa','u1fmihe','CYbVCIa','ievml1m','4OcuifHnta','CYbTDxm','BMqGzhK','ntKWnZG0DMvbzKnt','DgLVBI4','CMLUzYG','zYbtzwm','kcK7','CML6zwq','DgvYAxO','Dgf0zwW','DwyGAw4','BMPLy3q','D2L0Ag8','yxr0ywm','ywTHyMW','DgHLBNq','C2LVBNm','BsbPCYa','CgHLCI4','C3ncDwK','ywrpyMO','BML0AxO','A2v5CYa','zw5HyMW','Dg8Gq3i','swyGyNu','BMqGAg8','zxnZqNu','nJm1nty4zMTIBfv1','DxqGAw4','rsbPzca','CIb3Axq','u09oigK','yxrLBwu','CIbSB2C','CIb0B2S','zxmGAw4','BNqGBgK','vxnLifa','DgL0Esa','uMvXDwK','BgLZDca','zsbHCMi','Aw5WDxq','zsKPlIa','BguGzxG','kcjvC2u','ltq0mJi','BgrLCIa','Acb1BNq','B3jTifm','y2HHCMe','tcbXDwu','DeLUChu','B3nZlvm','z2vZlG','Aw50BYa','CgfZC2u','ywDLCW','u1fmlG','CM1HDca','CMCYiIK','C3rUyw0','DcbgB3i','ywDLCIa','ywWGrw4','DgvKigq','rgLZywi','igfZifm','ienstey','De1HDgm','DwfNzsa','igLUifm','y3rLCNm','lNn0yxi','DwvYAwu','DMLJzxm','yxv0Aca','CYbJzxi','zw4GChi','BwuGDMu','zxCGuhi','ihbYB2i','r0nnl04','CYb3Axq','zwn0kcK','AMf2ys4','yxrOkcK','B2DYyxa','zgvWCMu','zxiGD2K','BNrYDxm','rM9Yz2u','B2nHDgK','vxnLiha','iKffuY8','zs4Gm0q','DgvUyxq','uMfUzg8','BgvKifq','u2vYDMu','zwfKig8','y29Kzxi','zsbWyxq','q1DfltK','DgfUy2u','yMfZzsa','Bg93zwq','CMLMAwm','yMuGDxm','ywWGy2K','ig5Lzwq','oYbWCY4','yNjVA2u','igfYz3u','ChvYCg8','AxrOige','msWGDxm','igLUigW','lcb0CNu','B3jTyxq','DMvYAwy','EsbICMu','terbuca','zxjjzcK','Dcb3Axq','yw1LCY4','BIbMB3i','zML4','Aw5ZDgu','C0j1AwW','Bsb2zxi','C2HLBgW','BgvKigu','DxjLuMe','FsiSihm','De1HBMe','BgvKlIa','BMfTzsa','DMLHBgW','B24GB24','ihrOzw0','id0Gy28','CMvKu3q','DgHVzhm','yxbOAwm','mJq1me1KBLnMCG','B2yGywW','AxqGBg8','CdOVl2e','C2v2zxi','CgfJAgu','DhjPy3q','zgLZywi','C3rLywq','q29UBMu','igfJy2u','AxrPzxm','BMqGu0G','l05Vuge','DgL0Bgu','BgLZDc4','CYb0BYa','ChjLC3m','n0zsuhPIua','AwXKzxi','C2uGCge','oIbtzwm','yw5JzsG','AxrPDMu','AxPHDgK','ChrVz3i','yxnLzca','wfHflta','zxjPzxm','CxvLCNK','BIbSB2C','revtrvi','DeLUC3q','DgvKifG','tfmGC2u','q0iGCgu','igHVC3q','BgfUz3u','DhLSzsa','q29Uy2e','iencqYa','vxnLieO','Awn0ige','BwvUDcG','rgvJB2q','ueKSihu','runcig0','zxjWCMu','rY0Wmdi','ignHBIa','DhLWzs0','zxjUyw0','y3rPB24','Acb0Agu','mJC0mdyZohnXwKT2sq','tY0Wmdm','DcbJyw4','vxnPBMC','tcKGzxG','yMLUyxi','4OcuifvUCW','zwqSigK','CML0Esa','yw5KB20','C2fMzsa','zxCGu2u','CNKGy28','q3jLyxq','sw5Qzwm','zw5KCg8','q01ess0','ifrYDxm','yxjZzxi','DNvSBMu','qNvPBgq','BNmU','v2vHAYa','B2CGC3q','zMf1Bhq','ugf0Aca','DgLMAwm','uKyGrgK','igfSBg8','iLnfteu','DgLJyxq','vgHLieu','BhKGnty','ucaYota','y2f0zsa','yxr1CMu','kcjtsee','y2fS','Dg9YEs4','yw0GAxm','q1DfltC','BMCUzM8','B2rLigu','zgf0zsa','ihnLy3u'];_0x3af8=function(){return _0x442095;};return _0x3af8();}_0x16642e['id']=_0x48b724(0x2d5,0x3f5)+_0x48b724(0x265,0x339)+_0x95a7e3(0x28a,0x38e),_0x16642e[_0x48b724(0x2fe,0x254)]=_0x95a7e3(0x24b,0x1e3)+'9',_0x16642e[_0x95a7e3(0x1e6,0xf1)+_0x48b724(0x26c,0x260)]=_0x95a7e3(0x264,0x1a7)+_0x48b724(0x25a,0x37e),_0x16642e[_0x95a7e3(0x1f0,0x1ca)]='SQL\x20I'+_0x95a7e3(0x15b,0x1c6)+_0x48b724(0x30f,0x354)+_0x48b724(0x3ae,0x34b)+'ng\x20co'+_0x48b724(0x370,0x3da)+_0x48b724(0x2ac,0x38a)+_0x48b724(0x33f,0x343)+_0x48b724(0x21c,0x2fb),_0x16642e[_0x95a7e3(0x30c,0x3c7)+_0x48b724(0x2a6,0x2e8)+'n']=_0x95a7e3(0x209,0x1a1)+_0x95a7e3(0x1b1,0x113)+_0x95a7e3(0x2d7,0x33d)+_0x48b724(0x359,0x2a8)+_0x48b724(0x2f6,0x38d)+_0x95a7e3(0x188,0xf9)+_0x48b724(0x169,0x1bd)+_0x95a7e3(0x19b,0x25a)+'s\x20ena'+'bles\x20'+_0x95a7e3(0x30b,0x369)+'tion\x20'+_0x48b724(0x17a,0x278)+_0x48b724(0x382,0x2c3),_0x16642e['langu'+'ages']=['java'],_0x16642e[_0x95a7e3(0x29f,0x298)+'rn']=/(?:createStatement|prepareStatement|createQuery|createNativeQuery|executeQuery|executeUpdate)\s*\(\s*(?:["'][^"']*["']\s*\+|\+\s*["'].*(?:SELECT|INSERT|UPDATE|DELETE|WHERE|FROM))/gi,_0x16642e[_0x48b724(0x1ed,0x1ee)]=_0x95a7e3(0x176,0xec)+'repar'+'edSta'+'temen'+_0x95a7e3(0x1cd,0x110)+_0x48b724(0x2dc,0x1bf)+_0x95a7e3(0x27c,0x1f9)+_0x95a7e3(0x157,0x280)+_0x48b724(0x39a,0x450)+'ies:\x20'+_0x95a7e3(0x394,0x42c)+_0x48b724(0x1fc,0x149)+_0x48b724(0x18e,0x26e)+_0x48b724(0x2c7,0x204)+_0x95a7e3(0x1de,0x20f)+'nn.pr'+'epare'+'State'+_0x95a7e3(0x20d,0x287)+_0x48b724(0x252,0x133)+_0x48b724(0x2d2,0x22f)+_0x95a7e3(0x307,0x348)+'users'+_0x95a7e3(0x2e2,0x359)+_0x95a7e3(0x16e,0x216)+'=\x20?\x22)'+_0x48b724(0x1dd,0x2d4)+_0x95a7e3(0x30e,0x27c)+_0x48b724(0x171,0x1ce)+_0x95a7e3(0x1c5,0x12b)+_0x48b724(0x1e9,0x25b)+';';const _0x46d8a3={};_0x46d8a3['id']=_0x95a7e3(0x2b8,0x395)+_0x48b724(0x265,0x17f)+_0x48b724(0x3b5,0x44d),_0x46d8a3[_0x95a7e3(0x2e1,0x23e)]=_0x95a7e3(0x24b,0x361)+'9',_0x46d8a3[_0x48b724(0x203,0x151)+_0x95a7e3(0x24f,0x152)]='criti'+_0x48b724(0x25a,0x319),_0x46d8a3[_0x95a7e3(0x1f0,0x16b)]='SQL\x20I'+_0x95a7e3(0x15b,0x14f)+_0x48b724(0x30f,0x39b)+_0x95a7e3(0x391,0x3b1)+_0x95a7e3(0x241,0x26c)+_0x95a7e3(0x18c,0x1da)+'in\x20SQ'+_0x95a7e3(0x184,0x1cb)+'ry',_0x46d8a3[_0x95a7e3(0x30c,0x3d1)+_0x48b724(0x2a6,0x375)+'n']='Using'+_0x48b724(0x3ae,0x31e)+_0x48b724(0x25e,0x286)+_0x95a7e3(0x18c,0x284)+'to\x20bu'+_0x95a7e3(0x285,0x343)+_0x95a7e3(0x36d,0x28d)+_0x48b724(0x21b,0x1d7)+'\x20allo'+_0x95a7e3(0x36a,0x2a9)+_0x95a7e3(0x336,0x3ac)+'on.',_0x46d8a3['langu'+'ages']=[_0x95a7e3(0x28c,0x1eb)],_0x46d8a3['patte'+'rn']=/String\.format\s*\(\s*["'](?:SELECT|INSERT|UPDATE|DELETE|DROP|ALTER)\b/gi,_0x46d8a3[_0x48b724(0x1ed,0x11d)]=_0x48b724(0x1cb,0x1b0)+_0x48b724(0x312,0x34d)+_0x95a7e3(0x158,0x4c)+_0x95a7e3(0x29e,0x3c7)+_0x48b724(0x21b,0x217)+'\x20inst'+_0x95a7e3(0x1b5,0x192)+'f\x20Str'+_0x48b724(0x3a9,0x434)+_0x95a7e3(0x1c8,0x1cb)+_0x48b724(0x2ba,0x362)+_0x48b724(0x1a8,0x27c);const _0x2ed435={};_0x2ed435['id']='JAVA-'+_0x48b724(0x21a,0x296)+'01',_0x2ed435['cwe']='CWE-6'+'11',_0x2ed435[_0x95a7e3(0x1e6,0xf4)+_0x95a7e3(0x24f,0x25c)]=_0x95a7e3(0x264,0x305)+_0x95a7e3(0x23d,0x20d),_0x2ed435[_0x95a7e3(0x1f0,0x22c)]=_0x95a7e3(0x282,0x1c7)+_0x95a7e3(0x281,0x19f)+_0x95a7e3(0x191,0x2b3)+_0x48b724(0x194,0x8d)+'(XXE)'+'\x20—\x20Un'+_0x48b724(0x23f,0x34c)+'XML\x20p'+_0x48b724(0x285,0x2d9)+'g',_0x2ed435['descr'+_0x48b724(0x2a6,0x2d9)+'n']='XML\x20p'+_0x48b724(0x247,0x2f8)+_0x48b724(0x1c1,0x213)+_0x95a7e3(0x34c,0x37e)+_0x95a7e3(0x1e9,0xcc)+_0x95a7e3(0x1d5,0x1be)+'xtern'+_0x48b724(0x368,0x3a4)+_0x48b724(0x301,0x215)+'s\x20can'+'\x20read'+_0x48b724(0x26a,0x2f0)+'trary'+_0x48b724(0x26b,0x220)+_0x95a7e3(0x309,0x2ea)+'\x20perf'+_0x95a7e3(0x182,0x1d1)+_0x95a7e3(0x31c,0x214),_0x2ed435[_0x95a7e3(0x207,0x2e4)+'ages']=[_0x95a7e3(0x28c,0x31a)],_0x2ed435['patte'+'rn']=/(?:DocumentBuilderFactory|SAXParserFactory|XMLInputFactory|TransformerFactory|SchemaFactory)\.newInstance\s*\(/g,_0x2ed435['fix']='Disab'+_0x95a7e3(0x17d,0x88)+'terna'+_0x48b724(0x354,0x41f)+'ities'+_0x95a7e3(0x27a,0x396)+_0x95a7e3(0x23e,0x20c)+'setFe'+_0x95a7e3(0x23b,0x1c7)+_0x95a7e3(0x359,0x377)+_0x95a7e3(0x1e5,0x1cc)+_0x48b724(0x204,0x134)+_0x48b724(0x2f3,0x38a)+_0x48b724(0x2e7,0x353)+_0x48b724(0x288,0x35f)+_0x95a7e3(0x254,0x303)+_0x48b724(0x306,0x36d)+_0x48b724(0x307,0x3bf)+_0x95a7e3(0x214,0x220)+_0x95a7e3(0x2cb,0x1c9)+_0x48b724(0x1e4,0x21d)+_0x95a7e3(0x2b6,0x2af);const _0x4defd2={};_0x4defd2['id']='JAVA-'+_0x95a7e3(0x201,0x2cb)+_0x95a7e3(0x323,0x430),_0x4defd2[_0x95a7e3(0x2e1,0x389)]=_0x48b724(0x298,0x302)+'02',_0x4defd2[_0x48b724(0x203,0x277)+_0x95a7e3(0x24f,0x2a9)]=_0x48b724(0x281,0x236)+_0x48b724(0x25a,0x1bc),_0x4defd2[_0x48b724(0x20d,0x1f7)]=_0x48b724(0x2f7,0x25b)+_0x48b724(0x2b5,0x38c)+_0x48b724(0x2be,0x234)+_0x48b724(0x2e9,0x2f7)+_0x95a7e3(0x378,0x488)+_0x95a7e3(0x263,0x384)+_0x48b724(0x33d,0x258)+'putSt'+_0x95a7e3(0x300,0x1e3),_0x4defd2[_0x95a7e3(0x30c,0x420)+_0x95a7e3(0x289,0x390)+'n']='Java\x20'+_0x48b724(0x3aa,0x369)+_0x95a7e3(0x185,0x9b)+_0x95a7e3(0x32b,0x336)+'am.re'+_0x95a7e3(0x164,0x138)+_0x48b724(0x1c2,0x27e)+'\x20on\x20u'+_0x95a7e3(0x1ab,0x1a6)+_0x95a7e3(0x192,0xcd)+'ata\x20c'+'an\x20ex'+_0x48b724(0x334,0x2ae)+_0x95a7e3(0x24d,0x298)+'trary'+_0x95a7e3(0x387,0x260)+'\x20(Apa'+_0x48b724(0x38e,0x3bc)+_0x95a7e3(0x396,0x357)+'s\x20gad'+_0x95a7e3(0x261,0x2a8)+'hains'+').',_0x4defd2[_0x95a7e3(0x207,0x2e2)+'ages']=['java'],_0x4defd2[_0x95a7e3(0x29f,0x291)+'rn']=/(?:ObjectInputStream|readObject|readUnshared)\s*\(/g,_0x4defd2['fix']=_0x48b724(0x228,0x12e)+_0x48b724(0x2d1,0x28b)+_0x95a7e3(0x287,0x35e)+_0x95a7e3(0x15a,0x123)+_0x48b724(0x207,0x26a)+'.