@offgridsec/kira-lite-mcp 0.2.1 → 0.2.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (45) hide show
  1. package/INSTALL.md +6 -6
  2. package/README.md +4 -4
  3. package/config/settings.local.json +1 -1
  4. package/dist/config.js +1 -1
  5. package/dist/core/engines/osv.js +1 -1
  6. package/dist/core/engines/runner.js +1 -1
  7. package/dist/core/scanner.js +1 -1
  8. package/dist/core/utils.js +1 -1
  9. package/dist/index.js +1 -1
  10. package/dist/rules/c-cpp.js +1 -1
  11. package/dist/rules/cicd.js +1 -1
  12. package/dist/rules/csharp-extended.js +1 -1
  13. package/dist/rules/csharp.js +1 -1
  14. package/dist/rules/docker.js +1 -1
  15. package/dist/rules/go-extended.js +1 -1
  16. package/dist/rules/go.js +1 -1
  17. package/dist/rules/graphql-extended.js +1 -1
  18. package/dist/rules/index.js +1 -1
  19. package/dist/rules/java-extended.js +1 -1
  20. package/dist/rules/java.js +1 -1
  21. package/dist/rules/javascript-extended.js +1 -1
  22. package/dist/rules/javascript.js +1 -1
  23. package/dist/rules/kotlin.js +1 -1
  24. package/dist/rules/kubernetes.js +1 -1
  25. package/dist/rules/php-extended.js +1 -1
  26. package/dist/rules/php.js +1 -1
  27. package/dist/rules/python-extended.js +1 -1
  28. package/dist/rules/python.js +1 -1
  29. package/dist/rules/ruby-extended.js +1 -1
  30. package/dist/rules/ruby.js +1 -1
  31. package/dist/rules/rust.js +1 -1
  32. package/dist/rules/secrets-extended.js +1 -1
  33. package/dist/rules/secrets.js +1 -1
  34. package/dist/rules/shell.js +1 -1
  35. package/dist/rules/swift.js +1 -1
  36. package/dist/rules/terraform.js +1 -1
  37. package/dist/telemetry.js +1 -1
  38. package/dist/tools/fix-vulnerability.js +1 -1
  39. package/dist/tools/scan-code.js +1 -1
  40. package/dist/tools/scan-dependencies.js +1 -1
  41. package/dist/tools/scan-diff.js +1 -1
  42. package/dist/tools/scan-file.js +1 -1
  43. package/dist/tools/scan-new-imports.js +1 -1
  44. package/hook.mjs +17 -25
  45. package/package.json +1 -1
package/dist/rules/java-extended.js CHANGED
@@ -1 +1 @@
1
- (function(_0x4f7eb1,_0x418ed8){const _0x27d93e={_0x4de67d:0x16d,_0x2ba22d:0xad,_0x11dc2a:0x341,_0x1e222d:0x5f,_0x39e596:0x20b,_0x129d83:0x209,_0x3a05cd:0x152};function _0x81dcd2(_0x8077ee,_0x379dfd){return _0x4d77(_0x8077ee- -0x17c,_0x379dfd);}function _0x4b64e2(_0x55b7b5,_0x43d495){return _0x4d77(_0x43d495- -0x3b4,_0x55b7b5);}const _0x51faa6=_0x4f7eb1();while(!![]){try{const _0x3b02ae=parseInt(_0x81dcd2(_0x27d93e._0x4de67d,0xcd))/(-0x1910+-0x791+0x20a2)*(-parseInt(_0x4b64e2(-0x78,-_0x27d93e._0x2ba22d))/(0x3d*0x94+0x9*-0x10a+-0x19e8))+parseInt(_0x81dcd2(0x13f,0x10a))/(0x191*0x15+-0x26d6+0x2fa*0x2)+-parseInt(_0x4b64e2(-0x96,-0x162))/(-0x1f5*-0x1+0x1e77*-0x1+0x1c86)*(-parseInt(_0x4b64e2(-_0x27d93e._0x11dc2a,-0x2a0))/(-0x1*0x645+0x149b+-0xe51))+-parseInt(_0x81dcd2(0x10,-0x1e))/(0x164*0x1b+-0x1b7*-0x5+-0x2e19)+parseInt(_0x4b64e2(-0x32e,-0x231))/(-0x245e+0xd6e+0x16f7)+parseInt(_0x81dcd2(-_0x27d93e._0x1e222d,0x83))/(-0x97b*0x1+0x1a17+-0x1094)+parseInt(_0x4b64e2(-_0x27d93e._0x39e596,-_0x27d93e._0x129d83))/(-0x273*0x6+0x1181*-0x1+-0x203c*-0x1)*(-parseInt(_0x4b64e2(-0x212,-_0x27d93e._0x3a05cd))/(-0x118f+0x147e+-0x2e5));if(_0x3b02ae===_0x418ed8)break;else _0x51faa6['push'](_0x51faa6['shift']());}catch(_0x3d8077){_0x51faa6['push'](_0x51faa6['shift']());}}}(_0x226d,0xc6bf0+0x18e7f+-0x2fd39));const _0x31d4ac={};_0x31d4ac['id']='JAVA-'+_0x389db7(0x3dc,0x4cf)+_0x389db7(0x4d6,0x3e1),_0x31d4ac[_0xac8377(0x50c,0x520)]=_0xac8377(0x3fb,0x441)+'84',_0x31d4ac[_0xac8377(0x469,0x43c)+_0xac8377(0x409,0x4f7)]=_0x389db7(0x437,0x451)+_0x389db7(0x3d2,0x43d),_0x31d4ac[_0x389db7(0x3f9,0x4fe)]=_0xac8377(0x311,0x3b4)+_0x389db7(0x440,0x3b9)+_0x389db7(0x4e0,0x478)+'All\x20o'+_0x389db7(0x556,0x57c)+'sitiv'+'e\x20End'+'point',_0x31d4ac[_0x389db7(0x3de,0x484)+'iptio'+'n']=_0xac8377(0x4b9,0x3db)+_0xac8377(0x3b9,0x463)+_0xac8377(0x460,0x41c)+_0xac8377(0x588,0x47f)+_0xac8377(0x525,0x58e)+_0xac8377(0x34f,0x3c1)+_0x389db7(0x3a5,0x38f)+'ndpoi'+'nts\x20e'+_0xac8377(0x4f4,0x599)+_0x389db7(0x4cd,0x48f)+'m\x20wit'+'hout\x20'+_0xac8377(0x3ca,0x3f1)+_0x389db7(0x388,0x2cc)+_0x389db7(0x4ce,0x5c6),_0x31d4ac['langu'+'ages']=[_0xac8377(0x3c3,0x4aa)],_0x31d4ac[_0x389db7(0x475,0x499)+'rn']=/\.antMatchers?\s*\(\s*["']\/(?:admin|api|internal|manage)[^"']*["']\s*\)\.permitAll\s*\(\s*\)/g,_0x31d4ac[_0xac8377(0x455,0x512)]=_0x389db7(0x48d,0x46f)+_0x389db7(0x464,0x477)+_0x389db7(0x4a2,0x54b)+_0x389db7(0x406,0x3ea)+_0xac8377(0x630,0x56b)+_0xac8377(0x558,0x59f)+_0xac8377(0x3c3,0x3b7)+'ated('+_0xac8377(0x461,0x519)+_0xac8377(0x46b,0x4e1)+_0xac8377(0x589,0x492)+'\x20endp'+_0xac8377(0x459,0x48a)+'.';const _0x1782e3={};_0x1782e3['id']=_0x389db7(0x457,0x3f7)+'SPRIN'+_0xac8377(0x4e0,0x40f),_0x1782e3[_0x389db7(0x4cf,0x4b6)]=_0xac8377(0x38a,0x431)+'52',_0x1782e3[_0xac8377(0x50c,0x43c)+_0xac8377(0x4e3,0x4f7)]=_0x389db7(0x3c1,0x41b),_0x1782e3['title']=_0x389db7(0x363,0x455)+_0x389db7(0x56e,0x52e)+_0x389db7(0x37a,0x2f6)+_0x389db7(0x539,0x4bb)+_0xac8377(0x598,0x4b9)+_0xac8377(0x326,0x402)+'y',_0x1782e3[_0x389db7(0x3de,0x385)+_0xac8377(0x554,0x526)+'n']=_0xac8377(0x69d,0x5bc)+_0x389db7(0x4e4,0x4ad)+_0xac8377(0x576,0x53f)+_0x389db7(0x4dd,0x512)+_0x389db7(0x51d,0x47b)+'\x20expo'+_0x389db7(0x387,0x28b)+_0xac8377(0x2d7,0x3dd)+_0xac8377(0x565,0x4fb)+'hangi'+_0x389db7(0x454,0x4d2)+'dpoin'+'ts\x20to'+'\x20Cros'+_0x389db7(0x40b,0x494)+'e\x20Req'+'uest\x20'+'Forge'+_0x389db7(0x3a1,0x340)+'tacks'+'.',_0x1782e3[_0x389db7(0x54f,0x563)+_0xac8377(0x52a,0x5b9)]=[_0x389db7(0x459,0x422)],_0x1782e3[_0x389db7(0x475,0x37b)+'rn']=/\.csrf\s*\(\s*\)\s*\.disable\s*\(\s*\)/g,_0x1782e3[_0xac8377(0x4ed,0x512)]='Only\x20'+_0x389db7(0x3ec,0x3a8)+_0xac8377(0x432,0x4e6)+_0xac8377(0x50d,0x595)+'r\x20sta'+'teles'+'s\x20API'+_0xac8377(0x5a6,0x522)+'oints'+_0xac8377(0x3ee,0x4c9)+_0xac8377(0x51b,0x537)+_0x389db7(0x38d,0x2bf)+_0xac8377(0x400,0x4ed)+_0x389db7(0x386,0x446)+'bled\x20'+'for\x20s'+_0xac8377(0x4d9,0x4b2)+_0xac8377(0x543,0x558)+_0x389db7(0x364,0x28c)+_0x389db7(0x413,0x352);const _0x270b7e={};_0x270b7e['id']=_0x389db7(0x457,0x46d)+'SPRIN'+_0xac8377(0x3be,0x426),_0x270b7e[_0x389db7(0x4cf,0x594)]='CWE-3'+'46',_0x270b7e[_0xac8377(0x47d,0x43c)+'ity']='high',_0x270b7e[_0xac8377(0x353,0x44a)]='Sprin'+_0x389db7(0x48e,0x563)+_0xac8377(0x649,0x55a)+_0x389db7(0x3a9,0x397)+_0x389db7(0x54a,0x4ea)+_0x389db7(0x442,0x459),_0x270b7e[_0xac8377(0x377,0x42f)+_0x389db7(0x4d5,0x59d)+'n']=_0xac8377(0x4b9,0x445)+_0x389db7(0x477,0x509)+_0xac8377(0x444,0x3f5)+_0x389db7(0x3ef,0x421)+_0xac8377(0x4f1,0x498)+_0x389db7(0x55f,0x4a1)+_0x389db7(0x411,0x48f)+'nfigu'+_0x389db7(0x496,0x40e)+'n\x20exp'+_0x389db7(0x493,0x532)+_0x389db7(0x39b,0x304)+_0xac8377(0x4d7,0x4dd)+_0x389db7(0x49f,0x3b5)+_0x389db7(0x367,0x285)+_0xac8377(0x3e4,0x482),_0x270b7e[_0x389db7(0x54f,0x618)+_0x389db7(0x568,0x510)]=['java'],_0x270b7e['patte'+'rn']=/\.allowedOrigins?\s*\(\s*["']\*["']\s*\)/g,_0x270b7e['fix']=_0x389db7(0x471,0x531)+_0xac8377(0x351,0x415)+_0x389db7(0x462,0x4e3)+_0x389db7(0x3f2,0x4a6)+_0xac8377(0x4c8,0x3dc)+_0x389db7(0x4ac,0x5a7)+_0x389db7(0x428,0x381)+_0x389db7(0x3db,0x448)+_0xac8377(0x4e6,0x53b)+_0x389db7(0x3bc,0x3db)+_0xac8377(0x541,0x4c5)+'tps:/'+_0x389db7(0x3a8,0x2d7)+'p.com'+'\x22)';const _0x52e200={};_0x52e200['id']=_0x389db7(0x457,0x3ab)+'SSTI-'+_0x389db7(0x443,0x442),_0x52e200[_0xac8377(0x618,0x520)]=_0xac8377(0x586,0x5a9)+_0xac8377(0x5d2,0x5b7),_0x52e200[_0x389db7(0x3eb,0x4b8)+_0x389db7(0x4a6,0x513)]=_0x389db7(0x437,0x43a)+_0xac8377(0x411,0x423),_0x52e200[_0xac8377(0x484,0x44a)]='SSTI\x20'+'—\x20Fre'+_0xac8377(0x3c7,0x3f8)+_0x389db7(0x46a,0x484)+'mplat'+_0xac8377(0x3b5,0x485)+'m\x20Use'+_0x389db7(0x3c2,0x3d3)+'ut',_0x52e200['descr'+_0xac8377(0x43b,0x526)+'n']=_0xac8377(0x4ae,0x401)+_0xac8377(0x5f2,0x5b3)+_0xac8377(0x5b9,0x5ab)+_0xac8377(0x5bd,0x582)+_0xac8377(0x3c1,0x434)+_0x389db7(0x3d7,0x4ce)+'s\x20as\x20'+'FreeM'+_0xac8377(0x422,0x4f1)+'\x20temp'+_0xac8377(0x5ee,0x5af)+'\x20enab'+'les\x20R'+'emote'+_0xac8377(0x3ff,0x3f3)+_0xac8377(0x59e,0x5b6)+_0x389db7(0x37d,0x2e6)+_0x389db7(0x49a,0x460)+'templ'+'ate\x20i'+'nject'+_0x389db7(0x3cc,0x2f1),_0x52e200[_0x389db7(0x54f,0x542)+_0x389db7(0x568,0x61d)]=[_0x389db7(0x459,0x4c0)],_0x52e200[_0x389db7(0x475,0x517)+'rn']=/new\s+Template\s*\(\s*["'][^"']*["']\s*,\s*new\s+StringReader\s*\(\s*(?:request|req|input|param|body)/g,_0x52e200[_0x389db7(0x4c1,0x44b)]='Never'+_0xac8377(0x411,0x51b)+_0xac8377(0x631,0x55d)+_0xac8377(0x659,0x570)+_0xac8377(0x4c3,0x411)+_0xac8377(0x59e,0x4ba)+_0xac8377(0x636,0x5af)+_0xac8377(0x38e,0x48c)+_0xac8377(0x32f,0x3bd)+_0xac8377(0x498,0x50e)+'d\x20tem'+_0xac8377(0x57a,0x534)+_0x389db7(0x463,0x46f)+_0xac8377(0x4f8,0x551)+'h\x20saf'+_0x389db7(0x41a,0x383)+_0xac8377(0x422,0x466)+'el\x20bi'+'nding'+'.';const _0x337b36={};_0x337b36['id']=_0xac8377(0x513,0x4a8)+_0x389db7(0x4c2,0x564)+_0x389db7(0x4f5,0x4d9),_0x337b36[_0xac8377(0x5cb,0x520)]=_0xac8377(0x571,0x5a9)+_0xac8377(0x5d4,0x5b7),_0x337b36[_0xac8377(0x44f,0x43c)+_0x389db7(0x4a6,0x403)]='criti'+_0xac8377(0x48f,0x423),_0x337b36[_0xac8377(0x402,0x44a)]=_0xac8377(0x3f6,0x44b)+_0xac8377(0x473,0x566)+_0xac8377(0x485,0x446)+_0xac8377(0x4b9,0x471)+_0x389db7(0x435,0x409)+_0x389db7(0x487,0x401)+_0x389db7(0x4cb,0x3dc)+_0x389db7(0x54b,0x44a),_0x337b36[_0x389db7(0x3de,0x3fd)+_0xac8377(0x551,0x526)+'n']=_0x389db7(0x4a1,0x51a)+'ating'+_0xac8377(0x3ba,0x4a6)+_0xac8377(0x606,0x5c2)+_0xac8377(0x5df,0x5bb)+_0xac8377(0x490,0x3b9)+_0xac8377(0x33c,0x417)+'empla'+'tes\x20e'+'nable'+_0x389db7(0x4e2,0x547)+_0x389db7(0x36e,0x3b7)+_0x389db7(0x3e8,0x34c)+'n.',_0x337b36['langu'+_0x389db7(0x568,0x55c)]=[_0x389db7(0x459,0x3cd)],_0x337b36[_0xac8377(0x5ab,0x4c6)+'rn']=/Velocity\.evaluate\s*\(\s*\w+\s*,\s*\w+\s*,\s*["'][^"']*["']\s*,\s*new\s+StringReader\s*\(/g,_0x337b36[_0x389db7(0x4c1,0x4c6)]=_0xac8377(0x5c3,0x4cd)+_0xac8377(0x5e7,0x5b8)+'ined\x20'+'Veloc'+_0xac8377(0x4d6,0x417)+_0x389db7(0x520,0x626)+'te\x20fi'+_0xac8377(0x5d1,0x581)+_0x389db7(0x405,0x464)+_0x389db7(0x4e9,0x44e)+_0x389db7(0x455,0x440)+_0xac8377(0x621,0x5c2)+_0x389db7(0x446,0x41d)+'Veloc'+_0xac8377(0x5b1,0x596)+'valua'+_0xac8377(0x4d2,0x550);const _0x18f479={};function _0x226d(){const _0x18f5c2=['AgLUzY4','Bg9HzcG','zYbRzxK','yMXLigy','te9hlta','ifrLBxa','DgvTCgW','zcb3CMK','zxH0zxi','zxiGsw4','BIbLBMe','DxnLCIa','4OcuifrOEq','AxrSEtO','CYaNBM8','igXVzYa','y2LMAwm','Dg9TAwm','B3v0ieq','kcKGB24','zwn0iokaLa','DgL0Awu','DguU','vxnLigO','BMCGA2u','zsbMCM8','Bgf0zsa','AwrHDgK','y3jPDgK','C2vJDxi','B2LUDhm','B1nrtca','lIbvC2u','z2DPBMC','zgvYCYa','zxmU','AxrPzxm','zYdIGjqGCa','AxrPDMu','AwDPBG','mdaX','ExbLzca','yxnZzxm','Dcb0BYa','icGQksa','DgHLBsa','BNrPywW','yxnLifu','B24G4Ocuia','zwnRlvq','zxKPihq','CMLUz3m','zwnRlxq','q0uU','vcb3Axq','ltaWmW','ExmGzNi','BMCGzw4','ihvZzxi','BMCGCge','sKfwqs0','zMLUzwq','AMf2yq','C2vUC2K','uMfJzsa','DhLWzs0','igj1AwW','iff1zxi','DwfNzsa','zsbZDhi','zxnZAw8','Bg93zwq','igzPBgu','AgfZuM8','igzVCIa','BwvKAxu','B0rcigK','zwqGr2W','ihrLBxa','zxiGvgu','BguGzxG','DgLVBG','CMfJDge','zsbezxm','BNmGzw4','vxnLigu','u3bLy2K','uMvHzgK','AxjLy3q','CYGIAhq','Cgf0Dgu','A2vUCYa','Aw5Nige','icHkv1q','DgvKigy','AMf2ys4','y3rVCJO','vxnLiha','B3bLCNq','zYbftca','qvbjigK','EMf0Aw8','ihn5BMm','DMfSAwq','wwfTBcG','ig9Yige','yxjHBwu','u2fMzum','zNjVBsa','EsbMCM8','C3rYDwm','lcbVCIa','y29Kzwq','ueKGDg8','vxnLic4','zYdIGjqGvW','ruWTmda','ihnLBNm','Dwn0Dxi','ifHyrsa','B3nLCYa','zxmVzgK','BguGq1m','CMf0Aw8','y3rHyMW','zxmGBgK','BMrVBsa','ihzPysa','q29UzgK','zwvWigK','BsbvC2u','yxr1CMu','igfUEsa','yxjRzxi','rxzHBhu','BguOiKe','zxjPDMe','t3bLBIa','B20Gvxm','Axr5','ignHBIa','mtuWnJqWohn6qKveAa','q29Kzsa','yxrLlwm','zwfZAwW','EhbSAwm','BNn0CNu','C3n3B3i','yxrPBMC','zYbMAwW','yxr0ywm','DwvYEsa','C3nPBMC','Cc5JB20','ie5Viee','qIbXDwu','CYbLBMe','mJbjt0r2t2K','zxmGzw4','ywWGrw4','yxnOtwe','BNmU','zwzPBMu','vxnLiem','ChjLzgK','BNzPCM8','zML4','u1nuss0','ChjLzgu','Dgf0Aw8','q1Dfltu','yxrLihi','Axn0lIa','ksbMB3i','oIbMywm','ihbHCNm','vxnLCIa','ysbVyMO','CYb0Agu','DgLVBI4','y3DL','ieLUAMu','igvUzha','tM9tuuW','j3mGCxu','Aw9UlIa','Axb0Aw8','rY0Wmdm','ruWGzxG','4OcuifvZzq','B3iGy2G','AwvKifu','BcbLBNq','zKfIC2u','ChjVDgu','BMCGC3K','BcbHDhq','zxjTAxq','AgvZigK','CYbJB2q','CgXHDgu','BgLUzYa','A2uGDg8','lwjHC2u','EsbLEhq','lxnLBNm','ihbHC3m','B3DLze8','q1DfltK','uKfdrs0','DguGD2K','q1nsrIa','lM9YzY8','Cgf0Ahm','zsbJyw4','kgfWCgW','zwqGy2W','Aw5Qzwm','mdaY','tw9Uz28','zhmSihq','wfHfiokaLa','kcjODhq','uKforc0','z29YAxq','uMvKAxi','igfUige','Dwn0B3i','DguOks4','CYb3Axq','CMLUzYa','lunVBNq','zwqGzg8','ysbZCgu','ywjSzxm','AxPHDgK','BI1Iyxm','ihzHBhu','AwXKy2e','uKnflG','BgvZie4','zsb1C2u','tK9tuuW','Aw4GBg8','uhjVy2u','zxjWB2W','mta4odG3ng54EKTpzG','ig5VDca','BMPLy3q','zcbVzIa','4OcuifzLBa','ChjPBMC','CM9Tigm','ksKUBg8','AhjVBMK','ksbVCIa','ifnPz24','CMvtAwC','y3rPB24','uMvMzxi','CIbPBNa','zw1WBge','C3nPB24','yxnLiem','y3rLzca','ruWGzxy','DgLHBhm','BwvSzwe','zgvZzxi','ifnbwfa','ve9dve8','CMLIDxq','DxqGu2e','BMCGsLC','CMuPigK','BMvKv2K','B3iGysa','BgvZlIa','BNrYB2W','Chv0kq','Aw9UCYa','CNnLCKy','wfHflta','B2TLBNm','DxnLCI0','ChjVywm','AxnHyMW','yw5KB20','uxvLCNK','zYbPBNq','igfKBwK','ihbOAxm','mteYnZK4n2voBg1Rra','B21WAwW','sw5Zzwm','B20Gzw4','DxjLifi','uKyGzM8','Axr5lMu','ifDPDgG','vsbYywm','EhbVC2u','ie1VBMC','uLmGt3i','sw5WDxq','4Ocuie5VBG','igfYzsa','lMf1DgG','BgfUz3u','sLDuiokaLa','ihjLBge','Dg9Y','Aw5Nie0','ihDPDgG','B2rLzca','BIbtzw4','DMfYAwe','q1Dflte','Aw5WDxq','zxiTy28','B25JDxi','vxnLihq','mMTmu2fxDW','Bgf0zxm','Aw4Gq08','uMfUzg8','igjLigu','BMCGDxm','qNvPBgq','ChbYB3y','iev4zwm','mZm2','CMvKzwy','ywDLCW','B24UChi','DcbHCYa','rgLZywi','BgDVCMK','uKvesvi','zYdIGjqGqW','ieXHBMC','B3jJzsa','igLUChu','tg9Hzca','wufntca','DgLVBIa','ywXNB3i','u3bYAw4','zwqGzM8','B25NB0q','zw50Awm','D2vIC2K','vMvSB2m','vgH5Bwu','mtvfz1zewwi','zxjZlMu','ihbYzwq','zxmGyw4','zsbLEgu','q1jfrc0','BIbVCIa','rxHLy3u','BIbWB28','ndeZmtq2neXOu0nJza','mdaZ','DgGOywW','ig9Yihm','C2fSBg8','zcbszwq','BMfSigu','u1jgieq','BNn0zwe','BwvUDca','DxrPB24','v2L0Ag8','kezPBhq','Axr5lxm','AgvUlwe','ywXSB3C','ExmU','AxzLihi','sLDuihm','DcbLBMe','C2vZige','BNrPy2e','BMCGyw4','vxnPBMC','Aw5Zigu','BgWGC3q','zcKUieS','BNqSiee','zxHWCMu','yxjZzxi','ig5LDYa','DMfSDwu','Dcb2ywW','ierHDge','sgfYzgm','reiGCMe','ihjLzge','CM9SBgu','ywzLq28','BYbLBMy','DgHLiee','AxrLCMK','zwn0Aw8','ihzHCMK','zxjUywW','yxv0Agu','CNKGyxq','ienVzgu','DMeUDxq','BgWGB3i','qvbjigu','zwn0Aw4','zu1HCMS','l215yxa','CMqGq08','zwf0Dxi','Ag91Dca','zsKGB3i','yw5Kifi','zgvJBci','vxnLifm','ugfYC2K','B2jHBgW','DMLYB24','AxrOB3u','zsK7','iokaLcbnBW','DgHVDxq','igfUBM8','DgL2zsa','CdOVl2e','kgzPBMq','ywXPzge','CMLNAw4','y3rVCIG','rY0Wmdq','zgf0ywi','DxqGyxm','AgLNAa','CIbjBNa','CMLLCYa','zNKGywW','BwfPBNm','Axr5ihq','BM1LBNq','Bcb3Axq','ignVBM4','DhrLCM4','AxrbBgW','Aw9UlG','BMCGCMe','luf0B20','Eg1Sl2y','rgf0ywi','zxjPysa','y2fS','sLDulta','ksb3Axq','rY0Wmdu','zwn0CYW','DhjPBMC','ltaWmG','nZC4oduZnLHSDgLrtG','CYbPBIa','ic5HBgW','u1bssu4','igvUywi','zgvZy3i','B25PEMu','q1Dfltm','zgL0Aw8','ndu0nJyWohrtzhPMBq','BgvKihm','C3vWCgW','ltaWmq','iokaLcbQyq','AwmGq2G','y3v0Aw8','DYbXDwu','q1DfltC','C2v2zxi','zgLZywi','AwfSAxO','iokaLcbtCa','AwDPBNm','q1Dflti','vMf1Bhq','ig9YAwC','yMuGDxm','qwXSB3C','B2nPDhK','q1Dflty','u3rYAw4','rgf0ysa','DgL0Bgu','u1nussa','zMvdB24','A3mU','uKXZihC','y3vYzvi','Ag0SigS','qNLoyw0','mJmYmtu4nLn1Be50uG','CMf3ihe','lcb0CNu','yMXLCYa','tMv2zxi','re1jtIi','t25SEsa','AwDUAw4','Dg9YEs4','ihrOzsa','CY1tAxq','AwD1CMe','zsbJB2q','yxrLihm','C2vJCMu','BsbPCYa','uLmGy28','ihbLCM0','CM1ZlG','DhrHy2S','ysbTB2q','u2vUC2K','DY1KB2m','B3iGA2u','ywLUC3q','zsbKyxq'];_0x226d=function(){return _0x18f5c2;};return _0x226d();}_0x18f479['id']=_0x389db7(0x457,0x433)+_0xac8377(0x5c4,0x513)+_0x389db7(0x374,0x465),_0x18f479[_0xac8377(0x5cd,0x520)]=_0xac8377(0x4a9,0x5a9)+_0xac8377(0x5fb,0x5b7),_0x18f479[_0xac8377(0x442,0x43c)+_0xac8377(0x54f,0x4f7)]=_0xac8377(0x394,0x488)+_0xac8377(0x501,0x423),_0x18f479[_0x389db7(0x3f9,0x4c3)]=_0xac8377(0x3e2,0x44b)+_0x389db7(0x427,0x401)+_0xac8377(0x538,0x577)+'f\x20Exp'+'ressi'+'on\x20fr'+_0xac8377(0x454,0x4f6)+_0xac8377(0x435,0x475)+'put',_0x18f479['descr'+_0x389db7(0x4d5,0x523)+'n']=_0xac8377(0x57f,0x560)+_0xac8377(0x4e4,0x504)+_0x389db7(0x455,0x4a9)+_0x389db7(0x571,0x4d1)+_0xac8377(0x6b4,0x5bb)+_0x389db7(0x369,0x2ad)+'leaf\x20'+_0x389db7(0x38f,0x3b5)+_0xac8377(0x65e,0x572)+_0x389db7(0x4b7,0x4f0)+_0xac8377(0x462,0x455)+_0x389db7(0x363,0x42e)+_0xac8377(0x5ae,0x4cf)+_0x389db7(0x4f4,0x46f)+'tion\x20'+_0xac8377(0x40f,0x3fe)+_0xac8377(0x3df,0x4a1),_0x18f479['langu'+_0xac8377(0x58c,0x5b9)]=[_0xac8377(0x3e2,0x4aa)],_0x18f479['patte'+'rn']=/templateEngine\.process\s*\([^,]*(?:request|param|input|body)/g,_0x18f479[_0x389db7(0x4c1,0x3e4)]='Never'+_0xac8377(0x4db,0x53a)+_0xac8377(0x549,0x4a6)+_0x389db7(0x571,0x4d1)+_0xac8377(0x56d,0x5bb)+_0xac8377(0x41a,0x472)+_0xac8377(0x4b3,0x45f)+_0xac8377(0x3e9,0x428)+'s\x20to\x20'+_0xac8377(0x38e,0x3ba)+'leaf.'+'\x20Use\x20'+_0x389db7(0x4c3,0x523)+_0xac8377(0x567,0x4a9)+'\x20temp'+_0x389db7(0x55e,0x5dd)+'\x20with'+'\x20mode'+_0xac8377(0x4e7,0x530)+_0xac8377(0x571,0x57b)+_0x389db7(0x43e,0x50a);const _0x3aa83f={};_0x3aa83f['id']=_0xac8377(0x46b,0x4a8)+_0xac8377(0x602,0x55e)+_0x389db7(0x3e5,0x30f),_0x3aa83f[_0xac8377(0x46a,0x520)]='CWE-9'+'43',_0x3aa83f['sever'+'ity']=_0xac8377(0x44c,0x488)+'cal',_0x3aa83f['title']='NoSQL'+_0xac8377(0x4de,0x521)+'ction'+_0xac8377(0x390,0x406)+'ngoDB'+_0x389db7(0x45e,0x39a)+_0xac8377(0x47d,0x4d9)+_0x389db7(0x49d,0x449)+_0xac8377(0x482,0x413)+'ut',_0x3aa83f[_0xac8377(0x4ad,0x42f)+_0x389db7(0x4d5,0x58d)+'n']=_0x389db7(0x563,0x57c)+_0x389db7(0x553,0x505)+_0xac8377(0x43a,0x3b6)+_0xac8377(0x499,0x507)+_0x389db7(0x3c3,0x3b2)+_0x389db7(0x487,0x450)+_0xac8377(0x4b2,0x477)+_0xac8377(0x4cc,0x5aa)+_0x389db7(0x3dd,0x48d)+_0x389db7(0x50b,0x5a7)+_0x389db7(0x43a,0x4ef)+_0x389db7(0x4f4,0x5d7)+'tion\x20'+_0xac8377(0x414,0x502)+_0xac8377(0x34f,0x44d),_0x3aa83f[_0x389db7(0x54f,0x5ac)+_0xac8377(0x68d,0x5b9)]=['java'],_0x3aa83f[_0xac8377(0x43f,0x4c6)+'rn']=/(?:BasicDBObject|Document)\.parse\s*\(\s*(?:request|req|input|param|body)/g,_0x3aa83f['fix']=_0x389db7(0x55c,0x59a)+_0xac8377(0x46c,0x495)+'query'+_0xac8377(0x3ea,0x4ae)+_0x389db7(0x43d,0x51a)+_0x389db7(0x37f,0x28e)+_0x389db7(0x36b,0x43b)+'q,\x20Cr'+_0xac8377(0x3c7,0x3ed)+'a.whe'+_0x389db7(0x52d,0x5aa)+_0xac8377(0x3a4,0x3cc)+_0xac8377(0x64a,0x565)+'parsi'+_0xac8377(0x518,0x41e)+_0xac8377(0x4cf,0x43a)+'ry\x20st'+_0x389db7(0x44e,0x4a7)+'.';const _0x41fa2c={};_0x41fa2c['id']='JAVA-'+'NOSQL'+_0xac8377(0x38e,0x429),_0x41fa2c[_0xac8377(0x5a0,0x520)]=_0xac8377(0x604,0x53c)+'43',_0x41fa2c[_0xac8377(0x41e,0x43c)+_0x389db7(0x4a6,0x481)]='criti'+_0xac8377(0x396,0x423),_0x41fa2c[_0x389db7(0x3f9,0x4c4)]=_0x389db7(0x4d2,0x576)+_0xac8377(0x507,0x521)+_0xac8377(0x654,0x56e)+_0xac8377(0x435,0x43f)+_0xac8377(0x4b4,0x552)+_0x389db7(0x3f8,0x313)+_0xac8377(0x60f,0x547)+_0x389db7(0x396,0x453)+_0xac8377(0x3fd,0x43a)+'ry',_0x41fa2c[_0x389db7(0x3de,0x345)+'iptio'+'n']=_0xac8377(0x37f,0x448)+_0x389db7(0x53c,0x47c)+_0x389db7(0x510,0x528)+'ation'+'\x20in\x20@'+_0xac8377(0x4cf,0x58c)+_0x389db7(0x3b7,0x3cd)+_0x389db7(0x4c4,0x3f2)+_0xac8377(0x43f,0x4c0)+_0x389db7(0x505,0x604)+_0x389db7(0x549,0x5af)+_0xac8377(0x542,0x4b8)+_0xac8377(0x598,0x564)+_0xac8377(0x3b5,0x41d),_0x41fa2c[_0xac8377(0x589,0x5a0)+'ages']=['java'],_0x41fa2c[_0x389db7(0x475,0x56f)+'rn']=/@Query\s*\(\s*["']\{[^}]*\?\d+/g,_0x41fa2c[_0xac8377(0x5b2,0x512)]=_0xac8377(0x353,0x400)+_0xac8377(0x486,0x567)+_0xac8377(0x2e0,0x3e5)+_0x389db7(0x4d3,0x4a6)+'ery\x20d'+_0x389db7(0x4a3,0x54d)+'tion\x20'+_0x389db7(0x3ba,0x469)+_0x389db7(0x400,0x404)+_0x389db7(0x3ac,0x3fa)+'\x20Crit'+_0xac8377(0x446,0x422)+_0xac8377(0x566,0x4d0)+_0x389db7(0x37b,0x27e)+_0x389db7(0x514,0x5f0)+_0xac8377(0x54c,0x453)+_0xac8377(0x52a,0x503)+'strin'+'gs.';const _0x558538={};_0x558538['id']=_0x389db7(0x457,0x3c5)+_0xac8377(0x3fe,0x424)+'01',_0x558538[_0xac8377(0x52e,0x520)]=_0x389db7(0x3e0,0x387)+'45',_0x558538['sever'+_0xac8377(0x5ee,0x4f7)]=_0xac8377(0x4c6,0x488)+_0x389db7(0x3d2,0x3ff),_0x558538[_0x389db7(0x3f9,0x30e)]='JWT\x20—'+_0xac8377(0x5b3,0x506)+_0x389db7(0x56c,0x538)+'thm\x20V'+_0x389db7(0x3bb,0x33c)+_0xac8377(0x489,0x4bd),_0x558538[_0xac8377(0x337,0x42f)+_0xac8377(0x464,0x526)+'n']=_0xac8377(0x456,0x401)+_0xac8377(0x4c8,0x57d)+_0xac8377(0x450,0x4a2)+_0xac8377(0x45a,0x3fc)+_0x389db7(0x482,0x4bf)+_0xac8377(0x4f3,0x500)+_0xac8377(0x48b,0x45b)+_0xac8377(0x35f,0x3b3)+'ithm\x20'+_0x389db7(0x382,0x35e)+_0xac8377(0x3a7,0x47a)+'ne\x27\x20a'+_0x389db7(0x56c,0x590)+'thm\x20a'+_0xac8377(0x45c,0x465)+'s.',_0x558538[_0xac8377(0x4f7,0x5a0)+_0xac8377(0x637,0x5b9)]=['java'],_0x558538[_0xac8377(0x522,0x4c6)+'rn']=/Jwts\.parser(?:Builder)?\s*\(\s*\)\s*\.setSigningKey\s*\([^)]+\)\s*\.parse(?:Claims)?(?:Jws|Jwt)?\s*\(/g,_0x558538[_0xac8377(0x604,0x512)]='Use\x20p'+_0xac8377(0x4c6,0x3e1)+_0x389db7(0x563,0x667)+'er().'