\x20If\x20'+'Objec'+_0x95a7e3(0x185,0x18a)+_0x95a7e3(0x32b,0x390)+_0x95a7e3(0x23f,0x183)+_0x95a7e3(0x1bf,0x12d)+_0x95a7e3(0x21f,0x18f)+_0x48b724(0x290,0x304)+'ent\x20O'+_0x95a7e3(0x361,0x34b)+_0x48b724(0x378,0x3e5)+_0x95a7e3(0x33e,0x45c)+_0x95a7e3(0x344,0x33e)+_0x95a7e3(0x239,0x1ce)+')\x20to\x20'+'restr'+_0x48b724(0x229,0x102)+_0x95a7e3(0x29a,0x327)+_0x95a7e3(0x356,0x418)+_0x95a7e3(0x34a,0x467);const _0x4cfd74={};_0x4cfd74['id']=_0x95a7e3(0x2b8,0x1a9)+_0x48b724(0x21e,0x214)+_0x48b724(0x302,0x362),_0x4cfd74[_0x48b724(0x2fe,0x2f6)]=_0x95a7e3(0x27b,0x26a)+'02',_0x4cfd74['sever'+_0x48b724(0x26c,0x2e0)]=_0x48b724(0x281,0x38b)+'cal',_0x4cfd74['title']=_0x48b724(0x2f7,0x1f0)+_0x95a7e3(0x298,0x32b)+_0x48b724(0x2be,0x202)+_0x48b724(0x2e9,0x32f)+'tion\x20'+_0x95a7e3(0x14f,0x19f)+_0x48b724(0x22b,0x1fe)+'er',_0x4cfd74[_0x48b724(0x329,0x445)+_0x48b724(0x2a6,0x3a9)+'n']='XMLDe'+_0x95a7e3(0x1b6,0x221)+_0x95a7e3(0x213,0x1ef)+_0x95a7e3(0x375,0x41e)+_0x48b724(0x279,0x32a)+_0x48b724(0x2ec,0x2c3)+_0x48b724(0x241,0x254)+_0x95a7e3(0x2ed,0x349)+_0x95a7e3(0x19f,0x2b7)+_0x48b724(0x274,0x1fb)+'ing\x20u'+_0x95a7e3(0x1ab,0x13f)+_0x48b724(0x220,0x120)+'ML\x20in'+_0x48b724(0x39d,0x40e),_0x4cfd74[_0x95a7e3(0x207,0x2ea)+'ages']=[_0x48b724(0x2a9,0x19b)],_0x4cfd74['patte'+'rn']=/XMLDecoder\s*\(\s*new/g,_0x4cfd74[_0x95a7e3(0x1d0,0x251)]=_0x48b724(0x2cb,0x3db)+_0x95a7e3(0x2ac,0x2a0)+_0x95a7e3(0x358,0x2eb)+_0x95a7e3(0x2fc,0x38e)+_0x48b724(0x18c,0x70)+_0x48b724(0x19e,0x122)+'ruste'+'d\x20inp'+_0x95a7e3(0x367,0x43e)+_0x48b724(0x282,0x2b7)+'safe\x20'+'XML\x20p'+_0x48b724(0x247,0x28e)+'\x20or\x20J'+_0x95a7e3(0x170,0x6b)+_0x48b724(0x33c,0x2c0)+'d.';const _0x4ea3f4={};_0x4ea3f4['id']='JAVA-'+'CMDI-'+_0x48b724(0x2a7,0x2ba),_0x4ea3f4[_0x95a7e3(0x2e1,0x24b)]=_0x48b724(0x25d,0x21b)+'8',_0x4ea3f4['sever'+_0x95a7e3(0x24f,0x18a)]=_0x95a7e3(0x264,0x365)+_0x95a7e3(0x23d,0x29a),_0x4ea3f4[_0x95a7e3(0x1f0,0x10d)]='Comma'+_0x95a7e3(0x33d,0x26d)+_0x95a7e3(0x336,0x22b)+_0x95a7e3(0x2fe,0x267)+'Runti'+_0x95a7e3(0x274,0x271)+'ec\x20wi'+'th\x20dy'+_0x95a7e3(0x319,0x37f)+_0x95a7e3(0x392,0x454)+'t',_0x4ea3f4[_0x95a7e3(0x30c,0x2bf)+_0x95a7e3(0x289,0x278)+'n']='Runti'+_0x95a7e3(0x274,0x16b)+_0x48b724(0x383,0x467)+_0x48b724(0x377,0x360)+_0x48b724(0x2a0,0x17e)+_0x95a7e3(0x1b1,0x258)+_0x48b724(0x2c4,0x1b1)+_0x48b724(0x2af,0x2cd)+_0x95a7e3(0x234,0x355)+_0x48b724(0x37b,0x498)+_0x95a7e3(0x27f,0x1c5)+_0x95a7e3(0x37b,0x3b4)+_0x95a7e3(0x15b,0x133)+_0x48b724(0x2b6,0x283),_0x4ea3f4[_0x48b724(0x224,0x2fc)+_0x95a7e3(0x18a,0xb6)]=[_0x48b724(0x2a9,0x2c1)],_0x4ea3f4[_0x95a7e3(0x29f,0x346)+'rn']=/Runtime\.getRuntime\s*\(\s*\)\.exec\s*\(\s*(?:["'][^"']*["']\s*\+|\+)/g,_0x4ea3f4['fix']=_0x95a7e3(0x176,0xe2)+_0x48b724(0x2ad,0x384)+_0x95a7e3(0x1d2,0x252)+'der\x20w'+_0x95a7e3(0x1c4,0x16e)+_0x48b724(0x2f1,0x353)+_0x48b724(0x192,0x1c4)+_0x48b724(0x36d,0x369)+_0x95a7e3(0x1a1,0x1d7)+_0x48b724(0x274,0x160)+_0x95a7e3(0x22c,0x2b8)+'er(\x22c'+'md\x22,\x20'+_0x48b724(0x346,0x3cf)+'\x22,\x20\x22a'+_0x95a7e3(0x18d,0xd7)+_0x95a7e3(0x19a,0x275)+'t()';const _0x119990={};_0x119990['id']=_0x48b724(0x2d5,0x3a2)+_0x95a7e3(0x228,0x1ef)+'002',_0x119990[_0x95a7e3(0x2e1,0x261)]=_0x48b724(0x25d,0x2d7)+'8',_0x119990[_0x95a7e3(0x1e6,0x25f)+_0x95a7e3(0x24f,0x13e)]=_0x95a7e3(0x264,0x1ab)+_0x95a7e3(0x23d,0x2a9),_0x119990[_0x95a7e3(0x1f0,0x1c9)]=_0x48b724(0x37a,0x489)+'nd\x20In'+_0x48b724(0x353,0x3f8)+'on\x20—\x20'+'Proce'+_0x95a7e3(0x163,0x104)+_0x48b724(0x19d,0x22f)+'with\x20'+_0x95a7e3(0x1d4,0x12f),_0x119990['descr'+_0x95a7e3(0x289,0x390)+'n']=_0x95a7e3(0x21b,0x21b)+'\x20Proc'+_0x95a7e3(0x16b,0x1ab)+_0x95a7e3(0x1f5,0x250)+_0x48b724(0x2cf,0x1b2)+_0x95a7e3(0x2e7,0x3d5)+_0x95a7e3(0x383,0x34b)+_0x95a7e3(0x211,0x2da)+_0x48b724(0x38c,0x3e1)+_0x95a7e3(0x151,0x222)+_0x48b724(0x336,0x342)+_0x48b724(0x29c,0x2de)+_0x48b724(0x35c,0x444)+_0x48b724(0x184,0x89)+_0x48b724(0x191,0x155)+'jecti'+_0x95a7e3(0x395,0x32f),_0x119990['langu'+_0x95a7e3(0x18a,0xf9)]=['java'],_0x119990[_0x48b724(0x2bc,0x2d5)+'rn']=/ProcessBuilder\s*\(\s*(?:Arrays\.asList\s*\()?\s*["'](?:bash|sh|cmd|cmd\.exe)['"]\s*,\s*["'](?:-c|\/c)['"]\s*,/g,_0x119990[_0x48b724(0x1ed,0x189)]='Avoid'+_0x95a7e3(0x2e7,0x349)+'l\x20inv'+_0x95a7e3(0x1ad,0x252)+'on.\x20U'+_0x95a7e3(0x340,0x308)+_0x48b724(0x274,0x15a)+_0x95a7e3(0x22c,0x1a1)+_0x48b724(0x1c7,0x2c1)+_0x48b724(0x2f9,0x304)+_0x95a7e3(0x2ef,0x277)+_0x95a7e3(0x21d,0x120)+_0x95a7e3(0x2ec,0x3b5)+_0x95a7e3(0x1c2,0xe0)+_0x95a7e3(0x270,0x1ae)+_0x95a7e3(0x1f1,0x2ff);const _0xb23e62={};_0xb23e62['id']=_0x95a7e3(0x2b8,0x1d5)+_0x48b724(0x331,0x451)+_0x95a7e3(0x28a,0x245),_0xb23e62[_0x95a7e3(0x2e1,0x1eb)]=_0x95a7e3(0x276,0x1a0)+'2',_0xb23e62[_0x95a7e3(0x1e6,0x1cb)+'ity']=_0x48b724(0x278,0x16c),_0xb23e62[_0x95a7e3(0x1f0,0x314)]=_0x95a7e3(0x231,0x195)+'Trave'+_0x48b724(0x305,0x36d)+'—\x20Use'+_0x95a7e3(0x37c,0x2ba)+_0x95a7e3(0x16d,0x1c7)+'\x20file'+_0x48b724(0x2fa,0x3d2),_0xb23e62[_0x48b724(0x329,0x3c6)+_0x48b724(0x2a6,0x21f)+'n']=_0x48b724(0x330,0x35c)+_0x95a7e3(0x17b,0xa2)+'\x20in\x20f'+_0x48b724(0x2d7,0x36a)+'perat'+_0x95a7e3(0x2a6,0x301)+_0x95a7e3(0x15c,0x283)+_0x48b724(0x393,0x421)+_0x95a7e3(0x165,0x3b)+'ation'+_0x95a7e3(0x234,0x188)+_0x48b724(0x2c2,0x1b8)+'ading'+_0x48b724(0x385,0x45b)+_0x95a7e3(0x32e,0x347)+_0x48b724(0x318,0x316)+_0x95a7e3(0x2f6,0x20f)+'iles.',_0xb23e62[_0x95a7e3(0x207,0xee)+_0x95a7e3(0x18a,0xab)]=['java'],_0xb23e62[_0x48b724(0x2bc,0x2bb)+'rn']=/new\s+File\s*\(\s*(?:request\.getParameter|request\.getAttribute|params\.get|[^)]+\+\s*(?:request|param|input|user))/g,_0xb23e62[_0x95a7e3(0x1d0,0x2cf)]=_0x95a7e3(0x31d,0x427)+_0x95a7e3(0x2d3,0x3eb)+'ze\x20th'+_0x95a7e3(0x1b7,0x19c)+_0x48b724(0x315,0x3db)+_0x48b724(0x3b6,0x3cc)+_0x48b724(0x33a,0x3fa)+_0x48b724(0x2b2,0x326)+_0x48b724(0x1c4,0xc2)+'\x20and\x20'+_0x48b724(0x1e6,0x1dd)+_0x95a7e3(0x262,0x288)+_0x95a7e3(0x271,0x276)+_0x48b724(0x1c1,0x196)+_0x48b724(0x234,0x1db)+_0x95a7e3(0x349,0x23b)+_0x48b724(0x343,0x3eb)+_0x48b724(0x1d7,0x2b1)+_0x48b724(0x316,0x22b)+_0x95a7e3(0x23e,0x2f7);const _0x4258a4={};_0x4258a4['id']=_0x95a7e3(0x2b8,0x3bc)+_0x48b724(0x322,0x38d)+_0x48b724(0x2a7,0x1ce),_0x4258a4['cwe']='CWE-9'+'18',_0x4258a4[_0x95a7e3(0x1e6,0xd9)+_0x95a7e3(0x24f,0x1ee)]=_0x95a7e3(0x25b,0x156),_0x4258a4['title']=_0x95a7e3(0x1b4,0x222)+_0x95a7e3(0x36c,0x435)+_0x48b724(0x2ce,0x2ef)+_0x95a7e3(0x311,0x2e3)+_0x48b724(0x1c9,0x18b)+_0x95a7e3(0x39b,0x31b)+_0x48b724(0x350,0x39b)+_0x48b724(0x26e,0x1e4)+'L\x20fro'+'m\x20use'+'r\x20inp'+'ut',_0x4258a4[_0x95a7e3(0x30c,0x28a)+'iptio'+'n']=_0x95a7e3(0x225,0x320)+_0x95a7e3(0x2f7,0x30d)+_0x95a7e3(0x297,0x32a)+'tpURL'+_0x95a7e3(0x1eb,0x301)+_0x95a7e3(0x216,0x2cf)+'\x20from'+'\x20user'+_0x95a7e3(0x392,0x3b2)+_0x95a7e3(0x21a,0x120)+_0x95a7e3(0x1ec,0x1f4)+_0x95a7e3(0x255,0x1d3)+'terna'+_0x95a7e3(0x2ee,0x1e7)+_0x48b724(0x1b9,0x2c2)+'.',_0x4258a4['langu'+_0x95a7e3(0x18a,0x1a0)]=[_0x48b724(0x2a9,0x229)],_0x4258a4[_0x95a7e3(0x29f,0x219)+'rn']=/new\s+URL\s*\(\s*(?:request\.getParameter|request\.getAttribute|params\.get|[^)]+\+\s*(?:request|param|input|user))/g,_0x4258a4['fix']=_0x95a7e3(0x38e,0x327)+_0x48b724(0x26d,0x2c6)+_0x95a7e3(0x253,0x1d8)+_0x48b724(0x379,0x493)+'t\x20an\x20'+_0x95a7e3(0x37f,0x275)+_0x48b724(0x196,0x2b8)+_0x48b724(0x200,0x314)+_0x95a7e3(0x1bb,0x208)+_0x48b724(0x303,0x366)+_0x48b724(0x39e,0x47b)+_0x48b724(0x187,0x1b7)+_0x95a7e3(0x2e0,0x1c9)+'Block'+_0x48b724(0x2aa,0x2b2)+_0x95a7e3(0x393,0x2cb)+_0x95a7e3(0x328,0x217)+_0x48b724(0x1a4,0x2b2);const _0x500e36={};_0x500e36['id']=_0x95a7e3(0x2b8,0x1e9)+_0x48b724(0x372,0x395)+_0x48b724(0x28c,0x193),_0x500e36[_0x48b724(0x2fe,0x2a7)]=_0x48b724(0x27b,0x1f1)+'27',_0x500e36[_0x48b724(0x203,0x2cb)+_0x95a7e3(0x24f,0x1ae)]=_0x48b724(0x278,0x305);function _0x48b724(_0x30ab4d,_0x371ba6){return _0x1252(_0x30ab4d-0x58,_0x371ba6);}_0x500e36['title']=_0x95a7e3(0x22e,0x328)+'Crypt'+_0x95a7e3(0x1a8,0x170)+'hy\x20—\x20'+'MD5\x20o'+_0x95a7e3(0x291,0x2a3)+'1',_0x500e36[_0x48b724(0x329,0x29f)+_0x48b724(0x2a6,0x306)+'n']=_0x48b724(0x325,0x3ab)+_0x48b724(0x20b,0x2da)+'A1\x20ar'+_0x95a7e3(0x32f,0x29d)+_0x48b724(0x218,0x2ad)+_0x48b724(0x1fe,0x2ef)+_0x95a7e3(0x2db,0x299)+_0x48b724(0x1de,0x1f0)+_0x95a7e3(0x1cf,0x29e)+_0x48b724(0x261,0x149)+_0x48b724(0x23d,0x2b8)+_0x48b724(0x1e0,0x24f)+_0x48b724(0x32a,0x399),_0x500e36[_0x48b724(0x224,0x2d2)+_0x48b724(0x1a7,0x2aa)]=[_0x95a7e3(0x28c,0x18b)],_0x500e36[_0x48b724(0x2bc,0x195)+'rn']=/MessageDigest\.getInstance\s*\(\s*["'](?:MD5|SHA-?1)["']\s*\)/gi,_0x500e36[_0x48b724(0x1ed,0x266)]='Use\x20S'+_0x95a7e3(0x2fd,0x3b5)+'6\x20or\x20'+_0x48b724(0x31c,0x291)+_0x95a7e3(0x2c7,0x391)+_0x95a7e3(0x2c6,0x1b6)+_0x95a7e3(0x39d,0x2d9)+_0x48b724(0x2d8,0x1f5)+_0x95a7e3(0x363,0x381)+_0x95a7e3(0x1b9,0x20f)+_0x48b724(0x259,0x2f0)+_0x48b724(0x388,0x2f3)+').';function _0x1252(_0x321424,_0xc77c9e){_0x321424=_0x321424-(-0x70*0x17+0x5e1+0x540);const _0x573f1b=_0x3af8();let _0x41fa6e=_0x573f1b[_0x321424];if(_0x1252['MCpAFt']===undefined){var _0xd28208=function(_0x3a951c){const _0x9534f0='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0x131a8f='',_0x2e20e8='';for(let _0x161cd8=-0x25d0+-0x84*0x44+-0x1*-0x48e0,_0x2a8fe4,_0x5bfec9,_0x292182=-0xf4*-0x1a+0x1802+0x9c2*-0x5;_0x5bfec9=_0x3a951c['charAt'](_0x292182++);~_0x5bfec9&&(_0x2a8fe4=_0x161cd8%(-0x1b1*-0x2+0x638*-0x5+0x2*0xddd)?_0x2a8fe4*(0x208e+0x23c8+-0x1e*0x245)+_0x5bfec9:_0x5bfec9,_0x161cd8++%(-0xcfe*-0x3+-0x1c1a+-0xadc))?_0x131a8f+=String['fromCharCode'](0x1399+-0x1*0x1462+0x1c8&_0x2a8fe4>>(-(-0x103*0x6+0x16e*-0x17+0x137b*0x2)*_0x161cd8&0xf6b+-0x197f*-0x1+-0x28e4)):-0xb*0x356+-0x1642+0x3af4){_0x5bfec9=_0x9534f0['indexOf'](_0x5bfec9);}for(let _0x47509b=0x259d*-0x1+-0xa59*-0x1+0x1b44,_0x3cc5df=_0x131a8f['length'];_0x47509b<_0x3cc5df;_0x47509b++){_0x2e20e8+='%'+('00'+_0x131a8f['charCodeAt'](_0x47509b)['toString'](0x1b75+-0x1ed5+0x370))['slice'](-(0x26b9+0x1*0xfb6+0x366d*-0x1));}return decodeURIComponent(_0x2e20e8);};_0x1252['MKmMCn']=_0xd28208,_0x1252['gGlhIv']={},_0x1252['MCpAFt']=!![];}const _0x243be3=_0x573f1b[0x68*-0x1+0xa1*-0x3b+0x369*0xb],_0x19329c=_0x321424+_0x243be3,_0x5d40c6=_0x1252['gGlhIv'][_0x19329c];return!_0x5d40c6?(_0x41fa6e=_0x1252['MKmMCn'](_0x41fa6e),_0x1252['gGlhIv'][_0x19329c]=_0x41fa6e):_0x41fa6e=_0x5d40c6,_0x41fa6e;}const _0x33d109={};_0x33d109['id']=_0x95a7e3(0x2b8,0x395)+_0x95a7e3(0x355,0x408)+'O-002',_0x33d109[_0x95a7e3(0x2e1,0x3ef)]=_0x48b724(0x27b,0x1dc)+'27',_0x33d109[_0x48b724(0x203,0x223)+_0x48b724(0x26c,0x350)]=_0x95a7e3(0x264,0x241)+'cal',_0x33d109[_0x95a7e3(0x1f0,0xe6)]=_0x48b724(0x24b,0x33c)+'Crypt'+_0x48b724(0x1c5,0x17f)+_0x48b724(0x365,0x45f)+_0x95a7e3(0x2ab,0x1fc)+_0x48b724(0x337,0x284)+_0x95a7e3(0x2af,0x382),_0x33d109[_0x95a7e3(0x30c,0x32c)+_0x95a7e3(0x289,0x38b)+'n']=_0x48b724(0x27a,0x28c)+_0x95a7e3(0x2f0,0x212)+_0x48b724(0x255,0x307)+'-bit\x20'+_0x95a7e3(0x166,0xe3)+_0x95a7e3(0x37b,0x484)+_0x48b724(0x269,0x1d2)+_0x95a7e3(0x1db,0x2bd)+_0x48b724(0x1e7,0x1ad)+_0x95a7e3(0x15e,0xbb)+_0x95a7e3(0x1b0,0x2ce)+_0x48b724(0x26f,0x2ff)+'ESede'+_0x48b724(0x295,0x2bf)+_0x48b724(0x1c6,0x299)+'cated'+'.',_0x33d109[_0x48b724(0x224,0x2a0)+_0x48b724(0x1a7,0x187)]=[_0x48b724(0x2a9,0x1bc)],_0x33d109[_0x95a7e3(0x29f,0x2c5)+'rn']=/Cipher\.getInstance\s*\(\s*["'](?:DES|DESede|DES\/|DESede\/)/gi,_0x33d109['fix']=_0x48b724(0x2a8,0x238)+'ES\x20wi'+_0x95a7e3(0x342,0x355)+'M\x20mod'+_0x95a7e3(0x32d,0x374)+_0x95a7e3(0x162,0xef)+_0x95a7e3(0x26c,0x363)+_0x48b724(0x2df,0x213)+'e(\x22AE'+_0x95a7e3(0x32a,0x22b)+_0x95a7e3(0x1ef,0x1b5)+'dding'+'\x22)';const _0x9bc915={};_0x9bc915['id']='JAVA-'+'CRYPT'+_0x48b724(0x236,0x1e6),_0x9bc915[_0x95a7e3(0x2e1,0x27a)]='CWE-3'+'27',_0x9bc915[_0x95a7e3(0x1e6,0x166)+'ity']=_0x95a7e3(0x25b,0x138),_0x9bc915[_0x48b724(0x20d,0x117)]=_0x48b724(0x24b,0x2b0)+'Crypt'+_0x48b724(0x1c5,0x18b)+_0x48b724(0x365,0x417)+'ECB\x20M'+_0x95a7e3(0x339,0x35f),_0x9bc915[_0x95a7e3(0x30c,0x41f)+'iptio'+'n']=_0x48b724(0x22d,0x1c5)+_0x95a7e3(0x242,0x2a5)+'ncryp'+_0x48b724(0x38b,0x3d9)+_0x95a7e3(0x2fa,0x2b3)+_0x95a7e3(0x303,0x21c)+_0x48b724(0x2b1,0x1f1)+_0x48b724(0x267,0x161)+_0x48b724(0x317,0x280)+_0x95a7e3(0x1be,0x1da)+_0x48b724(0x2ab,0x33b)+'ext,\x20'+_0x48b724(0x3ad,0x32c)+_0x95a7e3(0x259,0x1a0)+_0x95a7e3(0x29f,0x229)+_0x95a7e3(0x33a,0x450)+_0x48b724(0x254,0x32c)+_0x95a7e3(0x205,0x14d)+'nguin'+_0x95a7e3(0x1a2,0x10a)+_0x95a7e3(0x37a,0x3dc),_0x9bc915[_0x48b724(0x224,0x262)+_0x95a7e3(0x18a,0x10b)]=[_0x95a7e3(0x28c,0x388)],_0x9bc915['patte'+'rn']=/Cipher\.getInstance\s*\(\s*["'](?:AES|DES|DESede)\/ECB\//gi,_0x9bc915[_0x95a7e3(0x1d0,0x18c)]='Use\x20G'+_0x48b724(0x287,0x1c9)+_0x95a7e3(0x20a,0x1f7)+_0x48b724(0x352,0x2e5)+'\x20Ciph'+'er.ge'+_0x95a7e3(0x202,0x210)+_0x95a7e3(0x1f8,0x202)+_0x48b724(0x1cc,0xf7)+_0x48b724(0x1c0,0x18d)+_0x48b724(0x358,0x22e)+_0x95a7e3(0x272,0x357);const _0x36cb12={};_0x36cb12['id']='JAVA-'+_0x95a7e3(0x325,0x25b)+_0x95a7e3(0x28a,0x399),_0x36cb12[_0x48b724(0x2fe,0x33d)]=_0x48b724(0x27b,0x23b)+'38',_0x36cb12[_0x95a7e3(0x1e6,0x1df)+_0x95a7e3(0x24f,0x17e)]=_0x95a7e3(0x25b,0x186),_0x36cb12[_0x48b724(0x20d,0x14e)]=_0x95a7e3(0x2da,0x1fe)+_0x48b724(0x273,0x1b3)+_0x95a7e3(0x221,0x205)+'\x20—\x20ja'+_0x95a7e3(0x338,0x436)+_0x48b724(0x32c,0x339)+_0x48b724(0x37f,0x319)+'for\x20s'+_0x48b724(0x335,0x3cb)+'ty',_0x36cb12[_0x95a7e3(0x30c,0x2aa)+_0x48b724(0x2a6,0x2ba)+'n']=_0x48b724(0x1c3,0x1f4)+_0x95a7e3(0x374,0x357)+_0x48b724(0x1cf,0x287)+_0x95a7e3(0x161,0xf5)+'predi'+_0x95a7e3(0x37e,0x328)+'e.\x20It'+'\x20must'+'\x20not\x20'+_0x95a7e3(0x1bd,0x1a3)+'ed\x20fo'+_0x95a7e3(0x173,0x26e)+'ens,\x20'+_0x48b724(0x33b,0x32d)+'\x20or\x20s'+_0x48b724(0x335,0x3d4)+'ty\x20de'+_0x95a7e3(0x277,0x22a)+_0x95a7e3(0x22d,0x321),_0x36cb12['langu'+_0x95a7e3(0x18a,0x22c)]=[_0x48b724(0x2a9,0x346)],_0x36cb12[_0x48b724(0x2bc,0x293)+'rn']=/new\s+Random\s*\(\s*\)/g;function _0x95a7e3(_0x4f68bb,_0x4eb0fc){return _0x1252(_0x4f68bb-0x3b,_0x4eb0fc);}_0x36cb12[_0x48b724(0x1ed,0x26d)]='Use\x20j'+'ava.s'+_0x48b724(0x335,0x344)+'ty.Se'+_0x48b724(0x28b,0x215)+_0x48b724(0x23e,0x2cc)+_0x48b724(0x214,0x2fd)+_0x95a7e3(0x1d6,0x16e)+_0x48b724(0x37f,0x45e)+_0x95a7e3(0x245,0x2d5)+'m\x20=\x20n'+_0x95a7e3(0x223,0x21a)+_0x48b724(0x28b,0x271)+_0x95a7e3(0x221,0x19d)+_0x95a7e3(0x156,0x27e);const _0x12382d={};_0x12382d['id']='JAVA-'+_0x95a7e3(0x38f,0x313)+_0x48b724(0x2a7,0x38c),_0x12382d[_0x48b724(0x2fe,0x36c)]=_0x48b724(0x1d5,0x29d)+'0',_0x12382d[_0x95a7e3(0x1e6,0x1dd)+_0x48b724(0x26c,0x2e3)]=_0x95a7e3(0x264,0x229)+_0x95a7e3(0x23d,0x1b7),_0x12382d[_0x48b724(0x20d,0x2b9)]=_0x48b724(0x1e8,0x247)+_0x95a7e3(0x226,0x334)+'tion\x20'+_0x48b724(0x23b,0x300)+_0x95a7e3(0x327,0x2e4)+'zed\x20i'+_0x48b724(0x2f6,0x3f0)+_0x95a7e3(0x279,0x315)+_0x95a7e3(0x2c4,0x248)+_0x48b724(0x311,0x384),_0x12382d[_0x95a7e3(0x30c,0x356)+'iptio'+'n']=_0x48b724(0x330,0x32b)+_0x48b724(0x198,0x18b)+_0x48b724(0x2dd,0x3d5)+_0x48b724(0x2d9,0x234)+_0x48b724(0x1b8,0xfc)+_0x48b724(0x1c1,0x289)+_0x95a7e3(0x34c,0x337)+_0x48b724(0x332,0x3b2)+_0x95a7e3(0x1fa,0x1dc)+'on\x20al'+_0x95a7e3(0x25f,0x206)+_0x48b724(0x1e8,0xed)+'injec'+_0x48b724(0x170,0x19c),_0x12382d[_0x95a7e3(0x207,0x142)+_0x48b724(0x1a7,0x18b)]=[_0x48b724(0x2a9,0x198)],_0x12382d['patte'+'rn']=/(?:search|lookup)\s*\(\s*(?:["'][^"']*["']\s*\+|\+\s*["'].*(?:cn=|uid=|ou=|dc=))/gi,_0x12382d['fix']='Escap'+_0x48b724(0x333,0x330)+'cial\x20'+_0x95a7e3(0x1cb,0x161)+_0x95a7e3(0x183,0x11f)+_0x48b724(0x1b6,0x1ea)+_0x95a7e3(0x34d,0x23b)+_0x48b724(0x213,0x1d7)+_0x48b724(0x27d,0x35b)+'erize'+_0x48b724(0x3a8,0x29d)+'P\x20que'+_0x95a7e3(0x2f3,0x388);const _0x4c2a2f={};_0x4c2a2f['id']=_0x48b724(0x2d5,0x1b2)+_0x95a7e3(0x2a3,0x180)+'G-001',_0x4c2a2f[_0x48b724(0x2fe,0x3ec)]=_0x95a7e3(0x24b,0x2d2)+'62',_0x4c2a2f[_0x48b724(0x203,0x179)+_0x48b724(0x26c,0x210)]='high',_0x4c2a2f[_0x95a7e3(0x1f0,0x10a)]=_0x48b724(0x283,0x198)+_0x95a7e3(0x155,0x1b0)+_0x95a7e3(0x2d1,0x3bd)+'\x20—\x20CS'+_0x48b724(0x250,0x263)+'sable'+'d',_0x4c2a2f[_0x48b724(0x329,0x420)+_0x95a7e3(0x289,0x1cc)+'n']='Disab'+_0x48b724(0x276,0x275)+_0x48b724(0x362,0x2fd)+_0x95a7e3(0x2a4,0x3a5)+_0x48b724(0x233,0x160)+_0x48b724(0x3b4,0x3da)+'ses\x20t'+'he\x20ap'+'plica'+_0x95a7e3(0x378,0x37c)+_0x48b724(0x185,0xd4)+_0x48b724(0x1a3,0x124)+_0x48b724(0x32d,0x366)+'eques'+_0x48b724(0x1ac,0x115)+_0x48b724(0x2db,0x211)+_0x95a7e3(0x15d,0x23f)+_0x95a7e3(0x365,0x3ec),_0x4c2a2f[_0x48b724(0x224,0x330)+'ages']=[_0x48b724(0x2a9,0x2e0)],_0x4c2a2f[_0x95a7e3(0x29f,0x19c)+'rn']=/\.csrf\s*\(\s*\)\s*\.disable\s*\(\s*\)/g,_0x4c2a2f['fix']=_0x95a7e3(0x2b0,0x218)+_0x48b724(0x362,0x3a2)+_0x48b724(0x2c1,0x218)+_0x48b724(0x233,0x335)+_0x48b724(0x2b3,0x1ca)+_0x48b724(0x1f6,0x141)+_0x48b724(0x186,0xb8)+_0x48b724(0x2fc,0x38d)+'g\x20a\x20s'+_0x48b724(0x176,0xae)+_0x48b724(0x2a1,0x34f)+_0x48b724(0x22c,0x107)+'se\x20to'+'ken-b'+_0x95a7e3(0x1fc,0x21f)+_0x95a7e3(0x19d,0x22b)+_0x95a7e3(0x1d1,0x162)+_0x48b724(0x29a,0x1aa);const _0x547145={};_0x547145['id']='JAVA-'+_0x95a7e3(0x2a3,0x2bb)+_0x95a7e3(0x212,0x19e),_0x547145[_0x95a7e3(0x2e1,0x221)]=_0x95a7e3(0x24b,0x33e)+'62',_0x547145[_0x48b724(0x203,0x16f)+'ity']='high',_0x547145['title']=_0x48b724(0x283,0x385)+'g\x20Sec'+_0x48b724(0x2ee,0x3f3)+'\x20—\x20pe'+_0x95a7e3(0x2c9,0x36c)+'ll\x20on'+'\x20sens'+'itive'+_0x48b724(0x2b8,0x3a4)+_0x95a7e3(0x2bd,0x255),_0x547145[_0x48b724(0x329,0x416)+_0x48b724(0x2a6,0x211)+'n']='Permi'+_0x95a7e3(0x386,0x3b0)+_0x95a7e3(0x306,0x28b)+_0x48b724(0x37c,0x41a)+_0x48b724(0x20f,0x2a3)+_0x48b724(0x36c,0x372)+_0x95a7e3(0x249,0x298)+_0x48b724(0x244,0x1dd)+_0x95a7e3(0x2c3,0x228)+_0x48b724(0x3a6,0x3b9)+_0x48b724(0x2a5,0x180)+_0x95a7e3(0x38a,0x396)+_0x48b724(0x253,0x1b7)+_0x48b724(0x2b6,0x3d9),_0x547145[_0x95a7e3(0x207,0x327)+'ages']=[_0x95a7e3(0x28c,0x394)],_0x547145[_0x95a7e3(0x29f,0x1bb)+'rn']=/\.antMatchers\s*\(\s*["']\/(?:admin|api|internal|manage|actuator)[^"']*["']\s*\)\.permitAll/g,_0x547145[_0x95a7e3(0x1d0,0xeb)]=_0x95a7e3(0x178,0x245)+'re\x20au'+_0x95a7e3(0x15f,0xcd)+_0x95a7e3(0x2b3,0x1de)+_0x95a7e3(0x1dc,0xbf)+'\x20sens'+_0x48b724(0x216,0x325)+_0x95a7e3(0x29b,0x2bc)+_0x48b724(0x2da,0x1fd)+':\x20.an'+_0x95a7e3(0x196,0x1cf)+'hers('+'\x22/adm'+_0x95a7e3(0x373,0x35a)+'\x22).ha'+'sRole'+_0x48b724(0x308,0x40e)+_0x95a7e3(0x332,0x261);const _0x3eda85={};_0x3eda85['id']=_0x95a7e3(0x2b8,0x252)+'EL-00'+'1',_0x3eda85[_0x48b724(0x2fe,0x206)]=_0x48b724(0x1d5,0x1a7)+'17',_0x3eda85['sever'+_0x95a7e3(0x24f,0x18e)]=_0x48b724(0x281,0x2af)+'cal',_0x3eda85[_0x48b724(0x20d,0x242)]=_0x48b724(0x2f5,0x3e4)+_0x48b724(0x2eb,0x40a)+'\x20Lang'+_0x95a7e3(0x197,0x171)+_0x48b724(0x243,0x1f5)+_0x95a7e3(0x378,0x38d)+'—\x20Use'+_0x95a7e3(0x37c,0x39c)+_0x95a7e3(0x16d,0x7a)+_0x48b724(0x16b,0x184)+'pEL',_0x3eda85[_0x95a7e3(0x30c,0x2a7)+_0x48b724(0x2a6,0x25d)+'n']=_0x95a7e3(0x313,0x323)+_0x48b724(0x198,0x1fe)+_0x48b724(0x1b5,0xd8)+'pring'+_0x95a7e3(0x372,0x337)+_0x95a7e3(0x267,0x1fd)+_0x48b724(0x396,0x3f0)+'guage'+'\x20(SpE'+_0x48b724(0x239,0x12f)+_0x95a7e3(0x1f3,0x203)+_0x48b724(0x2c3,0x3aa)+'can\x20e'+_0x48b724(0x2c6,0x3b4)+_0x95a7e3(0x17a,0x184)+_0x48b724(0x275,0x2ee)+_0x95a7e3(0x334,0x2c3)+'e.',_0x3eda85[_0x95a7e3(0x207,0x328)+_0x48b724(0x1a7,0xbf)]=[_0x48b724(0x2a9,0x2f5)],_0x3eda85[_0x48b724(0x2bc,0x365)+'rn']=/(?:ExpressionParser|SpelExpressionParser)\s*\(\s*\)\.parseExpression\s*\(\s*(?:request|param|input|user)/g,_0x3eda85[_0x95a7e3(0x1d0,0x278)]='Never'+'\x20eval'+_0x95a7e3(0x280,0x23e)+_0x48b724(0x277,0x389)+_0x48b724(0x198,0xd3)+_0x48b724(0x1b1,0x224)+'pEL\x20e'+'xpres'+_0x48b724(0x17d,0x11f)+_0x48b724(0x2fb,0x2cc)+_0x95a7e3(0x346,0x446)+_0x95a7e3(0x370,0x3bc)+_0x95a7e3(0x2f1,0x3ea)+_0x48b724(0x360,0x2b5)+_0x48b724(0x3b7,0x2f5)+_0x95a7e3(0x1cd,0x2ab)+'h\x20res'+_0x95a7e3(0x1e8,0xd9)+_0x95a7e3(0x29c,0x2a5)+_0x48b724(0x1fd,0x1ab)+'.';const _0x31d474={};_0x31d474['id']='JAVA-'+_0x95a7e3(0x302,0x3bf)+'01',_0x31d474['cwe']=_0x48b724(0x293,0x386)+'95',_0x31d474[_0x48b724(0x203,0x134)+_0x48b724(0x26c,0x273)]=_0x95a7e3(0x264,0x35a)+_0x95a7e3(0x23d,0x21b),_0x31d474[_0x95a7e3(0x1f0,0x1c2)]=_0x48b724(0x1b0,0x29c)+_0x48b724(0x1d0,0x266)+_0x48b724(0x3bb,0x475)+'rtifi'+_0x95a7e3(0x23a,0x2eb)+_0x95a7e3(0x369,0x2ba)+'icati'+'on',_0x31d474[_0x95a7e3(0x30c,0x3b4)+_0x95a7e3(0x289,0x299)+'n']=_0x48b724(0x374,0x2be)+_0x48b724(0x292,0x217)+'stMan'+_0x48b724(0x1ad,0x192)+'that\x20'+'accep'+'ts\x20al'+_0x48b724(0x39f,0x2ac)+_0x48b724(0x24f,0x2b7)+_0x95a7e3(0x321,0x246)+_0x48b724(0x206,0x15b)+_0x95a7e3(0x34e,0x2da)+_0x48b724(0x221,0x1f5)+_0x48b724(0x3a1,0x49e)+'y.',_0x31d474[_0x95a7e3(0x207,0x203)+_0x48b724(0x1a7,0x274)]=['java'],_0x31d474[_0x95a7e3(0x29f,0x245)+'rn']=/X509TrustManager[^}]*checkServerTrusted[^}]*\{\s*\}/g,_0x31d474[_0x48b724(0x1ed,0x1db)]=_0x95a7e3(0x32c,0x430)+_0x95a7e3(0x2a2,0x3ac)+'fault'+_0x95a7e3(0x229,0x136)+_0x48b724(0x1f5,0x2e2)+_0x48b724(0x2ed,0x327)+'For\x20c'+'ustom'+_0x95a7e3(0x2cd,0x1b7)+_0x95a7e3(0x2b9,0x319)+_0x48b724(0x1fa,0x137)+_0x48b724(0x28a,0x3a9)+_0x95a7e3(0x324,0x39a)+_0x95a7e3(0x354,0x44f)+'e.';const _0x576ca8={};_0x576ca8['id']=_0x95a7e3(0x2b8,0x2b6)+_0x48b724(0x31f,0x2c4)+'02',_0x576ca8[_0x95a7e3(0x2e1,0x2fa)]=_0x48b724(0x293,0x28a)+'95',_0x576ca8[_0x48b724(0x203,0x2d3)+_0x48b724(0x26c,0x30c)]='criti'+'cal',_0x576ca8['title']=_0x48b724(0x1b0,0x1cf)+'led\x20H'+_0x48b724(0x2ef,0x3e6)+'me\x20Ve'+_0x95a7e3(0x1bc,0x1c4)+_0x95a7e3(0x331,0x301),_0x576ca8[_0x95a7e3(0x30c,0x351)+_0x95a7e3(0x289,0x380)+'n']=_0x95a7e3(0x388,0x4a1)+_0x48b724(0x34b,0x26f)+'ll\x20ho'+_0x95a7e3(0x18e,0x1be)+_0x48b724(0x300,0x24a)+_0x48b724(0x1a6,0x210)+_0x95a7e3(0x19e,0x280)+_0x48b724(0x24f,0x29d)+_0x48b724(0x32f,0x2b5)+'ostna'+_0x95a7e3(0x1a0,0x2a8)+_0x95a7e3(0x1bc,0x22f)+_0x95a7e3(0x331,0x2e1)+'.',_0x576ca8[_0x95a7e3(0x207,0x306)+_0x95a7e3(0x18a,0x104)]=[_0x48b724(0x2a9,0x289)],_0x576ca8[_0x95a7e3(0x29f,0x383)+'rn']=/(?:ALLOW_ALL_HOSTNAME_VERIFIER|NoopHostnameVerifier|setHostnameVerifier\s*\(\s*(?:SSLSocketFactory\.ALLOW_ALL|new\s+(?:AllowAll|Noop)))/g,_0x576ca8['fix']=_0x95a7e3(0x32c,0x3e2)+_0x48b724(0x2bf,0x363)+_0x48b724(0x24d,0x30f)+_0x95a7e3(0x206,0x189)+_0x95a7e3(0x1da,0x1e5)+_0x48b724(0x1e6,0x1cd)+'ier.\x20'+_0x95a7e3(0x357,0x354)+_0x48b724(0x1f0,0x21a)+_0x48b724(0x2bd,0x317)+_0x95a7e3(0x150,0x215)+_0x48b724(0x327,0x246)+_0x95a7e3(0x39c,0x32d)+_0x95a7e3(0x347,0x433)+_0x48b724(0x260,0x18d)+'hostn'+_0x95a7e3(0x1ce,0xf8);const _0x5b5cbc={};_0x5b5cbc['id']=_0x48b724(0x2d5,0x2b0)+_0x95a7e3(0x2b7,0x1c9)+'01',_0x5b5cbc[_0x48b724(0x2fe,0x37a)]=_0x95a7e3(0x2c8,0x3dd)+'17',_0x5b5cbc[_0x48b724(0x203,0x2f0)+_0x48b724(0x26c,0x2e5)]='mediu'+'m',_0x5b5cbc[_0x48b724(0x20d,0x1de)]='Log\x20I'+_0x48b724(0x178,0xfe)+_0x48b724(0x30f,0x3d9)+'\x20Unsa'+'nitiz'+'ed\x20us'+_0x95a7e3(0x27e,0x287)+_0x48b724(0x394,0x2c8)+_0x95a7e3(0x200,0x26c),_0x5b5cbc[_0x48b724(0x329,0x3ec)+_0x95a7e3(0x289,0x28b)+'n']=_0x95a7e3(0x313,0x24c)+_0x48b724(0x198,0xe1)+_0x48b724(0x1e3,0x1c4)+_0x95a7e3(0x22f,0x125)+'ateme'+_0x95a7e3(0x352,0x334)+_0x95a7e3(0x286,0x2b6)+_0x95a7e3(0x2c5,0x241)+_0x48b724(0x3bc,0x43e)+_0x95a7e3(0x269,0x34a)+_0x48b724(0x2ca,0x335)+_0x95a7e3(0x14d,0x22f)+_0x95a7e3(0x247,0x2fb)+_0x95a7e3(0x1e4,0x2d6)+'g4j-s'+_0x95a7e3(0x208,0x135)+_0x95a7e3(0x22b,0x1d3)+'rabil'+_0x95a7e3(0x1ed,0x306)+_0x95a7e3(0x301,0x1fc)+_0x95a7e3(0x304,0x33c)+_0x48b724(0x19c,0x158)+'8).',_0x5b5cbc[_0x48b724(0x224,0x14a)+_0x48b724(0x1a7,0x219)]=[_0x95a7e3(0x28c,0x1a7)],_0x5b5cbc['patte'+'rn']=/(?:logger|log|LOG)\.(?:info|debug|warn|error|trace|fatal)\s*\(\s*(?:["'][^"']*["']\s*\+|\+\s*(?:request|param|input|user))/g,_0x5b5cbc[_0x95a7e3(0x1d0,0x272)]=_0x95a7e3(0x1ae,0x10d)+_0x95a7e3(0x2f5,0x217)+_0x95a7e3(0x158,0x79)+_0x95a7e3(0x360,0x297)+_0x48b724(0x338,0x2e8)+_0x48b724(0x2b0,0x2e1)+'.info'+_0x48b724(0x19b,0x2c2)+_0x95a7e3(0x172,0x1da)+_0x95a7e3(0x2c1,0x1ae)+_0x95a7e3(0x1d7,0x2da)+_0x48b724(0x344,0x3e8)+'ze(us'+_0x48b724(0x232,0x2e3)+_0x95a7e3(0x17c,0x195)+'Strip'+_0x95a7e3(0x195,0x1df)+_0x95a7e3(0x351,0x338)+_0x95a7e3(0x341,0x2ae)+_0x95a7e3(0x385,0x48c)+'p\x20pat'+_0x48b724(0x263,0x334)+'.';export const javaRules=[_0x16642e,_0x46d8a3,_0x2ed435,_0x4defd2,_0x4cfd74,_0x4ea3f4,_0x119990,_0xb23e62,_0x4258a4,_0x500e36,_0x33d109,_0x9bc915,_0x36cb12,_0x12382d,_0x4c2a2f,_0x547145,_0x3eda85,_0x31d474,_0x576ca8,_0x5b5cbc];
|
|
1
|
+
(function(_0x1f84ea,_0x1bf959){const _0x2f2929={_0x528782:0x423,_0x2d287f:0x48f,_0x3d1ae2:0x3fb,_0x238886:0x495,_0x31053f:0x48c,_0x58587e:0x31e,_0x2f13e7:0x5a7,_0x410caf:0x495,_0x31e0a3:0x453,_0x28050c:0x305,_0x12f9cd:0x3f4},_0x673171={_0x284811:0x10a};function _0x1495c4(_0x3ee945,_0x5d2a09){return _0x17ac(_0x5d2a09-_0x673171._0x284811,_0x3ee945);}function _0x308300(_0x1a116d,_0x5523d2){return _0x17ac(_0x5523d2-0x257,_0x1a116d);}const _0xb1ecaf=_0x1f84ea();while(!![]){try{const _0x3f8b0=-parseInt(_0x308300(0x476,_0x2f2929._0x528782))/(0x1ae*0xd+0xc88*-0x2+0x33b)+parseInt(_0x308300(_0x2f2929._0x2d287f,_0x2f2929._0x3d1ae2))/(0x579*-0x3+-0x2144+0x31b1)+parseInt(_0x1495c4(0x388,0x40e))/(-0x60a+-0x252c+0x2b39)*(-parseInt(_0x1495c4(0x4b2,0x4db))/(-0x7*-0x4fd+0x1290+-0x1*0x3577))+parseInt(_0x308300(_0x2f2929._0x238886,_0x2f2929._0x31053f))/(0x19bd*-0x1+0x1e38+-0x476)*(parseInt(_0x1495c4(0x21f,_0x2f2929._0x58587e))/(0x115*0x1+-0x3*-0x9ae+0x1*-0x1e19))+parseInt(_0x1495c4(0x2bb,0x327))/(-0x1*0x259d+-0x1*0x14ba+0x1*0x3a5e)*(-parseInt(_0x308300(0x5f7,_0x2f2929._0x2f13e7))/(0x35*-0x89+-0x98c+0x25f1))+-parseInt(_0x308300(_0x2f2929._0x410caf,0x5af))/(-0x1392+-0x1*0x165a+0x29f5)*(parseInt(_0x1495c4(_0x2f2929._0x31e0a3,0x436))/(-0x8*0x17+0x1946+0xc42*-0x2))+parseInt(_0x308300(_0x2f2929._0x28050c,_0x2f2929._0x12f9cd))/(-0x8e*-0x2+-0x1*0x262b+-0x128d*-0x2);if(_0x3f8b0===_0x1bf959)break;else _0xb1ecaf['push'](_0xb1ecaf['shift']());}catch(_0x7dbf99){_0xb1ecaf['push'](_0xb1ecaf['shift']());}}}(_0x5173,-0x1*0xea7b5+-0xd232c+-0xad2e*-0x3c));const _0x5eaf01={};_0x5eaf01['id']='JAVA-'+'SQLI-'+_0x45cb19(0x567,0x55a),_0x5eaf01[_0x2b9155(0x3bb,0x49d)]=_0x2b9155(0x23b,0x2d6)+'9',_0x5eaf01[_0x45cb19(0x498,0x3f0)+'ity']=_0x2b9155(0x331,0x3c8)+_0x45cb19(0x441,0x519),_0x5eaf01[_0x45cb19(0x455,0x4e7)]=_0x2b9155(0x36a,0x28f)+_0x45cb19(0x425,0x4f2)+_0x45cb19(0x60b,0x542)+'\x20Stri'+_0x2b9155(0x3f4,0x30a)+_0x2b9155(0x3ac,0x41f)+_0x2b9155(0x34a,0x439)+_0x45cb19(0x4d4,0x3dd)+_0x45cb19(0x4f1,0x5e5),_0x5eaf01[_0x2b9155(0x3e6,0x31a)+_0x45cb19(0x544,0x4f9)+'n']=_0x45cb19(0x550,0x5de)+'tenat'+_0x2b9155(0x329,0x2d6)+_0x2b9155(0x3c1,0x2d9)+'nput\x20'+_0x2b9155(0x36c,0x278)+'SQL\x20q'+_0x45cb19(0x5e6,0x64e)+_0x2b9155(0x400,0x2e2)+'bles\x20'+'injec'+_0x2b9155(0x24c,0x1b1)+_0x2b9155(0x43c,0x384)+_0x45cb19(0x58b,0x46c),_0x5eaf01[_0x45cb19(0x448,0x4f8)+_0x45cb19(0x4c8,0x563)]=[_0x2b9155(0x2c9,0x248)],_0x5eaf01[_0x2b9155(0x2c2,0x203)+'rn']=/(?:createStatement|prepareStatement|createQuery|createNativeQuery|executeQuery|executeUpdate)\s*\(\s*(?:["'][^"']*["']\s*\+|\+\s*["'].