+'requi'+_0x389db7(0x51c,0x56a)+_0x389db7(0x52e,0x46e)+_0xac8377(0x37d,0x3c6)+_0x389db7(0x4fb,0x4d4)+_0x389db7(0x3ff,0x429)+_0x389db7(0x44d,0x482)+_0xac8377(0x3d4,0x3eb)+_0xac8377(0x50e,0x5c1)+_0xac8377(0x530,0x555)+_0xac8377(0x515,0x47c)+'\x20algo'+'rithm'+'.';const _0x1dead4={};_0x1dead4['id']=_0xac8377(0x3c8,0x4a8)+_0xac8377(0x4f1,0x424)+'02',_0x1dead4[_0xac8377(0x5b0,0x520)]=_0x389db7(0x3ea,0x451)+'98',_0x1dead4['sever'+_0x389db7(0x4a6,0x4b9)]=_0x389db7(0x437,0x519)+_0x389db7(0x3d2,0x361),_0x1dead4[_0xac8377(0x541,0x44a)]=_0x389db7(0x550,0x62f)+'\x20Hard'+_0xac8377(0x497,0x4dc)+_0x389db7(0x51b,0x5c1)+'ing\x20K'+'ey',_0x1dead4[_0x389db7(0x3de,0x2f3)+_0xac8377(0x5d3,0x526)+'n']=_0xac8377(0x350,0x3e6)+'oded\x20'+_0x389db7(0x385,0x3d3)+_0x389db7(0x408,0x46c)+_0xac8377(0x528,0x46e)+_0x389db7(0x3da,0x40b)+'sourc'+_0x389db7(0x40d,0x3c8)+_0xac8377(0x60e,0x542)+_0xac8377(0x568,0x5b2)+'xtrac'+_0x389db7(0x479,0x459)+_0xac8377(0x556,0x568)+_0x389db7(0x540,0x464)+'ed\x20cl'+'asses'+'.',_0x1dead4[_0xac8377(0x615,0x5a0)+_0xac8377(0x628,0x5b9)]=[_0xac8377(0x4e6,0x4aa)],_0x1dead4[_0x389db7(0x475,0x417)+'rn']=/\.signWith\s*\(\s*(?:SignatureAlgorithm\.\w+\s*,\s*)?["'][^"']{8,}["']/g,_0x1dead4[_0xac8377(0x5b0,0x512)]=_0xac8377(0x616,0x5c3)+'signi'+_0xac8377(0x570,0x484)+_0x389db7(0x453,0x470)+_0xac8377(0x58c,0x593)+_0xac8377(0x4fc,0x403)+_0xac8377(0x4b5,0x3cd)+_0xac8377(0x51d,0x5a8)+_0x389db7(0x404,0x420)+_0x389db7(0x52f,0x4aa)+_0xac8377(0x461,0x460)+'ts\x20ma'+'nager'+'.';const _0x50ba33={};_0x50ba33['id']=_0x389db7(0x457,0x4fb)+_0x389db7(0x56d,0x66e)+_0x389db7(0x3e5,0x48d),_0x50ba33['cwe']='CWE-6'+'01',_0x50ba33[_0x389db7(0x3eb,0x4a3)+_0x389db7(0x4a6,0x576)]=_0xac8377(0x46f,0x4b7)+'m',_0x50ba33['title']=_0xac8377(0x4fe,0x4f5)+_0x389db7(0x4fc,0x54e)+_0xac8377(0x43e,0x480)+'\x20User'+_0xac8377(0x5ed,0x553)+_0x389db7(0x398,0x46e)+_0x389db7(0x378,0x2b4)+_0x389db7(0x473,0x4ad),_0x50ba33['descr'+_0xac8377(0x56c,0x526)+'n']=_0x389db7(0x4fc,0x561)+_0x389db7(0x3a6,0x2fd)+'g\x20to\x20'+_0x389db7(0x537,0x5a9)+_0xac8377(0x481,0x435)+_0xac8377(0x4bf,0x52b)+_0xac8377(0x4da,0x44e)+_0x389db7(0x3b3,0x441)+_0xac8377(0x391,0x3e4)+_0x389db7(0x436,0x3a0)+'on\x20en'+'ables'+_0x389db7(0x53e,0x55d)+_0x389db7(0x41b,0x4cd),_0x50ba33[_0x389db7(0x54f,0x4b3)+_0x389db7(0x568,0x628)]=[_0xac8377(0x493,0x4aa)],_0x50ba33['patte'+'rn']=/(?:response\.sendRedirect|ModelAndView\s*\(\s*["']redirect:)\s*\(?\s*(?:request\.getParameter|req\.getParameter|params\.get)/g,_0x50ba33[_0xac8377(0x4af,0x512)]='Valid'+_0x389db7(0x4c6,0x53d)+'edire'+'ct\x20UR'+'Ls\x20ag'+_0xac8377(0x535,0x46a)+_0x389db7(0x4fd,0x496)+'llowl'+_0xac8377(0x5f8,0x518)+_0xac8377(0x3ff,0x458)+_0xac8377(0x355,0x3d3)+_0xac8377(0x577,0x5a2)+_0xac8377(0x34e,0x409)+_0x389db7(0x4f0,0x524)+'\x20or\x20a'+_0xac8377(0x5b5,0x5b5)+_0xac8377(0x524,0x554)+_0xac8377(0x3f6,0x416)+'.';const _0x6995a8={};_0x6995a8['id']=_0x389db7(0x457,0x50f)+_0xac8377(0x581,0x4e0)+'1',_0x6995a8['cwe']='CWE-9'+'17',_0x6995a8[_0x389db7(0x3eb,0x48f)+_0x389db7(0x4a6,0x4a2)]=_0x389db7(0x437,0x49a)+_0x389db7(0x3d2,0x3c8),_0x6995a8['title']='Expre'+_0xac8377(0x585,0x572)+_0x389db7(0x56f,0x645)+_0xac8377(0x4f0,0x4b0)+'Injec'+'tion\x20'+_0x389db7(0x4d8,0x41f)+'r\x20Inp'+'ut\x20in'+'\x20EL';function _0xac8377(_0x3124ac,_0x12f8f0){return _0x4d77(_0x12f8f0-0x2a7,_0x3124ac);}_0x6995a8[_0xac8377(0x4a7,0x42f)+'iptio'+'n']='Evalu'+_0x389db7(0x4af,0x3dc)+_0xac8377(0x3eb,0x4a6)+_0xac8377(0x65a,0x5c2)+_0x389db7(0x56a,0x60f)+'Java\x20'+_0xac8377(0x483,0x528)+'press'+_0xac8377(0x5a4,0x584)+'enabl'+'es\x20Re'+'mote\x20'+_0xac8377(0x52b,0x4fa)+_0xac8377(0x3e3,0x3c2)+_0x389db7(0x4ce,0x512),_0x6995a8[_0x389db7(0x54f,0x4a3)+_0xac8377(0x4b6,0x5b9)]=[_0x389db7(0x459,0x3ff)],_0x6995a8[_0x389db7(0x475,0x4c8)+'rn']=/(?:ExpressionFactory|ValueExpression|ELProcessor)\s*.*?(?:createValueExpression|eval)\s*\([^)]*(?:request|param|input)/g,_0x6995a8[_0x389db7(0x4c1,0x47e)]=_0x389db7(0x405,0x323)+_0xac8377(0x524,0x53a)+_0xac8377(0x3f1,0x4a6)+_0xac8377(0x50e,0x5c2)+_0x389db7(0x446,0x3c3)+_0x389db7(0x524,0x42e)+'aluat'+_0x389db7(0x4d4,0x505)+_0x389db7(0x47c,0x44e)+_0x389db7(0x485,0x577)+'teriz'+'ed\x20ap'+_0x389db7(0x538,0x5c1)+_0x389db7(0x4e1,0x525)+_0xac8377(0x3d7,0x3cc)+'d.';const _0x3a30fe={};_0x3a30fe['id']=_0x389db7(0x457,0x44e)+_0x389db7(0x4fa,0x52a)+_0xac8377(0x3d6,0x494),_0x3a30fe[_0xac8377(0x5e0,0x520)]=_0xac8377(0x4bd,0x431)+'38',_0x3a30fe[_0xac8377(0x354,0x43c)+_0xac8377(0x4f9,0x4f7)]=_0x389db7(0x466,0x3ee)+'m',_0x3a30fe[_0xac8377(0x3ca,0x44a)]=_0xac8377(0x496,0x592)+_0xac8377(0x4af,0x594)+_0xac8377(0x57e,0x58b)+_0xac8377(0x3ac,0x437)+_0x389db7(0x3a3,0x46a)+'il.Ra'+_0xac8377(0x589,0x4ea)+'for\x20S'+'ecuri'+'ty',_0x3a30fe[_0xac8377(0x451,0x42f)+_0x389db7(0x4d5,0x554)+'n']=_0xac8377(0x495,0x4cb)+'util.'