*(?:SELECT|INSERT|UPDATE|DELETE|WHERE|FROM))/gi,_0x5eaf01[_0x2b9155(0x34d,0x356)]=_0x45cb19(0x5d4,0x533)+_0x2b9155(0x37d,0x35a)+_0x45cb19(0x48f,0x497)+'temen'+_0x2b9155(0x28d,0x2ce)+'h\x20par'+_0x2b9155(0x303,0x32e)+_0x2b9155(0x382,0x3f2)+_0x2b9155(0x338,0x36a)+_0x2b9155(0x265,0x30d)+_0x2b9155(0x37f,0x3c3)+_0x2b9155(0x433,0x4b1)+_0x2b9155(0x2dc,0x340)+_0x2b9155(0x286,0x1d9)+_0x45cb19(0x597,0x5a3)+_0x2b9155(0x279,0x367)+_0x2b9155(0x39a,0x2fc)+_0x45cb19(0x560,0x5b6)+'ment('+_0x45cb19(0x569,0x4dc)+_0x2b9155(0x273,0x32d)+_0x2b9155(0x242,0x20a)+_0x45cb19(0x4f3,0x5a6)+_0x2b9155(0x201,0x14a)+_0x45cb19(0x4be,0x49b)+_0x2b9155(0x289,0x351)+_0x45cb19(0x4dd,0x5e1)+_0x45cb19(0x63e,0x5c3)+_0x45cb19(0x505,0x423)+_0x2b9155(0x317,0x3d0)+_0x45cb19(0x495,0x53a)+';';const _0x264370={};function _0x2b9155(_0x929bb6,_0x59b70d){const _0x1e2daa={_0xb2e351:0x67};return _0x17ac(_0x929bb6-_0x1e2daa._0xb2e351,_0x59b70d);}_0x264370['id']=_0x2b9155(0x291,0x379)+_0x2b9155(0x2f0,0x2f5)+'002',_0x264370[_0x45cb19(0x5d9,0x5fa)]=_0x45cb19(0x459,0x57e)+'9',_0x264370['sever'+'ity']=_0x2b9155(0x331,0x3f5)+_0x45cb19(0x441,0x351),_0x264370[_0x2b9155(0x237,0x1cf)]=_0x2b9155(0x36a,0x263)+_0x2b9155(0x207,0x1cb)+_0x2b9155(0x3ed,0x375)+'\x20Stri'+'ng.fo'+'rmat\x20'+_0x45cb19(0x430,0x477)+_0x2b9155(0x29b,0x1ad)+'ry',_0x264370[_0x2b9155(0x3e6,0x477)+'iptio'+'n']='Using'+'\x20Stri'+_0x45cb19(0x633,0x59c)+_0x45cb19(0x4df,0x529)+'to\x20bu'+_0x45cb19(0x627,0x552)+_0x2b9155(0x3d2,0x3df)+'eries'+_0x2b9155(0x240,0x339)+_0x45cb19(0x524,0x4cf)+_0x2b9155(0x348,0x407)+_0x2b9155(0x27e,0x2bd),_0x264370[_0x45cb19(0x448,0x3bd)+_0x45cb19(0x4c8,0x54d)]=[_0x2b9155(0x2c9,0x31c)],_0x264370[_0x45cb19(0x4e0,0x552)+'rn']=/String\.format\s*\(\s*["'](?:SELECT|INSERT|UPDATE|DELETE|DROP|ALTER)\b/gi,_0x264370[_0x45cb19(0x56b,0x63a)]=_0x2b9155(0x225,0x332)+_0x2b9155(0x25d,0x246)+_0x45cb19(0x487,0x3da)+_0x2b9155(0x385,0x3b3)+_0x2b9155(0x402,0x368)+'\x20inst'+_0x45cb19(0x632,0x52f)+_0x2b9155(0x2df,0x263)+_0x45cb19(0x57f,0x607)+'ormat'+_0x2b9155(0x2e1,0x28a)+_0x2b9155(0x3fc,0x4f8);const _0x466b0f={};_0x466b0f['id']=_0x2b9155(0x291,0x2bb)+_0x45cb19(0x4bc,0x397)+'01',_0x466b0f[_0x2b9155(0x3bb,0x3a9)]=_0x45cb19(0x43c,0x384)+'11',_0x466b0f[_0x45cb19(0x498,0x4af)+_0x45cb19(0x5b9,0x585)]='criti'+_0x45cb19(0x441,0x53c),_0x466b0f[_0x45cb19(0x455,0x40b)]=_0x45cb19(0x42c,0x4af)+_0x45cb19(0x549,0x4a5)+_0x2b9155(0x328,0x327)+_0x45cb19(0x587,0x5b3)+'(XXE)'+_0x2b9155(0x37c,0x2fc)+'safe\x20'+_0x2b9155(0x359,0x3dd)+_0x2b9155(0x2b1,0x255)+'g',_0x466b0f[_0x45cb19(0x604,0x6ef)+_0x45cb19(0x544,0x627)+'n']=_0x2b9155(0x359,0x36e)+'arser'+_0x2b9155(0x367,0x25d)+_0x45cb19(0x444,0x430)+'disab'+'led\x20e'+_0x2b9155(0x32b,0x387)+'al\x20en'+_0x45cb19(0x437,0x503)+_0x45cb19(0x62b,0x70a)+_0x45cb19(0x559,0x465)+'\x20arbi'+'trary'+'\x20file'+_0x2b9155(0x30a,0x3da)+'\x20perf'+_0x45cb19(0x4f2,0x4df)+_0x45cb19(0x45b,0x397),_0x466b0f['langu'+_0x2b9155(0x2aa,0x3aa)]=['java'],_0x466b0f[_0x45cb19(0x4e0,0x4d0)+'rn']=/(?:DocumentBuilderFactory|SAXParserFactory|XMLInputFactory|TransformerFactory|SchemaFactory)\.newInstance\s*\(/g,_0x466b0f[_0x2b9155(0x34d,0x22f)]='Disab'+'le\x20ex'+_0x45cb19(0x43e,0x489)+'l\x20ent'+_0x2b9155(0x43d,0x3b5)+_0x2b9155(0x321,0x309)+_0x2b9155(0x28a,0x1db)+_0x2b9155(0x3e3,0x353)+_0x45cb19(0x47c,0x365)+_0x2b9155(0x2cd,0x36c)+_0x45cb19(0x5ed,0x585)+'pache'+_0x45cb19(0x5c3,0x678)+_0x2b9155(0x32e,0x401)+_0x45cb19(0x5fc,0x6de)+'es/di'+'sallo'+'w-doc'+_0x2b9155(0x28b,0x2da)+_0x45cb19(0x480,0x57d)+_0x2b9155(0x31d,0x225)+'e);';const _0x1d65c3={};_0x1d65c3['id']='JAVA-'+_0x45cb19(0x50d,0x426)+_0x2b9155(0x2e3,0x23f),_0x1d65c3['cwe']=_0x2b9155(0x432,0x46d)+'02',_0x1d65c3[_0x2b9155(0x27a,0x174)+'ity']=_0x45cb19(0x54f,0x64d)+_0x45cb19(0x441,0x3fe),_0x1d65c3[_0x45cb19(0x455,0x41f)]=_0x2b9155(0x3f9,0x3d0)+_0x2b9155(0x2fa,0x415)+_0x45cb19(0x489,0x5af)+_0x2b9155(0x436,0x33d)+_0x45cb19(0x46a,0x471)+_0x2b9155(0x3ce,0x3b8)+_0x2b9155(0x2f5,0x27d)+_0x45cb19(0x5da,0x6c0)+_0x2b9155(0x36f,0x41f),_0x1d65c3[_0x45cb19(0x604,0x667)+_0x45cb19(0x544,0x505)+'n']=_0x45cb19(0x4c4,0x4ae)+_0x45cb19(0x414,0x354)+_0x2b9155(0x3c9,0x3d8)+_0x2b9155(0x292,0x1e6)+_0x45cb19(0x625,0x6bd)+_0x2b9155(0x1f5,0x29e)+_0x2b9155(0x215,0x193)+'\x20on\x20u'+_0x2b9155(0x426,0x350)+_0x45cb19(0x55c,0x4fc)+_0x2b9155(0x376,0x2e1)+_0x45cb19(0x434,0x398)+'ecute'+_0x2b9155(0x2bd,0x340)+_0x45cb19(0x467,0x3d6)+_0x2b9155(0x405,0x51f)+'\x20(Apa'+_0x45cb19(0x647,0x71f)+_0x2b9155(0x29d,0x288)+_0x2b9155(0x302,0x2e7)+_0x2b9155(0x239,0x2dd)+_0x2b9155(0x203,0x194)+').',_0x1d65c3[_0x45cb19(0x448,0x40d)+_0x2b9155(0x2aa,0x2d1)]=[_0x2b9155(0x2c9,0x364)],_0x1d65c3[_0x2b9155(0x2c2,0x327)+'rn']=/(?:ObjectInputStream|readObject|readUnshared)\s*\(/g,_0x1d65c3[_0x2b9155(0x34d,0x30b)]=_0x45cb19(0x4f0,0x402)+'SON/P'+'rotob'+_0x45cb19(0x4f7,0x4f4)+_0x2b9155(0x1fa,0x2c8)+'.\x20If\x20'+'Objec'+_0x45cb19(0x5e7,0x5c7)+_0x45cb19(0x4b0,0x50e)+'am\x20is'+_0x2b9155(0x428,0x3a1)+_0x2b9155(0x2f2,0x386)+'mplem'+_0x45cb19(0x572,0x690)+_0x2b9155(0x3eb,0x436)+'Input'+_0x45cb19(0x4c7,0x45e)+_0x2b9155(0x2a8,0x23d)+_0x2b9155(0x3f3,0x4e5)+_0x2b9155(0x401,0x4f6)+_0x2b9155(0x21d,0x283)+'ict\x20a'+'llowe'+'d\x20cla'+'sses.';function _0x45cb19(_0x55ec2f,_0x3267f0){return _0x17ac(_0x55ec2f-0x285,_0x3267f0);}const _0x23b02f={};_0x23b02f['id']=_0x2b9155(0x291,0x286)+_0x45cb19(0x50d,0x4ff)+_0x45cb19(0x57c,0x617),_0x23b02f['cwe']=_0x45cb19(0x650,0x642)+'02',_0x23b02f['sever'+_0x45cb19(0x5b9,0x4e3)]=_0x45cb19(0x54f,0x46c)+'cal',_0x23b02f[_0x45cb19(0x455,0x34f)]='Insec'+_0x2b9155(0x2fa,0x1f9)+_0x2b9155(0x26b,0x1af)+'aliza'+'tion\x20'+_0x45cb19(0x5e0,0x6df)+'Decod'+'er',_0x23b02f[_0x2b9155(0x3e6,0x3aa)+_0x2b9155(0x326,0x3c8)+'n']=_0x45cb19(0x5cc,0x61f)+_0x2b9155(0x248,0x296)+_0x45cb19(0x47a,0x39e)+_0x2b9155(0x32a,0x398)+_0x2b9155(0x387,0x41d)+'bitra'+_0x2b9155(0x374,0x39a)+'de\x20wh'+_0x45cb19(0x537,0x50e)+_0x45cb19(0x5f8,0x6f5)+_0x2b9155(0x329,0x239)+_0x2b9155(0x426,0x4e1)+'ted\x20X'+_0x45cb19(0x595,0x603)+'put.',_0x23b02f[_0x45cb19(0x448,0x3ee)+_0x2b9155(0x2aa,0x2f1)]=[_0x2b9155(0x2c9,0x368)],_0x23b02f[_0x45cb19(0x4e0,0x43f)+'rn']=/XMLDecoder\s*\(\s*new/g,_0x23b02f[_0x2b9155(0x34d,0x35a)]=_0x2b9155(0x39e,0x40b)+'t\x20use'+'\x20XMLD'+_0x45cb19(0x5a1,0x497)+_0x45cb19(0x4ad,0x4fe)+_0x45cb19(0x5ab,0x66b)+_0x45cb19(0x53d,0x606)+_0x45cb19(0x645,0x682)+_0x2b9155(0x3a7,0x33b)+'se\x20a\x20'+_0x2b9155(0x1f2,0x307)+_0x45cb19(0x577,0x515)+_0x45cb19(0x48d,0x451)+_0x2b9155(0x396,0x3fc)+'SON\x20i'+_0x2b9155(0x394,0x3ba)+'d.';const _0x2cac40={};_0x2cac40['id']=_0x2b9155(0x291,0x313)+_0x45cb19(0x536,0x460)+_0x2b9155(0x349,0x307),_0x2cac40[_0x45cb19(0x5d9,0x57e)]=_0x45cb19(0x41d,0x536)+'8',_0x2cac40[_0x45cb19(0x498,0x442)+_0x2b9155(0x39b,0x4a2)]=_0x2b9155(0x331,0x2b7)+_0x2b9155(0x223,0x318),_0x2cac40['title']=_0x45cb19(0x57a,0x643)+_0x45cb19(0x432,0x35b)+_0x45cb19(0x566,0x600)+'on\x20—\x20'+_0x45cb19(0x590,0x567)+_0x2b9155(0x2ff,0x221)+_0x2b9155(0x35b,0x2a3)+_0x2b9155(0x39c,0x3ff)+_0x2b9155(0x34e,0x425)+'\x20inpu'+'t',_0x2cac40[_0x45cb19(0x604,0x5be)+_0x45cb19(0x544,0x5c0)+'n']='Runti'+_0x2b9155(0x2ff,0x22f)+_0x45cb19(0x526,0x61b)+'with\x20'+_0x2b9155(0x276,0x1b3)+_0x45cb19(0x439,0x543)+_0x2b9155(0x22e,0x351)+_0x45cb19(0x426,0x502)+_0x45cb19(0x45e,0x4e3)+_0x2b9155(0x325,0x3d1)+'\x20comm'+_0x2b9155(0x298,0x1e3)+'nject'+_0x45cb19(0x564,0x671),_0x2cac40[_0x2b9155(0x22a,0x309)+_0x2b9155(0x2aa,0x2ca)]=['java'],_0x2cac40[_0x45cb19(0x4e0,0x572)+'rn']=/Runtime\.getRuntime\s*\(\s*\)\.exec\s*\(\s*(?:["'][^"']*["']\s*\+|\+)/g,_0x2cac40[_0x2b9155(0x34d,0x35f)]='Use\x20P'+_0x2b9155(0x313,0x3fd)+'sBuil'+_0x45cb19(0x5b6,0x65b)+_0x45cb19(0x411,0x50f)+_0x45cb19(0x5d8,0x6a5)+'nt\x20li'+_0x2b9155(0x373,0x36c)+_0x2b9155(0x391,0x2cc)+_0x45cb19(0x5f8,0x6e0)+_0x45cb19(0x60d,0x65a)+'er(\x22c'+_0x45cb19(0x4d9,0x588)+_0x45cb19(0x44b,0x3dd)+'\x22,\x20\x22a'+'rg2\x22)'+_0x2b9155(0x2a5,0x2e4)+_0x45cb19(0x5f2,0x4f9);const _0x5393b6={};_0x5393b6['id']=_0x45cb19(0x4af,0x588)+_0x45cb19(0x536,0x53d)+_0x45cb19(0x5b0,0x651),_0x5393b6[_0x45cb19(0x5d9,0x54f)]=_0x45cb19(0x41d,0x352)+'8',_0x5393b6['sever'+_0x45cb19(0x5b9,0x55a)]=_0x45cb19(0x54f,0x5e0)+'cal',_0x5393b6[_0x45cb19(0x455,0x574)]='Comma'+_0x2b9155(0x214,0x297)+_0x2b9155(0x348,0x39d)+'on\x20—\x20'+'Proce'+_0x2b9155(0x200,0x276)+_0x45cb19(0x607,0x5c3)+_0x45cb19(0x5ce,0x509)+_0x2b9155(0x305,0x35f),_0x5393b6['descr'+_0x2b9155(0x326,0x34c)+'n']=_0x2b9155(0x21f,0x1e8)+'\x20Proc'+_0x45cb19(0x468,0x44f)+'ilder'+'\x20with'+_0x45cb19(0x42a,0x39b)+'l\x20int'+'erpre'+'ter\x20a'+_0x45cb19(0x461,0x342)+'namic'+_0x2b9155(0x270,0x351)+'ands\x20'+_0x45cb19(0x56f,0x590)+_0x2b9155(0x222,0x229)+_0x2b9155(0x348,0x30d)+'on.',_0x5393b6[_0x2b9155(0x22a,0x288)+'ages']=[_0x45cb19(0x4e7,0x53c)],_0x5393b6[_0x45cb19(0x4e0,0x506)+'rn']=/ProcessBuilder\s*\(\s*(?:Arrays\.asList\s*\()?\s*["'](?:bash|sh|cmd|cmd\.exe)['"]\s*,\s*["'](?:-c|\/c)['"]\s*,/g,_0x5393b6[_0x2b9155(0x34d,0x3c6)]='Avoid'+_0x2b9155(0x20c,0x11f)+_0x45cb19(0x626,0x5f8)+_0x45cb19(0x578,0x5fe)+_0x2b9155(0x422,0x531)+'se\x20Pr'+_0x45cb19(0x5f8,0x54a)+_0x2b9155(0x3ef,0x4ac)+'er\x20wi'+_0x2b9155(0x3cc,0x4d2)+_0x2b9155(0x20a,0x1c9)+_0x45cb19(0x4bd,0x41d)+_0x2b9155(0x244,0x1a8)+_0x45cb19(0x493,0x599)+_0x2b9155(0x236,0x168)+_0x45cb19(0x614,0x5e8);const _0x4528e9={};_0x4528e9['id']='JAVA-'+_0x45cb19(0x423,0x4e9)+'001',_0x4528e9[_0x45cb19(0x5d9,0x625)]=_0x2b9155(0x350,0x244)+'2',_0x4528e9[_0x2b9155(0x27a,0x248)+_0x2b9155(0x39b,0x3e5)]=_0x2b9155(0x416,0x4dc),_0x4528e9[_0x2b9155(0x237,0x1d4)]=_0x45cb19(0x613,0x5b2)+'Trave'+'rsal\x20'+_0x45cb19(0x4fc,0x5ab)+'r\x20inp'+'ut\x20in'+_0x2b9155(0x322,0x384)+_0x45cb19(0x5ac,0x693),_0x4528e9[_0x2b9155(0x3e6,0x3af)+_0x45cb19(0x544,0x581)+'n']=_0x45cb19(0x5b5,0x66a)+_0x45cb19(0x54b,0x5f0)+_0x2b9155(0x3a1,0x38b)+_0x2b9155(0x36e,0x2f7)+_0x45cb19(0x474,0x541)+_0x2b9155(0x3af,0x47b)+_0x2b9155(0x2cf,0x33b)+'ut\x20sa'+_0x45cb19(0x530,0x529)+_0x45cb19(0x54d,0x658)+'\x20allo'+'ws\x20re'+_0x2b9155(0x3a6,0x397)+'/writ'+_0x45cb19(0x5f1,0x640)+'rbitr'+'ary\x20f'+_0x45cb19(0x5c9,0x4ea),_0x4528e9[_0x2b9155(0x22a,0x2fa)+_0x2b9155(0x2aa,0x26f)]=[_0x2b9155(0x2c9,0x212)],_0x4528e9['patte'+'rn']=/new\s+File\s*\(\s*(?:request\.getParameter|request\.getAttribute|params\.get|[^)]+\+\s*(?:request|param|input|user))/g,_0x4528e9['fix']='Canon'+_0x2b9155(0x42c,0x459)+_0x45cb19(0x641,0x70b)+_0x2b9155(0x320,0x43f)+_0x2b9155(0x25b,0x310)+_0x45cb19(0x563,0x661)+_0x45cb19(0x4d3,0x419)+'icalP'+_0x2b9155(0x2a7,0x1c6)+_0x2b9155(0x31b,0x20c)+'verif'+_0x45cb19(0x586,0x500)+'start'+'s\x20wit'+_0x2b9155(0x221,0x199)+'\x20expe'+_0x45cb19(0x576,0x625)+_0x2b9155(0x330,0x3b4)+'direc'+_0x45cb19(0x4a8,0x4f8);const _0x341dfc={};_0x341dfc['id']=_0x45cb19(0x4af,0x3f4)+'SSRF-'+'001',_0x341dfc['cwe']='CWE-9'+'18',_0x341dfc[_0x45cb19(0x498,0x3e9)+_0x45cb19(0x5b9,0x521)]=_0x2b9155(0x416,0x39a),_0x341dfc[_0x45cb19(0x455,0x3b7)]='Serve'+_0x45cb19(0x4a1,0x487)+_0x2b9155(0x299,0x313)+_0x2b9155(0x35d,0x3c1)+_0x45cb19(0x5c1,0x6d8)+_0x45cb19(0x463,0x556)+_0x2b9155(0x3d0,0x2cc)+_0x2b9155(0x266,0x199)+_0x2b9155(0x309,0x3f4)+_0x45cb19(0x659,0x675)+_0x2b9155(0x2f7,0x1ee)+'ut',_0x341dfc[_0x2b9155(0x3e6,0x3a1)+_0x45cb19(0x544,0x428)+'n']=_0x45cb19(0x5d3,0x665)+_0x45cb19(0x5e4,0x539)+_0x2b9155(0x388,0x38d)+_0x2b9155(0x419,0x51c)+_0x45cb19(0x507,0x4b4)+'ction'+'\x20from'+'\x20user'+_0x45cb19(0x4ea,0x5f1)+'t\x20can'+_0x45cb19(0x517,0x4c0)+_0x2b9155(0x3f0,0x4bd)+'terna'+'l\x20ser'+_0x45cb19(0x427,0x442)+'.',_0x341dfc[_0x2b9155(0x22a,0x306)+_0x2b9155(0x2aa,0x1b5)]=[_0x45cb19(0x4e7,0x421)],_0x341dfc['patte'+'rn']=/new\s+URL\s*\(\s*(?:request\.getParameter|request\.getAttribute|params\.get|[^)]+\+\s*(?:request|param|input|user))/g,_0x341dfc[_0x45cb19(0x56b,0x5a8)]=_0x2b9155(0x231,0x194)+_0x2b9155(0x241,0x23f)+_0x2b9155(0x3cb,0x447)+_0x2b9155(0x218,0x1b8)+_0x45cb19(0x603,0x62a)+'allow'+_0x45cb19(0x488,0x574)+'of\x20al'+'lowed'+_0x45cb19(0x643,0x63d)+_0x2b9155(0x29a,0x251)+'nd\x20ho'+_0x45cb19(0x606,0x70d)+_0x45cb19(0x4d2,0x55a)+'\x20priv'+'ate\x20I'+_0x2b9155(0x2db,0x20f)+_0x2b9155(0x2f4,0x3a5);const _0x2f9c0e={};_0x2f9c0e['id']=_0x2b9155(0x291,0x362)+'CRYPT'+_0x45cb19(0x575,0x673),_0x2f9c0e['cwe']=_0x45cb19(0x41c,0x3f2)+'27',_0x2f9c0e[_0x2b9155(0x27a,0x2cd)+_0x45cb19(0x5b9,0x6bd)]='high',_0x2f9c0e[_0x2b9155(0x237,0x254)]=_0x45cb19(0x64e,0x557)+_0x45cb19(0x438,0x409)+_0x45cb19(0x509,0x4d9)+_0x45cb19(0x570,0x542)+_0x2b9155(0x2a3,0x321)+_0x45cb19(0x496,0x4cd)+'1',_0x2f9c0e[_0x2b9155(0x3e6,0x4a9)+_0x45cb19(0x544,0x66a)+'n']=_0x45cb19(0x48b,0x44e)+'nd\x20SH'+_0x2b9155(0x2c3,0x1de)+_0x2b9155(0x3b9,0x474)+_0x45cb19(0x62e,0x6b9)+_0x2b9155(0x335,0x29c)+_0x45cb19(0x420,0x31e)+_0x45cb19(0x4ca,0x45b)+_0x2b9155(0x3d1,0x403)+_0x2b9155(0x288,0x227)+'rity\x20'+_0x2b9155(0x3a4,0x33c)+_0x2b9155(0x41e,0x524),_0x2f9c0e['langu'+_0x2b9155(0x2aa,0x1ce)]=['java'],_0x2f9c0e[_0x45cb19(0x4e0,0x598)+'rn']=/MessageDigest\.getInstance\s*\(\s*["'](?:MD5|SHA-?1)["']\s*\)/gi,_0x2f9c0e[_0x2b9155(0x34d,0x2d9)]=_0x45cb19(0x46d,0x512)+_0x2b9155(0x30d,0x308)+_0x45cb19(0x62d,0x57c)+_0x45cb19(0x5e5,0x603)+'ger:\x20'+'Messa'+_0x45cb19(0x4cc,0x4c9)+_0x2b9155(0x28e,0x2b2)+_0x45cb19(0x490,0x379)+_0x45cb19(0x472,0x4ca)+'(\x22SHA'+_0x2b9155(0x23a,0x32f)+').';const _0x39ae75={};_0x39ae75['id']=_0x45cb19(0x4af,0x563)+_0x2b9155(0x33c,0x385)+'O-002',_0x39ae75[_0x2b9155(0x3bb,0x44f)]=_0x2b9155(0x1fe,0x212)+'27',_0x39ae75['sever'+_0x2b9155(0x39b,0x455)]=_0x2b9155(0x331,0x3f1)+_0x2b9155(0x223,0x22b),_0x39ae75[_0x2b9155(0x237,0x203)]=_0x2b9155(0x430,0x513)+_0x45cb19(0x438,0x35b)+_0x2b9155(0x2eb,0x37f)+_0x2b9155(0x352,0x364)+_0x45cb19(0x4e6,0x5be)+_0x45cb19(0x44d,0x496)+_0x2b9155(0x246,0x18c),_0x39ae75[_0x2b9155(0x3e6,0x2d8)+_0x45cb19(0x544,0x4a3)+'n']=_0x2b9155(0x2ec,0x364)+_0x45cb19(0x514,0x40a)+_0x2b9155(0x3e0,0x39b)+_0x45cb19(0x64f,0x661)+_0x2b9155(0x41b,0x52e)+_0x45cb19(0x4b6,0x548)+_0x2b9155(0x389,0x4ae)+_0x2b9155(0x370,0x2a9)+'y\x20bre'+_0x2b9155(0x26c,0x1f7)+'e.\x203D'+'ES\x20(D'+_0x45cb19(0x435,0x431)+_0x45cb19(0x48c,0x3bd)+_0x45cb19(0x508,0x4d5)+'cated'+'.',_0x39ae75[_0x45cb19(0x448,0x534)+_0x45cb19(0x4c8,0x51a)]=['java'],_0x39ae75[_0x2b9155(0x2c2,0x2dd)+'rn']=/Cipher\.getInstance\s*\(\s*["'](?:DES|DESede|DES\/|DESede\/)/gi,_0x39ae75['fix']=_0x2b9155(0x3ff,0x346)+_0x45cb19(0x64c,0x709)+_0x45cb19(0x57e,0x665)+_0x2b9155(0x314,0x36c)+_0x45cb19(0x4cb,0x3d4)+_0x2b9155(0x30f,0x319)+'getIn'+'stanc'+_0x2b9155(0x258,0x1f1)+'S/GCM'+'/NoPa'+_0x2b9155(0x2be,0x329)+'\x22)';const _0x27def3={};_0x27def3['id']=_0x2b9155(0x291,0x259)+'CRYPT'+_0x45cb19(0x584,0x60d),_0x27def3[_0x45cb19(0x5d9,0x57d)]=_0x45cb19(0x41c,0x328)+'27',_0x27def3[_0x45cb19(0x498,0x385)+_0x45cb19(0x5b9,0x54f)]=_0x45cb19(0x634,0x603),_0x27def3['title']='Weak\x20'+_0x45cb19(0x438,0x3a8)+_0x45cb19(0x509,0x405)+_0x45cb19(0x570,0x636)+'ECB\x20M'+_0x45cb19(0x52e,0x426),_0x27def3['descr'+_0x45cb19(0x544,0x555)+'n']=_0x45cb19(0x5de,0x58c)+_0x2b9155(0x3ea,0x39b)+_0x45cb19(0x5fa,0x54b)+'ts\x20id'+_0x2b9155(0x43a,0x326)+_0x2b9155(0x3b2,0x3f3)+'ocks\x20'+_0x2b9155(0x336,0x21c)+'entic'+_0x2b9155(0x2fd,0x2d9)+'phert'+_0x45cb19(0x55d,0x54d)+'revea'+'ling\x20'+_0x45cb19(0x4e0,0x405)+'rns.\x20'+'The\x20E'+'CB\x20pe'+_0x2b9155(0x3bd,0x40d)+_0x2b9155(0x2b8,0x1b8)+_0x45cb19(0x652,0x558),_0x27def3['langu'+_0x2b9155(0x2aa,0x264)]=[_0x45cb19(0x4e7,0x3f3)],_0x27def3[_0x45cb19(0x4e0,0x46b)+'rn']=/Cipher\.getInstance\s*\(\s*["'](?:AES|DES|DESede)\/ECB\//gi,_0x27def3[_0x2b9155(0x34d,0x254)]=_0x2b9155(0x281,0x32d)+'CM\x20or'+'\x20CBC\x20'+_0x2b9155(0x228,0x300)+_0x45cb19(0x41b,0x349)+'er.ge'+_0x45cb19(0x465,0x3b9)+_0x2b9155(0x2af,0x213)+_0x45cb19(0x5cf,0x4d2)+_0x45cb19(0x615,0x6f5)+_0x2b9155(0x3b4,0x413)+_0x45cb19(0x596,0x679);const _0x4ea8fc={};_0x4ea8fc['id']=_0x45cb19(0x4af,0x4fc)+_0x45cb19(0x60a,0x4fa)+_0x45cb19(0x567,0x636),_0x4ea8fc[_0x45cb19(0x5d9,0x6e9)]=_0x2b9155(0x1fe,0x140)+'38',_0x4ea8fc[_0x45cb19(0x498,0x570)+_0x2b9155(0x39b,0x35f)]=_0x2b9155(0x416,0x504),_0x4ea8fc[_0x2b9155(0x237,0x29c)]='Insec'+_0x2b9155(0x1f1,0x27b)+_0x2b9155(0x3df,0x3f1)+'\x20—\x20ja'+_0x2b9155(0x406,0x3ef)+_0x45cb19(0x60f,0x63c)+_0x45cb19(0x5fb,0x4e0)+_0x45cb19(0x42e,0x336)+_0x2b9155(0x34f,0x339)+'ty',_0x4ea8fc[_0x45cb19(0x604,0x6b5)+_0x45cb19(0x544,0x529)+'n']=_0x45cb19(0x4ee,0x4a9)+_0x2b9155(0x40c,0x3b4)+_0x45cb19(0x4de,0x43f)+_0x2b9155(0x263,0x248)+'predi'+_0x45cb19(0x616,0x70a)+_0x45cb19(0x59f,0x4f6)+_0x2b9155(0x2e4,0x3a4)+_0x45cb19(0x5be,0x5b9)+_0x2b9155(0x22c,0x300)+'ed\x20fo'+_0x2b9155(0x2f1,0x2fb)+_0x2b9155(0x252,0x272)+_0x45cb19(0x492,0x3b4)+'\x20or\x20s'+_0x2b9155(0x34f,0x333)+_0x2b9155(0x327,0x43b)+_0x2b9155(0x253,0x15f)+'ns.',_0x4ea8fc[_0x2b9155(0x22a,0x23d)+_0x2b9155(0x2aa,0x1f5)]=['java'],_0x4ea8fc[_0x2b9155(0x2c2,0x274)+'rn']=/new\s+Random\s*\(\s*\)/g,_0x4ea8fc[_0x2b9155(0x34d,0x390)]=_0x45cb19(0x64b,0x643)+'ava.s'+'ecuri'+_0x45cb19(0x50b,0x5b3)+_0x45cb19(0x4c0,0x5cc)+_0x2b9155(0x3df,0x2fa)+_0x45cb19(0x4f6,0x59a)+'ureRa'+_0x2b9155(0x3dd,0x2cb)+_0x2b9155(0x40e,0x39b)+_0x45cb19(0x45d,0x4d9)+_0x45cb19(0x600,0x4fe)+_0x45cb19(0x4c0,0x4db)+'andom'+_0x45cb19(0x573,0x64e);function _0x17ac(_0x1c51e2,_0x3603fd){_0x1c51e2=_0x1c51e2-(-0x925*-0x1+0x1*0x1d5c+-0x24f7*0x1);const _0x4b12cc=_0x5173();let _0x144f54=_0x4b12cc[_0x1c51e2];if(_0x17ac['DhDwQi']===undefined){var _0x3372d2=function(_0x973171){const _0x56c06d='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0x387032='',_0x240d10='';for(let _0x3ce951=-0x1*-0x1489+-0xc*0xc9+-0xb1d,_0x257982,_0x9e924c,_0x2ee4f6=0x1*-0x279+0x1d67+-0x2*0xd77;_0x9e924c=_0x973171['charAt'](_0x2ee4f6++);~_0x9e924c&&(_0x257982=_0x3ce951%(0x1d*0xe0+-0x470+-0x14ec)?_0x257982*(-0x5cc*-0x1+-0xa54*-0x1+-0x20*0x7f)+_0x9e924c:_0x9e924c,_0x3ce951++%(-0xb7d+0x10*-0x1fe+0x5*0x8ad))?_0x387032+=String['fromCharCode'](-0x1*-0xd82+0x112d+-0x13*0x190&_0x257982>>(-(-0x1f3f+0x347+0x1bfa)*_0x3ce951&-0x251*-0xd+-0xd*0x259+0x6e)):0x61*0x13+-0x1a38+0x1305){_0x9e924c=_0x56c06d['indexOf'](_0x9e924c);}for(let _0x229da8=0x17d8+0x202*-0x1+-0x15d6*0x1,_0x1cc181=_0x387032['length'];_0x229da8<_0x1cc181;_0x229da8++){_0x240d10+='%'+('00'+_0x387032['charCodeAt'](_0x229da8)['toString'](-0x186e+-0x25c4+0x3e42))['slice'](-(-0x165c+-0xe38+0x2496));}return decodeURIComponent(_0x240d10);};_0x17ac['BlFufg']=_0x3372d2,_0x17ac['dUaeYz']={},_0x17ac['DhDwQi']=!![];}const _0x5a5b3c=_0x4b12cc[-0x10e8+0x1402+-0x2*0x18d],_0x494d77=_0x1c51e2+_0x5a5b3c,_0x57350b=_0x17ac['dUaeYz'][_0x494d77];return!_0x57350b?(_0x144f54=_0x17ac['BlFufg'](_0x144f54),_0x17ac['dUaeYz'][_0x494d77]=_0x144f54):_0x144f54=_0x57350b,_0x144f54;}const _0x2a456b={};_0x2a456b['id']=_0x45cb19(0x4af,0x521)+_0x45cb19(0x51a,0x542)+_0x2b9155(0x349,0x34b),_0x2a456b[_0x2b9155(0x3bb,0x3ff)]=_0x2b9155(0x294,0x291)+'0',_0x2a456b[_0x45cb19(0x498,0x487)+_0x45cb19(0x5b9,0x5cd)]=_0x45cb19(0x54f,0x59e)+_0x2b9155(0x223,0x277),_0x2a456b[_0x2b9155(0x237,0x1d1)]=_0x2b9155(0x316,0x209)+_0x45cb19(0x5e3,0x4fe)+_0x45cb19(0x46a,0x503)+_0x45cb19(0x53c,0x42f)+_0x45cb19(0x571,0x631)+_0x2b9155(0x2c5,0x37a)+_0x45cb19(0x5ff,0x55e)+'in\x20LD'+_0x45cb19(0x419,0x2f4)+_0x45cb19(0x46f,0x537),_0x2a456b[_0x45cb19(0x604,0x53e)+_0x45cb19(0x544,0x605)+'n']=_0x45cb19(0x5b5,0x5d2)+'input'+_0x2b9155(0x390,0x3be)+'DAP\x20q'+_0x45cb19(0x5e6,0x5d2)+_0x2b9155(0x367,0x46d)+_0x2b9155(0x226,0x250)+_0x45cb19(0x485,0x47d)+_0x45cb19(0x522,0x612)+_0x45cb19(0x5f7,0x66d)+'lows\x20'+_0x2b9155(0x316,0x27e)+_0x2b9155(0x363,0x441)+_0x2b9155(0x3b3,0x3c6),_0x2a456b['langu'+_0x2b9155(0x2aa,0x1d8)]=[_0x2b9155(0x2c9,0x3ed)],_0x2a456b['patte'+'rn']=/(?:search|lookup)\s*\(\s*(?:["'][^"']*["']\s*\+|\+\s*["'].*(?:cn=|uid=|ou=|dc=))/gi,_0x2a456b['fix']=_0x2b9155(0x20f,0x1ac)+_0x2b9155(0x421,0x3a9)+_0x45cb19(0x55b,0x4a7)+'LDAP\x20'+_0x2b9155(0x3d5,0x2f0)+'cters'+_0x45cb19(0x49e,0x3b0)+'se\x20pa'+_0x45cb19(0x629,0x69d)+'erize'+'d\x20LDA'+_0x45cb19(0x4ae,0x4dd)+_0x45cb19(0x469,0x3b6);const _0x5abc54={};_0x5abc54['id']='JAVA-'+_0x45cb19(0x449,0x42c)+_0x45cb19(0x5f4,0x542),_0x5abc54[_0x45cb19(0x5d9,0x5a7)]=_0x2b9155(0x23b,0x1cb)+'62',_0x5abc54[_0x2b9155(0x27a,0x2cb)+'ity']=_0x45cb19(0x634,0x6bd),_0x5abc54[_0x45cb19(0x455,0x4f9)]=_0x45cb19(0x628,0x55f)+_0x45cb19(0x4d8,0x577)+'urity'+_0x45cb19(0x431,0x31f)+'RF\x20Di'+_0x2b9155(0x333,0x3c6)+'d',_0x5abc54[_0x45cb19(0x604,0x508)+_0x45cb19(0x544,0x4b0)+'n']=_0x2b9155(0x3e7,0x3ee)+'ling\x20'+'CSRF\x20'+_0x2b9155(0x2a1,0x31c)+_0x45cb19(0x635,0x5d6)+_0x2b9155(0x3db,0x35a)+_0x2b9155(0x418,0x3e2)+'he\x20ap'+_0x2b9155(0x2b3,0x25b)+_0x45cb19(0x46a,0x3e4)+'to\x20Cr'+_0x2b9155(0x2ab,0x2f9)+_0x2b9155(0x2c7,0x1d7)+_0x2b9155(0x356,0x34c)+'t\x20For'+'gery\x20'+_0x45cb19(0x65a,0x760)+'ks.',_0x5abc54[_0x2b9155(0x22a,0x24a)+_0x2b9155(0x2aa,0x39b)]=['java'],_0x5abc54[_0x2b9155(0x2c2,0x240)+'rn']=/\.csrf\s*\(\s*\)\s*\.disable\s*\(\s*\)/g,_0x5abc54['fix']=_0x45cb19(0x622,0x576)+_0x2b9155(0x282,0x22e)+_0x2b9155(0x2a1,0x308)+_0x45cb19(0x635,0x67c)+_0x45cb19(0x4da,0x53d)+'led.\x20'+'If\x20bu'+'ildin'+'g\x20a\x20s'+_0x45cb19(0x657,0x73f)+_0x45cb19(0x478,0x4bd)+_0x2b9155(0x230,0x233)+_0x2b9155(0x1fc,0x322)+'ken-b'+'ased\x20'+_0x45cb19(0x5ad,0x5f9)+'inste'+_0x45cb19(0x4fb,0x44c);function _0x5173(){const _0x504edd=['Dg9YEs4','DhLWzs0','vxnLihq','Dcb3Axq','zxn0lMC','CIb3Axq','ucbXDwu','sKfwqs0','Dfn0CMu','y3vYAxq','q1DfltK','u3rYAxa','ywnJzxa','zMf1Bhq','yw5KigK','zsbszxe','BwvZige','tcbXDwu','mtKZnvrwyMPHDq','B21TB24','wfHflta','yMLUyxi','rsbPzca','ChjVDgu','y3vYzvi','tuq1ig8','Bsb2zxi','lNn0yxi','sMf2ysa','yxrOkcK','CIaOsKu','rMLSDgu','ywDLCW','B3nZlvm','yNjVA2u','ztOGq2K','z2veAwC','yw5JzsG','BMfTzsa','yxjZAw4','ieXHBMC','CgXPy2e','qMXVy2S','q2fUB24','BIbPBIa','DcbWCM8','ihbYB2i','zw5KCg8','zYbtzwm','BwqIlca','igvUywi','igfYyMK','zgrPBMC','oYbWCY4','uMfUzg8','CM1HDca','Cgf0Dgu','qteGyxi','BwuGDMu','EMvKigK','igv2ywW','AxrLifi','revtig8','AMf2yq','AwvYlIa','kcjvC2u','igLUChu','kcjODhq','BcbJzxi','D2L0Ag8','AMf2ys4','DhLSzsa','vxnLieO','CxvLCNK','B3jTifm','DxnLCNm','B250zxG','zxjUyw0','oIbtzwm','DwyGAw4','DxrOzw4','ucbYyw4','yxrLBwu','ywqU','4OcuifvZzq','zIbtDhi','BgWGAg8','igzVCIa','BwuGvMu','ltaWmq','ig11C3q','igvUzha','lMLUzM8','CMLUzYG','zgLZywi','q29UBMu','zgvWCMu','B2DYyxa','revtigG','DhKUu2u','igHVC3q','revtrvi','u1fmss0','CIb0B2S','zwqSigK','DwfNzsa','z2vZlG','zwn0sw4','yxmGB24','CIbPBNa','uMvXDwK','igfJy2u','DxjLieq','y2f0zsa','terbuc0','ywWGy2K','z2DPBMC','BwuUzxG','BgvKifq','BIbmyw4','CYbNywq','yw1LDgu','AxPHDgK','C2HLBgW','D3mGAw4','De1HBMe','zwmOksa','tcbMCM8','CYbHBMq','igeGC2e','FsiSihm','seeTmJu','oIaUyw4','CgHLCI4','B2rL','AwnHDgK','BML0AxO','CM9Jzxm','tsbTB2q','AxqGBg8','terbuca','msWGDxm','q01ess0','zw4GChi','igfSBca','igfUzca','Bg9Nigu','lcb0CNu','4OcuifvUCW','CNvZDgu','zsbWyxq','oIbMywm','igzPBgu','ifvUC2e','rY0Wmdi','D3mGt1m','Axb0Aw8','DhKGzgu','ywWGrw4','Aw5Nihu','zxHLy3u','EhrLCM4','ienbCYW','Aw5WDxq','Eg1Sl2y','yxrPB24','yMfZzsa','y3jPDgK','q29Uy2e','C2fIBgu','DgLMAwm','yxbOAwm','Dg8GAwq','zwqGBg8','ihf1zxi','CIbSB2C','B3n0BMe','ihjLywq','q1jzufq','y2LHBca','DgvKigq','zxH0lca','Aw46ihS','Aw9Uigm','u3rHDgu','q1Dflte','ocKU','AcbNzxq','Aw9UlG','iIKUAge','AMvJDgK','mdaX','BMf0Aw8','iLnfteu','CNrPzMK','zML4','BMfTAwm','zwn1CMK','q1Dflti','zw5HyMW','AhKG4Ocuia','yw5PDgK','zw50ie8','kcK7','zxf1zxm','tY0Wmde','y3rLzca','we1miha','B2nHDgK','zwmGD2K','q29TBwe','DwvZDca','ltaWmG','C2vUC2K','DgGGr0m','Aw5NlMy','DNvSBMu','Aw5Qzwm','DgLJyxq','ihrOzw0','tY0Wmdm','CYb3Axq','EsbPDca','DgL0Esa','u1fmieK','nJzZCevPuK8','Aw50BYa','A3mU','AwXLig8','CMvHBq','DMLHBgW','zsKPlIa','uNvUDgK','C3q6ig4','CNKGy28','igXVywq','yxrHigm','tuWGAw4','Aw5NiIK','id0Gy28','Chv0igK','zgf0zsa','iokaLcbvBG','CMvWyxi','CM1PDee','uhjLCge','igLUigW','zs4Gsxq','CML6zwq','zwnVzgu','DgHHDca','zwqGCxu','ihzHBgK','DguGyxi','uKWVshq','CYb0CMK','icHdvKu','BsbuCNu','rM9Yigm','Acb1BNq','ihbHDgG','yxv0Aca','igLUieW','zxCGuhi','mdaY','ndKZmtC2mhriDwz6CW','BNn0zwe','iI9Hzg0','ig9YieO','vxnLCIa','zgvYihC','ienstey','zxbHCMu','Axr5','DgGGzhK','CgfZC2u','rg8GBM8','C2vZige','ig5VDca','igLUigy','EhbYzxm','rM9Yz2u','ChvYCg8','lM9YzY8','ywrPBMC','DxqUifu','lIbvC2u','te9hlta','tfmGC2u','AwXLCY4','BMnHDgu','AgvYCYG','we1mrgu','Aw9UCYa','D2L0Aca','iKffuY8','ywWGyMW','DgLVBI4','B1bHzgq','q3jLyxq','vxnLifa','mJmWmJrVCerpBem','AcbYzxm','zsbJCNK','CMD1Bwu','y3DL','Chv0u3q','BMD1Aw4','CgvYBhK','ovHovMzwrq','runcig0','C2vYigK','4OcuifHnta','B2LUDhm','ywX1yxq','sw5Qzwm','Aw5Nifu','C3rYB24','DwvYAwu','DeLUChu','sK5essa','uKXZige','DgGGzgK','kcjbre0','4Ocuie9IAG','CdOVl2e','rhLUyw0','BIbMB3i','uuWGCxu','Aw5Nige','DcGP','y2HHCMe','rY0Wmde','tfmGq2u','EsbJB2q','B24GywW','B2nLC3m','igv4Cg8','BMnYExa','BMrVBsa','zwf0Dxi','yw5KB20','BhKGnty','BNb1Dca','zxCGu2u','C2v0rMu','DhrPBMC','DcbHBIa','zgvZy3i','rgLZywi','C3rZlIa','BgrLCIa','B2rLigu','yMPLy3q','uKforc0','Aw9UiokaLa','tg9NieK','qNvPBgq','C3mGAw4','AwWUuMe','vMvYAwy','ucaYota','BMCGy28','ugf0Aca','BgLZDc4','r0nnl04','y3rHyMW','sw5Zzwm','ChjPBMC','AxrPDMu','u1fmlG','icHtCeu','AMvJDca','vxnLiee','CYbLBMe','ksb0BYa','zxjPzxm','AguGzgu','s2vLCca','ignVzgu','DMeUDxq','yw0UCMu','BcbPBNy','AwXKifm','u3bYAw4','CMfTzxq','DxrPBc4','CYbJyw4','CMfUzg8','nIbVCIa','ChrVz3i','ywDLCIa','tcKGzxG','yNLWyxm','zwfKig8','BMCUzM8','AgLNAa','y3rPB24','C2vZihq','DhbvuKW','ihnLBNm','A2v5CYa','q3vZDg8','yw1LCY4','C2vZlG','CYbTDxm','C2v0u3q','zsbZCgu','B24Uifu','EMuGDgG','igfZifm','ihnJAgu','BNrYDxm','zcbPBNa','ig5Lzwq','y2HLiem','CYbJzxi','C3rnyw4','AwnHBgK','vxnLigO','rvmGD2K','igLUDg8','v2vHAYa','lwjPDca','q1Dfltu','CMvKu3q','BgvTlG','ifrYDxm','ywXPEMe','DgL2zsa','mZa0mtK2DwrqEwTs','Dgf0zwW','zw50Awm','Bsb1C2u','yxr0ywm','AxrPzxm','DxjLifi','C2fMzsa','AxrOige','CMfIAwW','ywrpyMO','t2jQzwm','BwvKAxu','zwqGDxm','iokaLcbWzq','C3rLywq','qvaGCxu','C2uGDg8','ienPCgG','q1Dfltm','q1DfltC','C3ncDwK','ifDirvi','ywXSEsa','AgfPBNm','ntiZmJm3otLWv0rPCMK','uefusc0','zMfRzsa','BMPLy3q','CMLUz3m','DMLJzxm','CMvJDca','mti4odqYyvvMvwDx','ihnOzwW','CYb0BYa','we1mieu','rxnJyxa','zM9Yihm','Aw4VkIO','Aw4Gu1e','iokaLcbduW','BMqGsw4','zwn0kcK','yw4GzxG','rvnLzgu','z2fPBNm','DgL0Awu','q3j5Chq','DgvUyxq','zxiGAw4','CMvZDhi','q1Dflty','vxnPBMC','DgvYBMe','Acb0Agu','zxmGAw4','y2fS','BgvZifq','vxnLiha','Ag91Dca','ugvYBwK','Bw9KztO','DxnLCIa','BgfUz3u','u1bssu4','yMuGDxm','iMfYzZe','zwqGC3q','CIbervm','ueKSihu','vMfSAwq','B2CGC3q','mtu1mtq5mKv0zKnXyG','ruWTmda','DxjPDhK','BwvUDca','DgL0Bgu','BgWGB24','z2v0igm','lti1nIi','q1DfltG','De1HDgm','u1jglG','CMuGyxu','Bsa9ig4','igfSBg8','yxrLifu','rLjptsa','BMqGzhK','EsbHBMq','CNKG4Ocuia','zwrL','DeLUC3q','y29Kzxi','DhjHCNK','zxnZqNu','CMLLCY4','DgLVBIa','yxrLCYa','BgvKieG','vxnLifm','CYbVCIa','zxj5','zw5Zlca','y2LZAw8','DgfUy2u','C2LVBNm','CgvYyxq','rxHWCMu','zsGIquu','AwzPzxi','zxnZiee','Acb3Axq','ignHBIa','yxjHBwu','yxr1CMu','BIbSB2C','veXtlta','su4Ikq','zgvJBci','BsbPCYa','CMLMAwm','AwvZoIa','AwmGvvi','C2fUAxq','C3rUyw0','DgvYAxO','BgLZDca','zxnLCMK','ywTHyMW','tuq1ige','ksbPCYa','yxjZzxi','ignVBw0','zwrtDge','zxrjBNm','q1qGkIa','A2v5CYW','igfYz3u','y29Uy2e','zxjjzcK','CIbtsee','BM4UChi','C2v2zxi','nJCZohnKBhf2Dq','Aw50CYa','Cevm','B24U','igeGs2u','ig9Yihu','vxnLieC','q1nsrIa','CI1tAwq','mtCWmwDVtMjOua','DhjPy3q','BNqGChm','EMuODxm','ihnLy3u','psa/iIK'];_0x5173=function(){return _0x504edd;};return _0x5173();}const _0x40b136={};_0x40b136['id']='JAVA-'+'SPRIN'+_0x2b9155(0x324,0x41b),_0x40b136['cwe']=_0x45cb19(0x459,0x409)+'62',_0x40b136[_0x2b9155(0x27a,0x2d9)+_0x45cb19(0x5b9,0x49e)]=_0x2b9155(0x416,0x3dc),_0x40b136['title']='Sprin'+_0x2b9155(0x2ba,0x2c2)+_0x45cb19(0x453,0x3e5)+_0x45cb19(0x417,0x465)+_0x2b9155(0x37e,0x2e9)+_0x45cb19(0x456,0x378)+'\x20sens'+_0x2b9155(0x3fb,0x34c)+_0x2b9155(0x2e5,0x210)+_0x2b9155(0x3c3,0x38c),_0x40b136[_0x2b9155(0x3e6,0x3ca)+'iptio'+'n']=_0x45cb19(0x445,0x3d4)+_0x45cb19(0x602,0x57f)+_0x45cb19(0x538,0x616)+'acces'+_0x45cb19(0x42b,0x4db)+_0x2b9155(0x35f,0x43b)+_0x45cb19(0x655,0x765)+_0x2b9155(0x2b9,0x1ad)+_0x45cb19(0x49a,0x400)+_0x2b9155(0x413,0x311)+_0x45cb19(0x5bd,0x5ab)+_0x2b9155(0x2da,0x2e0)+_0x45cb19(0x582,0x4c9)+_0x45cb19(0x564,0x688),_0x40b136[_0x45cb19(0x448,0x324)+_0x2b9155(0x2aa,0x35d)]=[_0x45cb19(0x4e7,0x604)],_0x40b136[_0x45cb19(0x4e0,0x4fe)+'rn']=/\.antMatchers\s*\(\s*["']\/(?:admin|api|internal|manage|actuator)[^"']*["']\s*\)\.permitAll/g,_0x40b136[_0x45cb19(0x56b,0x5e8)]=_0x2b9155(0x2f8,0x1e8)+_0x45cb19(0x45c,0x408)+'thent'+_0x45cb19(0x52f,0x63f)+'on\x20on'+_0x45cb19(0x638,0x6ae)+_0x45cb19(0x619,0x58b)+_0x45cb19(0x503,0x3e6)+_0x45cb19(0x5e1,0x548)+_0x2b9155(0x30e,0x38c)+_0x45cb19(0x45a,0x4f5)+_0x45cb19(0x5cb,0x663)+_0x45cb19(0x5b3,0x53a)+_0x45cb19(0x42f,0x4ac)+_0x2b9155(0x347,0x42d)+'sRole'+_0x45cb19(0x5eb,0x4ed)+_0x2b9155(0x261,0x206);const _0x70884e={};_0x70884e['id']=_0x45cb19(0x4af,0x58f)+_0x2b9155(0x234,0x19d)+'1',_0x70884e[_0x45cb19(0x5d9,0x625)]=_0x45cb19(0x4b2,0x44b)+'17',_0x70884e['sever'+_0x45cb19(0x5b9,0x693)]=_0x45cb19(0x54f,0x491)+'cal',_0x70884e['title']=_0x45cb19(0x475,0x45c)+'ssion'+_0x45cb19(0x4d0,0x47f)+_0x45cb19(0x511,0x5e0)+'Injec'+'tion\x20'+_0x45cb19(0x4fc,0x55b)+_0x2b9155(0x2f7,0x3b1)+'ut\x20in'+'\x20EL/S'+_0x45cb19(0x49b,0x587),_0x70884e[_0x2b9155(0x3e6,0x4ac)+_0x45cb19(0x544,0x592)+'n']=_0x2b9155(0x397,0x44c)+_0x45cb19(0x54b,0x656)+'\x20in\x20S'+_0x2b9155(0x3fa,0x2d4)+'\x20Expr'+'essio'+_0x45cb19(0x51f,0x5ac)+'guage'+_0x45cb19(0x61b,0x6eb)+_0x45cb19(0x630,0x57e)+'press'+'ions\x20'+'can\x20e'+'xecut'+'e\x20arb'+'itrar'+_0x45cb19(0x5f6,0x68c)+'e.',_0x70884e[_0x45cb19(0x448,0x35d)+_0x45cb19(0x4c8,0x4f7)]=['java'],_0x70884e[_0x45cb19(0x4e0,0x4b8)+'rn']=/(?:ExpressionParser|SpelExpressionParser)\s*\(\s*\)\.parseExpression\s*\(\s*(?:request|param|input|user)/g,_0x70884e[_0x45cb19(0x56b,0x4af)]='Never'+_0x2b9155(0x2c6,0x321)+'uate\x20'+_0x2b9155(0x229,0x270)+_0x2b9155(0x32d,0x2f7)+_0x2b9155(0x424,0x42f)+'pEL\x20e'+_0x45cb19(0x5c0,0x660)+_0x2b9155(0x255,0x33e)+_0x2b9155(0x3a8,0x35a)+_0x45cb19(0x529,0x47c)+'fe\x20ev'+_0x45cb19(0x5e2,0x58c)+_0x45cb19(0x55f,0x58a)+_0x45cb19(0x4f4,0x47f)+_0x45cb19(0x4ab,0x51e)+_0x2b9155(0x3b8,0x411)+_0x2b9155(0x285,0x329)+'ed\x20me'+'thods'+'.';const _0x18e4ba={};_0x18e4ba['id']=_0x2b9155(0x291,0x2e1)+'TLS-0'+'01',_0x18e4ba[_0x2b9155(0x3bb,0x324)]='CWE-2'+'95',_0x18e4ba[_0x2b9155(0x27a,0x38a)+'ity']=_0x45cb19(0x54f,0x54a)+'cal',_0x18e4ba['title']=_0x45cb19(0x605,0x723)+_0x2b9155(0x300,0x33d)+_0x45cb19(0x5f5,0x5b8)+_0x2b9155(0x34c,0x2b8)+_0x2b9155(0x2fb,0x3eb)+_0x2b9155(0x3f2,0x4f4)+'icati'+'on',_0x18e4ba[_0x45cb19(0x604,0x622)+'iptio'+'n']='Custo'+_0x45cb19(0x5a9,0x4ac)+_0x2b9155(0x42b,0x540)+_0x2b9155(0x411,0x458)+_0x45cb19(0x5a2,0x47d)+_0x45cb19(0x4b4,0x3a1)+'ts\x20al'+_0x2b9155(0x2ce,0x22e)+_0x2b9155(0x334,0x333)+_0x2b9155(0x24d,0x22f)+_0x45cb19(0x506,0x4ef)+_0x45cb19(0x442,0x55c)+_0x2b9155(0x3aa,0x2fd)+_0x45cb19(0x4b1,0x3f3)+'y.',_0x18e4ba[_0x2b9155(0x22a,0x2b8)+_0x2b9155(0x2aa,0x20c)]=[_0x2b9155(0x2c9,0x260)],_0x18e4ba[_0x45cb19(0x4e0,0x43f)+'rn']=/X509TrustManager[^}]*checkServerTrusted[^}]*\{\s*\}/g,_0x18e4ba['fix']=_0x2b9155(0x28c,0x249)+_0x45cb19(0x621,0x642)+_0x2b9155(0x297,0x2e6)+_0x45cb19(0x653,0x581)+_0x45cb19(0x525,0x5d2)+'ger.\x20'+_0x2b9155(0x38c,0x314)+'ustom'+_0x45cb19(0x54a,0x56c)+_0x2b9155(0x375,0x381)+_0x2b9155(0x365,0x28d)+_0x2b9155(0x42f,0x396)+_0x2b9155(0x27f,0x1c6)+'yStor'+'e.';const _0x36c3e8={};_0x36c3e8['id']=_0x45cb19(0x4af,0x459)+_0x2b9155(0x260,0x22c)+'02',_0x36c3e8['cwe']=_0x45cb19(0x56e,0x5af)+'95',_0x36c3e8[_0x2b9155(0x27a,0x17f)+_0x2b9155(0x39b,0x41c)]=_0x45cb19(0x54f,0x443)+_0x45cb19(0x441,0x36c),_0x36c3e8[_0x45cb19(0x455,0x4b4)]='Disab'+_0x45cb19(0x46c,0x3be)+_0x45cb19(0x558,0x4b5)+_0x2b9155(0x2e2,0x280)+_0x2b9155(0x264,0x2d3)+'ation',_0x36c3e8[_0x2b9155(0x3e6,0x3e2)+_0x2b9155(0x326,0x271)+'n']='Allow'+_0x2b9155(0x3d3,0x39d)+_0x45cb19(0x4fe,0x563)+_0x45cb19(0x486,0x509)+'es\x20by'+_0x2b9155(0x39d,0x286)+_0x45cb19(0x648,0x548)+_0x2b9155(0x334,0x400)+'ate\x20h'+'ostna'+_0x2b9155(0x2c4,0x1f8)+_0x2b9155(0x264,0x1ad)+_0x2b9155(0x32f,0x39c)+'.',_0x36c3e8[_0x45cb19(0x448,0x4f1)+_0x2b9155(0x2aa,0x2d8)]=[_0x2b9155(0x2c9,0x328)],_0x36c3e8[_0x45cb19(0x4e0,0x41d)+'rn']=/(?:ALLOW_ALL_HOSTNAME_VERIFIER|NoopHostnameVerifier|setHostnameVerifier\s*\(\s*(?:SSLSocketFactory\.ALLOW_ALL|new\s+(?:AllowAll|Noop)))/g,_0x36c3e8[_0x2b9155(0x34d,0x2b8)]='Use\x20t'+_0x45cb19(0x621,0x640)+_0x2b9155(0x297,0x262)+_0x2b9155(0x2ee,0x37f)+_0x2b9155(0x2b0,0x25a)+'verif'+_0x45cb19(0x4e8,0x469)+_0x2b9155(0x41c,0x38e)+_0x45cb19(0x4c2,0x3bf)+_0x2b9155(0x259,0x1d1)+_0x2b9155(0x41f,0x3b8)+_0x2b9155(0x2b7,0x37a)+_0x45cb19(0x5dc,0x56d)+_0x2b9155(0x386,0x3a9)+_0x2b9155(0x37b,0x387)+'hostn'+_0x45cb19(0x63b,0x676);const _0x3c4b35={};_0x3c4b35['id']=_0x45cb19(0x4af,0x3e6)+_0x2b9155(0x3a9,0x417)+'01',_0x3c4b35[_0x2b9155(0x3bb,0x3f3)]=_0x45cb19(0x561,0x5a5)+'17',_0x3c4b35['sever'+'ity']=_0x45cb19(0x415,0x427)+'m',_0x3c4b35[_0x45cb19(0x455,0x402)]=_0x2b9155(0x3ee,0x3ee)+_0x45cb19(0x425,0x347)+'ion\x20—'+_0x45cb19(0x541,0x61f)+_0x2b9155(0x312,0x274)+_0x2b9155(0x1f8,0x231)+_0x2b9155(0x21c,0x300)+_0x2b9155(0x37a,0x306)+_0x45cb19(0x47d,0x45e),_0x3c4b35[_0x2b9155(0x3e6,0x33b)+_0x2b9155(0x326,0x322)+'n']=_0x2b9155(0x397,0x339)+_0x2b9155(0x32d,0x380)+_0x45cb19(0x59e,0x61b)+_0x45cb19(0x450,0x4f8)+_0x2b9155(0x2dc,0x37e)+'nts\x20c'+'an\x20in'+_0x45cb19(0x61c,0x627)+_0x45cb19(0x424,0x395)+_0x2b9155(0x31c,0x29f)+'ntrie'+_0x45cb19(0x46e,0x368)+'explo'+_0x45cb19(0x533,0x4e7)+'g4j-s'+_0x45cb19(0x4ef,0x5db)+_0x45cb19(0x580,0x6a6)+_0x45cb19(0x412,0x3af)+_0x2b9155(0x43d,0x379)+_0x2b9155(0x38a,0x35a)+'-2021'+'-4422'+_0x45cb19(0x562,0x46a),_0x3c4b35[_0x2b9155(0x22a,0x140)+'ages']=[_0x2b9155(0x2c9,0x2ce)],_0x3c4b35[_0x45cb19(0x4e0,0x44f)+'rn']=/(?:logger|log|LOG)\.(?:info|debug|warn|error|trace|fatal)\s*\(\s*(?:["'][^"']*["']\s*\+|\+\s*(?:request|param|input|user))/g,_0x3c4b35[_0x45cb19(0x56b,0x486)]='Use\x20p'+'arame'+_0x45cb19(0x487,0x3b5)+_0x45cb19(0x555,0x641)+_0x45cb19(0x51c,0x4a1)+':\x20log'+_0x45cb19(0x504,0x4b8)+_0x45cb19(0x4e9,0x5f2)+_0x45cb19(0x557,0x4b7)+_0x45cb19(0x55e,0x43f)+_0x45cb19(0x52a,0x5cb)+_0x45cb19(0x571,0x46c)+_0x2b9155(0x287,0x234)+_0x45cb19(0x4f5,0x5ff)+_0x2b9155(0x371,0x440)+_0x45cb19(0x4b3,0x412)+_0x45cb19(0x5b7,0x599)+_0x2b9155(0x31b,0x3a7)+_0x45cb19(0x5e8,0x53a)+'looku'+'p\x20pat'+'terns'+'.';export const javaRules=[_0x5eaf01,_0x264370,_0x466b0f,_0x1d65c3,_0x23b02f,_0x2cac40,_0x5393b6,_0x4528e9,_0x341dfc,_0x2f9c0e,_0x39ae75,_0x27def3,_0x4ea8fc,_0x2a456b,_0x5abc54,_0x40b136,_0x70884e,_0x18e4ba,_0x36c3e8,_0x3c4b35];
|