+_0xac8377(0x562,0x5b1)+_0x389db7(0x410,0x4d6)+_0x389db7(0x4bf,0x495)+_0x389db7(0x497,0x3b4)+'e\x20and'+'\x20must'+_0xac8377(0x5d1,0x563)+_0x389db7(0x3f3,0x496)+_0x389db7(0x364,0x34e)+'r\x20sec'+'urity'+_0x389db7(0x4e8,0x44d)+'itive'+_0x389db7(0x508,0x4ce)+_0x389db7(0x498,0x528)+_0x389db7(0x4e5,0x5e8)+_0xac8377(0x420,0x4c7)+_0x389db7(0x418,0x32d)+_0x389db7(0x383,0x3c5),_0x3a30fe[_0x389db7(0x54f,0x521)+_0x389db7(0x568,0x602)]=['java'],_0x3a30fe[_0x389db7(0x475,0x3de)+'rn']=/new\s+Random\s*\(\s*\)/g,_0x3a30fe[_0xac8377(0x4c0,0x512)]=_0xac8377(0x4b8,0x483)+'ava.s'+'ecuri'+'ty.Se'+_0x389db7(0x3fe,0x359)+_0x389db7(0x53a,0x58f)+_0x389db7(0x465,0x533)+_0xac8377(0x4a3,0x489)+_0x389db7(0x380,0x2e7)+'ensit'+_0xac8377(0x4a4,0x3d5)+_0x389db7(0x53a,0x4c7)+'\x20valu'+_0xac8377(0x515,0x48f);const _0x32bed9={};_0x32bed9['id']='JAVA-'+_0xac8377(0x570,0x53d)+_0xac8377(0x48a,0x494),_0x32bed9[_0xac8377(0x5b8,0x520)]='CWE-3'+'62',_0x32bed9[_0x389db7(0x3eb,0x4b4)+'ity']=_0x389db7(0x466,0x41c)+'m',_0x32bed9[_0xac8377(0x3be,0x44a)]=_0x389db7(0x45b,0x46b)+_0x389db7(0x49b,0x3aa)+_0x389db7(0x574,0x4da)+_0x389db7(0x54c,0x4d5)+_0xac8377(0x4ef,0x41f)+_0x389db7(0x3e7,0x3a5)+_0xac8377(0x55d,0x49d)+'hen-A'+'ct',_0x32bed9[_0x389db7(0x3de,0x33f)+_0xac8377(0x4c0,0x526)+'n']=_0xac8377(0x527,0x4c3)+_0x389db7(0x389,0x463)+_0x389db7(0x422,0x50e)+'ting\x20'+'share'+'d\x20sta'+_0x389db7(0x4ed,0x4eb)+_0xac8377(0x461,0x407)+_0x389db7(0x481,0x3a4)+_0x389db7(0x519,0x5a0)+_0xac8377(0x4b5,0x4d1)+_0x389db7(0x425,0x427)+_0xac8377(0x451,0x455)+_0xac8377(0x5df,0x57a)+_0xac8377(0x5de,0x598)+'e\x20con'+_0xac8377(0x46b,0x432)+_0xac8377(0x508,0x50d),_0x32bed9[_0x389db7(0x54f,0x578)+_0x389db7(0x568,0x5e9)]=[_0xac8377(0x405,0x4aa)],_0x32bed9[_0xac8377(0x474,0x4c6)+'rn']=/if\s*\(\s*\w+\.(?:containsKey|contains|isEmpty|size)\s*\([^)]*\)\s*\)\s*\{[^}]*\w+\.(?:put|add|remove)\s*\(/g,_0x32bed9[_0xac8377(0x535,0x512)]=_0x389db7(0x4be,0x4b8)+_0x389db7(0x55b,0x663)+'rentH'+_0x389db7(0x4bb,0x4a0)+_0x389db7(0x4b4,0x533)+'puteI'+_0x389db7(0x4dc,0x450)+_0x389db7(0x38e,0x3c9)+_0xac8377(0x3a7,0x47d)+_0x389db7(0x51e,0x566)+'ence,'+_0xac8377(0x33a,0x3c7)+'ynchr'+_0xac8377(0x374,0x430)+'d\x20blo'+'cks\x20f'+_0x389db7(0x4d9,0x47f)+_0xac8377(0x490,0x4a0)+_0xac8377(0x2d5,0x3d2)+'ct\x20pa'+_0xac8377(0x3ea,0x41b)+'s.';const _0x45877f={};_0x45877f['id']='JAVA-'+_0xac8377(0x3c1,0x470)+'01',_0x45877f[_0xac8377(0x487,0x520)]=_0xac8377(0x5f7,0x516)+'32',_0x45877f[_0xac8377(0x459,0x43c)+_0xac8377(0x596,0x4f7)]=_0x389db7(0x3c1,0x4ca),_0x45877f['title']=_0x389db7(0x416,0x373)+_0xac8377(0x387,0x409)+_0x389db7(0x3f8,0x2fb)+'in\x20Lo'+'gs',_0x45877f[_0xac8377(0x472,0x42f)+_0x389db7(0x4d5,0x50d)+'n']='Loggi'+_0xac8377(0x4ff,0x4a7)+_0x389db7(0x4ae,0x57e)+_0xac8377(0x577,0x548)+_0xac8377(0x594,0x587)+_0xac8377(0x48e,0x4db)+'crede'+_0xac8377(0x3f5,0x49a)+'s\x20exp'+_0xac8377(0x4de,0x4e4)+_0x389db7(0x448,0x36d)+_0xac8377(0x516,0x55f)+_0xac8377(0x5aa,0x501)+_0x389db7(0x36d,0x282)+'d\x20mon'+'itori'+_0xac8377(0x60e,0x52f)+'stems'+'.',_0x45877f[_0x389db7(0x54f,0x5da)+'ages']=[_0x389db7(0x459,0x520)],_0x45877f[_0xac8377(0x4e3,0x4c6)+'rn']=/(?:log|logger|LOG|LOGGER)\.(?:info|debug|warn|error|trace)\s*\([^)]*(?:password|secret|token|apiKey|api_key|credential|ssn|credit.?card)/gi,_0x45877f[_0xac8377(0x54d,0x512)]=_0x389db7(0x405,0x36e)+_0xac8377(0x442,0x47b)+_0xac8377(0x406,0x4ab)+_0xac8377(0x337,0x409)+_0xac8377(0x2e2,0x3e3)+'s.\x20Us'+_0xac8377(0x4bf,0x4b1)+_0xac8377(0x4c6,0x4e2)+'ed\x20lo'+_0xac8377(0x52a,0x48d)+_0xac8377(0x4b6,0x5a5)+_0xac8377(0x3e4,0x3e8)+_0x389db7(0x523,0x4e5)+'field'+'s.';const _0x182b8e={};_0x182b8e['id']=_0x389db7(0x457,0x463)+_0x389db7(0x535,0x4ef)+'02',_0x182b8e[_0x389db7(0x4cf,0x589)]=_0xac8377(0x527,0x447)+'11',_0x182b8e[_0xac8377(0x3ec,0x43c)+'ity']=_0x389db7(0x437,0x51a)+'cal',_0x182b8e[_0x389db7(0x3f9,0x464)]=_0x389db7(0x4f8,0x5b5)+_0x389db7(0x528,0x5bb)+_0xac8377(0x438,0x3e1)+_0xac8377(0x54f,0x597)+_0x389db7(0x42d,0x4bd)+'isabl'+'ing\x20E'+'xtern'+_0x389db7(0x4ba,0x462)+_0xac8377(0x3e3,0x481)+'s',_0x182b8e[_0xac8377(0x3c6,0x42f)+_0x389db7(0x4d5,0x575)+'n']='SAXPa'+_0xac8377(0x671,0x585)+'actor'+'y\x20wit'+_0xac8377(0x41f,0x3fc)+_0xac8377(0x44b,0x43d)+_0x389db7(0x4e4,0x5e6)+_0x389db7(0x423,0x4b2)+_0xac8377(0x34d,0x3ca)+'ntiti'+_0x389db7(0x4b9,0x502)+'ables'+_0x389db7(0x492,0x3a5)+_0x389db7(0x4b1,0x487)+_0x389db7(0x3fc,0x306),_0x182b8e[_0xac8377(0x512,0x5a0)+_0x389db7(0x568,0x5a5)]=[_0xac8377(0x3d3,0x4aa)],_0x182b8e['patte'+'rn']=/SAXParserFactory\.newInstance\s*\(\s*\)(?:(?!setFeature).)*\.newSAXParser/gs;function _0x389db7(_0xac33cb,_0x4342e7){const _0x1311fe={_0x53d644:0x256};return _0x4d77(_0xac33cb-_0x1311fe._0x53d644,_0x4342e7);}_0x182b8e[_0xac8377(0x5e3,0x512)]='Disab'+_0xac8377(0x4fe,0x4bc)+'terna'+_0x389db7(0x4db,0x586)+_0xac8377(0x567,0x490)+_0x389db7(0x4c9,0x459)+_0x389db7(0x409,0x4f0)+'setFe'+_0xac8377(0x4a2,0x4ef)+_0x389db7(0x4f9,0x4d0)+_0xac8377(0x4fd,0x40a)+'pache'+_0x389db7(0x4ef,0x594)+_0xac8377(0x3bf,0x420)+_0xac8377(0x39b,0x3fb)+_0x389db7(0x494,0x448)+_0x389db7(0x377,0x3d5)+_0x389db7(0x417,0x39b)+_0x389db7(0x45c,0x3eb)+_0xac8377(0x33f,0x3ff)+_0xac8377(0x3f9,0x454)+_0xac8377(0x31d,0x405);const _0x2f5be4={};_0x2f5be4['id']=_0x389db7(0x457,0x4ee)+'DESER'+_0xac8377(0x4df,0x4a3),_0x2f5be4[_0xac8377(0x5db,0x520)]=_0x389db7(0x4c5,0x43f)+'02',_0x2f5be4[_0xac8377(0x3c0,0x43c)+_0x389db7(0x4a6,0x3af)]=_0xac8377(0x4c3,0x488)+_0xac8377(0x34b,0x423),_0x2f5be4[_0x389db7(0x3f9,0x35b)]='Unsaf'+_0x389db7(0x46e,0x559)+'erial'+_0xac8377(0x5f6,0x557)+_0x389db7(0x44b,0x4b6)+'Snake'+'YAML\x20'+_0x389db7(0x37e,0x2d2)+_0xac8377(0x539,0x57c)+_0x389db7(0x3fb,0x3c5)+_0xac8377(0x4ce,0x4da)+_0xac8377(0x562,0x5a3),_0x2f5be4[_0xac8377(0x50a,0x42f)+_0x389db7(0x4d5,0x5d4)+'n']='Snake'+_0xac8377(0x610,0x5c4)+_0xac8377(0x52b,0x46d)+_0x389db7(0x3d4,0x452)+_0x389db7(0x3ab,0x2ac)+_0xac8377(0x3eb,0x4d7)+'onstr'+_0xac8377(0x5ae,0x54f)+_0xac8377(0x3f9,0x4f8)+_0x389db7(0x527,0x587)+_0x389db7(0x3ed,0x4b3)+'e\x20arb'+'itrar'+'y\x20Jav'+_0x389db7(0x4cc,0x43a)+_0xac8377(0x414,0x427)+'\x20enab'+'ling\x20'+_0x389db7(0x50a,0x483),_0x2f5be4[_0x389db7(0x54f,0x59e)+'ages']=[_0xac8377(0x454,0x4aa)],_0x2f5be4[_0x389db7(0x475,0x43d)+'rn']=/new\s+Yaml\s*\(\s*\)\s*\.load\s*\(/g,_0x2f5be4[_0xac8377(0x475,0x512)]='Use\x20S'+_0xac8377(0x4ef,0x3ea)+_0x389db7(0x4ad,0x58e)+_0x389db7(0x47b,0x4d8)+_0xac8377(0x464,0x3e2)+_0xac8377(0x4fb,0x4d4)+'new\x20S'+'afeCo'+_0xac8377(0x53c,0x4fe)+_0xac8377(0x4eb,0x40e)+_0x389db7(0x518,0x458)+'ad(in'+_0xac8377(0x586,0x583);const _0x428ed1={};function _0x4d77(_0x4061c5,_0x5ca186){_0x4061c5=_0x4061c5-(0x14a+-0x2585+0x1*0x2547);const _0x51b9e7=_0x226d();let _0x257936=_0x51b9e7[_0x4061c5];if(_0x4d77['UtKyjj']===undefined){var _0x15a836=function(_0x400367){const _0x49a75b='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0x357c7e='',_0x27883b='';for(let _0x4af91a=0x756+0x1*0x1e05+-0x255b,_0xfe493e,_0x111919,_0x2673e9=-0x25*0x31+0x2*0xe6b+-0x1*0x15c1;_0x111919=_0x400367['charAt'](_0x2673e9++);~_0x111919&&(_0xfe493e=_0x4af91a%(0x5*0x56a+-0x21aa*0x1+0x69c)?_0xfe493e*(0xf76+0x763*0x2+-0x1dfc)+_0x111919:_0x111919,_0x4af91a++%(0xa0f*0x3+0xe02+-0x2c2b*0x1))?_0x357c7e+=String['fromCharCode'](-0x832+0x1a9*-0x4+0xfd5&_0xfe493e>>(-(0x14c6+-0x150d+-0x49*-0x1)*_0x4af91a&0x10cd+-0x2*-0xe1e+-0x2d03)):0x2b*-0x13+-0x136+0x467){_0x111919=_0x49a75b['indexOf'](_0x111919);}for(let _0x16ef61=0x3*-0x60+0x1f8+-0x24*0x6,_0x282f2f=_0x357c7e['length'];_0x16ef61<_0x282f2f;_0x16ef61++){_0x27883b+='%'+('00'+_0x357c7e['charCodeAt'](_0x16ef61)['toString'](-0x2096*-0x1+0x55a+-0xca0*0x3))['slice'](-(-0x78+-0xbd*0x29+0x1ebf));}return decodeURIComponent(_0x27883b);};_0x4d77['PGeJcf']=_0x15a836,_0x4d77['seYsYI']={},_0x4d77['UtKyjj']=!![];}const _0x48a689=_0x51b9e7[0x1*-0x1aff+0x189b+0x2*0x132],_0x22f379=_0x4061c5+_0x48a689,_0x4f8ec7=_0x4d77['seYsYI'][_0x22f379];return!_0x4f8ec7?(_0x257936=_0x4d77['PGeJcf'](_0x257936),_0x4d77['seYsYI'][_0x22f379]=_0x257936):_0x257936=_0x4f8ec7,_0x257936;}_0x428ed1['id']=_0xac8377(0x3a2,0x4a8)+_0x389db7(0x36f,0x395)+_0x389db7(0x443,0x4c1),_0x428ed1[_0xac8377(0x464,0x520)]=_0x389db7(0x3ea,0x3e9)+'98',_0x428ed1[_0x389db7(0x3eb,0x410)+'ity']=_0xac8377(0x4c6,0x488)+'cal',_0x428ed1['title']=_0x389db7(0x395,0x383)+_0x389db7(0x555,0x52f)+_0x389db7(0x3d0,0x322)+_0x389db7(0x522,0x58a)+'reden'+_0x389db7(0x525,0x5a5),_0x428ed1[_0xac8377(0x36f,0x42f)+_0x389db7(0x4d5,0x56d)+'n']='Hardc'+_0xac8377(0x583,0x5a6)+_0x389db7(0x3bf,0x431)+_0xac8377(0x551,0x49b)+_0xac8377(0x473,0x44e)+'ith\x20c'+'reden'+_0x389db7(0x525,0x4bc)+_0x389db7(0x54d,0x5c7)+_0x389db7(0x4ab,0x430)+_0xac8377(0x554,0x538)+_0x389db7(0x46d,0x4a3)+_0x389db7(0x41e,0x449)+'rom\x20c'+_0x389db7(0x540,0x510)+_0xac8377(0x4ed,0x544)+_0xac8377(0x422,0x496)+'.',_0x428ed1[_0xac8377(0x4f8,0x5a0)+'ages']=['java'],_0x428ed1['patte'+'rn']=/DriverManager\.getConnection\s*\(\s*["']jdbc:\w+:\/\/[^"']*["']\s*,\s*["']\w+["']\s*,\s*["'][^"']+["']/g,_0x428ed1['fix']=_0xac8377(0x46e,0x4c1)+_0x389db7(0x4c0,0x3de)+_0x389db7(0x3c7,0x47c)+_0xac8377(0x3e3,0x3ef)+'ables'+_0x389db7(0x484,0x3b5)+_0xac8377(0x389,0x41a)+_0xac8377(0x2f1,0x3ee)+_0xac8377(0x4bb,0x3c3)+_0x389db7(0x3c8,0x44a)+'h\x20ext'+_0xac8377(0x2f1,0x3f0)+'\x20conf'+_0x389db7(0x40c,0x49f)+_0x389db7(0x574,0x600)+_0x389db7(0x4f2,0x418)+'icati'+_0x389db7(0x569,0x56b)+_0xac8377(0x5cf,0x4ce)+'ies,\x20'+_0x389db7(0x3f1,0x482)+').';export const javaExtendedRules=[_0x31d4ac,_0x1782e3,_0x270b7e,_0x52e200,_0x337b36,_0x18f479,_0x3aa83f,_0x41fa2c,_0x558538,_0x1dead4,_0x50ba33,_0x6995a8,_0x3a30fe,_0x32bed9,_0x45877f,_0x182b8e,_0x2f5be4,_0x428ed1];
1
+ (function(_0x20ab16,_0x6aae09){const _0x33a61b={_0x4daa32:0x211,_0x55ecc2:0x21e,_0x2b41b6:0x358,_0x5254d3:0x24a,_0x242e93:0x2e0,_0xffbf3b:0x23a,_0x4f516f:0x2e1,_0x556308:0x2ef},_0x521d97={_0x4a035d:0x7b};function _0x38bf9a(_0x2137bb,_0x255e55){return _0x1e17(_0x255e55-0x3f,_0x2137bb);}const _0xf80ada=_0x20ab16();function _0x4134e7(_0x241281,_0x5b150d){return _0x1e17(_0x241281-_0x521d97._0x4a035d,_0x5b150d);}while(!![]){try{const _0x5239eb=parseInt(_0x38bf9a(0x16a,0x235))/(-0x5ed+-0x8*0xec+-0x2*-0x6a7)*(parseInt(_0x4134e7(0x167,_0x33a61b._0x4daa32))/(0x1483*-0x1+0x94d+-0xb38*-0x1))+-parseInt(_0x4134e7(0x169,_0x33a61b._0x55ecc2))/(0x1d3f+0xf1*-0xf+-0xf1d)*(-parseInt(_0x38bf9a(0x2bc,0x241))/(0x3*0x257+0x1bd7*-0x1+0x14d6))+parseInt(_0x38bf9a(_0x33a61b._0x2b41b6,_0x33a61b._0x5254d3))/(-0x2332+-0x1902+-0x1b*-0x23b)*(parseInt(_0x38bf9a(0x357,_0x33a61b._0x242e93))/(0x1b00+0x1e5+0x1cdf*-0x1))+-parseInt(_0x4134e7(0x26d,0x187))/(-0x1*0x2515+0x20a5*-0x1+0x45c1)*(-parseInt(_0x4134e7(_0x33a61b._0xffbf3b,0x1c9))/(0x699*0x3+-0x26ce+-0x4b*-0x41))+-parseInt(_0x38bf9a(0x18d,0x1e2))/(-0x6*0x584+-0x2c7*-0x3+0x45*0x5c)*(-parseInt(_0x38bf9a(0x252,0x1f2))/(-0x11ec+0x1c6*-0x11+-0x1*-0x301c))+parseInt(_0x38bf9a(0x432,0x331))/(0xff9+0x1c8d+-0xc1*0x3b)+-parseInt(_0x4134e7(_0x33a61b._0x4f516f,_0x33a61b._0x556308))/(-0x5*0x50b+-0x1*-0x283+-0x40*-0x5b);if(_0x5239eb===_0x6aae09)break;else _0xf80ada['push'](_0xf80ada['shift']());}catch(_0x1b28d5){_0xf80ada['push'](_0xf80ada['shift']());}}}(_0x45fc,0x1*0xc0a4b+0x7fcda+-0x2*0x3aa37));const _0x1eb716={};_0x1eb716['id']=_0x1b0d4c(0x509,0x480)+_0x44d2f5(0x3ea,0x313)+'G-003',_0x1eb716['cwe']=_0x1b0d4c(0x5d3,0x55a)+'84',_0x1eb716[_0x44d2f5(0x3ee,0x2e0)+_0x44d2f5(0x26d,0x189)]=_0x1b0d4c(0x5a1,0x589)+_0x44d2f5(0x2d0,0x261),_0x1eb716['title']='Sprin'+_0x44d2f5(0x3b7,0x31b)+_0x44d2f5(0x248,0x332)+'All\x20o'+_0x1b0d4c(0x5d5,0x564)+_0x44d2f5(0x21f,0x2d4)+_0x44d2f5(0x2b7,0x1ea)+_0x1b0d4c(0x463,0x439),_0x1eb716['descr'+_0x1b0d4c(0x4e5,0x409)+'n']='Using'+_0x1b0d4c(0x47e,0x572)+'itAll'+_0x44d2f5(0x299,0x33e)+_0x44d2f5(0x1a4,0x199)+_0x1b0d4c(0x57f,0x576)+_0x1b0d4c(0x6e1,0x5e0)+_0x1b0d4c(0x571,0x5c2)+_0x1b0d4c(0x4eb,0x473)+_0x1b0d4c(0x372,0x431)+_0x44d2f5(0x37a,0x343)+_0x44d2f5(0x348,0x32a)+'hout\x20'+_0x1b0d4c(0x474,0x4b3)+_0x1b0d4c(0x52e,0x62a)+'tion.',_0x1eb716[_0x1b0d4c(0x4fd,0x492)+_0x1b0d4c(0x680,0x594)]=[_0x1b0d4c(0x433,0x4f9)],_0x1eb716[_0x1b0d4c(0x586,0x53a)+'rn']=/\.antMatchers?\s*\(\s*["']\/(?:admin|api|internal|manage)[^"']*["']\s*\)\.permitAll\s*\(\s*\)/g,_0x1eb716[_0x1b0d4c(0x52c,0x4d6)]='Use\x20.'+_0x1b0d4c(0x629,0x5f9)+'le(\x22A'+'DMIN\x22'+')\x20or\x20'+'.auth'+_0x44d2f5(0x202,0x206)+'ated('+_0x44d2f5(0x38b,0x373)+'\x20sens'+'itive'+_0x44d2f5(0x12a,0x1b7)+_0x44d2f5(0x468,0x354)+'.';const _0x596a51={};_0x596a51['id']=_0x44d2f5(0x11c,0x1be)+_0x1b0d4c(0x50f,0x5d5)+_0x1b0d4c(0x560,0x52c),_0x596a51[_0x1b0d4c(0x40e,0x445)]=_0x1b0d4c(0x54f,0x454)+'52',_0x596a51['sever'+_0x44d2f5(0x214,0x189)]=_0x44d2f5(0x103,0x159),_0x596a51[_0x44d2f5(0x2dc,0x2a3)]=_0x44d2f5(0xbd,0x16b)+_0x1b0d4c(0x3cc,0x4b4)+'SRF\x20D'+_0x1b0d4c(0x3d9,0x482)+_0x44d2f5(0x125,0x176)+_0x1b0d4c(0x62d,0x5b0)+'y',_0x596a51[_0x1b0d4c(0x507,0x42a)+_0x44d2f5(0x11c,0x147)+'n']=_0x1b0d4c(0x5fd,0x567)+_0x44d2f5(0x33a,0x23e)+_0x44d2f5(0x1f3,0x262)+'prote'+'ction'+_0x44d2f5(0x34d,0x2a9)+_0x44d2f5(0x16a,0x15c)+_0x1b0d4c(0x4b3,0x571)+_0x44d2f5(0x5b,0x165)+'hangi'+_0x44d2f5(0x2ea,0x2c5)+_0x44d2f5(0x19a,0x24e)+_0x44d2f5(0x264,0x232)+_0x1b0d4c(0x624,0x513)+'s-Sit'+_0x44d2f5(0x44d,0x33c)+_0x1b0d4c(0x6ab,0x60f)+_0x44d2f5(0x7c,0x166)+_0x1b0d4c(0x40d,0x4ef)+'tacks'+'.',_0x596a51[_0x44d2f5(0x28c,0x1d0)+_0x1b0d4c(0x68b,0x594)]=[_0x1b0d4c(0x43c,0x4f9)],_0x596a51[_0x44d2f5(0x1ca,0x278)+'rn']=/\.csrf\s*\(\s*\)\s*\.disable\s*\(\s*\)/g,_0x596a51[_0x1b0d4c(0x484,0x4d6)]=_0x1b0d4c(0x3bb,0x49b)+'disab'+_0x1b0d4c(0x586,0x62c)+'RF\x20fo'+_0x44d2f5(0x215,0x17a)+_0x1b0d4c(0x541,0x466)+_0x1b0d4c(0x43b,0x434)+_0x44d2f5(0x2cb,0x1b7)+_0x44d2f5(0x23d,0x354)+_0x44d2f5(0x298,0x21c)+_0x44d2f5(0x14c,0x1ac)+_0x1b0d4c(0x4a2,0x440)+_0x1b0d4c(0x485,0x583)+_0x44d2f5(0x31b,0x2f8)+_0x1b0d4c(0x5af,0x4ec)+'for\x20s'+'essio'+'n-bas'+'ed\x20fo'+_0x44d2f5(0x32f,0x372);const _0x3efaa4={};_0x3efaa4['id']='JAVA-'+_0x1b0d4c(0x642,0x5d5)+_0x44d2f5(0x32c,0x2c0),_0x3efaa4['cwe']=_0x1b0d4c(0x37d,0x454)+'46',_0x3efaa4[_0x1b0d4c(0x528,0x5a2)+_0x44d2f5(0x1f2,0x189)]=_0x1b0d4c(0x3fc,0x41b),_0x3efaa4['title']=_0x44d2f5(0x235,0x16b)+_0x44d2f5(0x170,0x155)+_0x44d2f5(0x368,0x330)+'rd\x20CO'+_0x1b0d4c(0x6f4,0x5f8)+_0x44d2f5(0x180,0x1af),_0x3efaa4['descr'+_0x1b0d4c(0x3a9,0x409)+'n']=_0x1b0d4c(0x447,0x40c)+_0x1b0d4c(0x548,0x485)+_0x1b0d4c(0x483,0x493)+'igins'+_0x1b0d4c(0x5bb,0x4a7)+'in\x20CO'+_0x1b0d4c(0x553,0x46c)+_0x44d2f5(0x1e3,0x2a6)+_0x44d2f5(0x344,0x27c)+_0x1b0d4c(0x4d8,0x4d9)+_0x1b0d4c(0x5f8,0x5b4)+_0x44d2f5(0x96,0x156)+_0x44d2f5(0x2e2,0x24b)+_0x1b0d4c(0x3ba,0x40f)+'websi'+_0x1b0d4c(0x4fb,0x4c2),_0x3efaa4['langu'+_0x1b0d4c(0x567,0x594)]=[_0x1b0d4c(0x596,0x4f9)],_0x3efaa4[_0x1b0d4c(0x425,0x53a)+'rn']=/\.allowedOrigins?\s*\(\s*["']\*["']\s*\)/g,_0x3efaa4[_0x1b0d4c(0x3ed,0x4d6)]=_0x44d2f5(0x143,0x17c)+_0x44d2f5(0x16b,0x21f)+_0x44d2f5(0x177,0x24d)+_0x44d2f5(0x2d8,0x1c5)+'ins\x20e'+_0x1b0d4c(0x476,0x58b)+_0x44d2f5(0x12f,0x202)+_0x44d2f5(0x26f,0x31f)+_0x44d2f5(0x336,0x305)+_0x1b0d4c(0x3ca,0x4b9)+_0x44d2f5(0x488,0x371)+_0x1b0d4c(0x564,0x618)+_0x44d2f5(0x2db,0x2eb)+_0x1b0d4c(0x581,0x4b1)+'\x22)';const _0x32ff25={};_0x32ff25['id']=_0x44d2f5(0x1b6,0x1be)+_0x44d2f5(0x2bf,0x221)+'001',_0x32ff25['cwe']='CWE-1'+_0x1b0d4c(0x576,0x4d5),_0x32ff25['sever'+_0x44d2f5(0x214,0x189)]=_0x1b0d4c(0x5ca,0x589)+_0x44d2f5(0x2ab,0x261),_0x32ff25['title']=_0x1b0d4c(0x475,0x447)+'—\x20Fre'+_0x44d2f5(0x135,0x17f)+_0x44d2f5(0x19b,0x1a6)+_0x44d2f5(0x367,0x30b)+_0x1b0d4c(0x5ec,0x5dc)+_0x1b0d4c(0x55e,0x489)+_0x44d2f5(0x1e1,0x1ec)+'ut',_0x32ff25[_0x44d2f5(0x7e,0x168)+'iptio'+'n']=_0x1b0d4c(0x60b,0x5d1)+_0x1b0d4c(0x53c,0x591)+_0x44d2f5(0x194,0x174)+_0x1b0d4c(0x4e9,0x450)+_0x1b0d4c(0x742,0x630)+_0x1b0d4c(0x42c,0x478)+'s\x20as\x20'+'FreeM'+_0x1b0d4c(0x510,0x574)+_0x1b0d4c(0x545,0x562)+_0x44d2f5(0xf6,0x16d)+_0x44d2f5(0x1d3,0x1f0)+_0x44d2f5(0x283,0x2a4)+'emote'+_0x1b0d4c(0x3d4,0x477)+_0x44d2f5(0x20c,0x18f)+_0x1b0d4c(0x355,0x416)+_0x1b0d4c(0x70d,0x601)+_0x44d2f5(0x27b,0x25f)+_0x1b0d4c(0x684,0x628)+_0x44d2f5(0x33d,0x339)+_0x1b0d4c(0x55c,0x53b),_0x32ff25[_0x1b0d4c(0x53c,0x492)+_0x44d2f5(0x2f6,0x2d2)]=[_0x1b0d4c(0x4d8,0x4f9)],_0x32ff25[_0x44d2f5(0x35d,0x278)+'rn']=/new\s+Template\s*\(\s*["'][^"']*["']\s*,\s*new\s+StringReader\s*\(\s*(?:request|req|input|param|body)/g,_0x32ff25[_0x1b0d4c(0x50e,0x4d6)]='Never'+_0x1b0d4c(0x6fa,0x62b)+_0x44d2f5(0x113,0x1c9)+'r\x20inp'+'ut\x20as'+'\x20temp'+_0x44d2f5(0x18e,0x16d)+_0x1b0d4c(0x4bf,0x437)+_0x44d2f5(0xc2,0x18b)+_0x44d2f5(0x1f9,0x273)+'d\x20tem'+_0x1b0d4c(0x51e,0x54c)+_0x44d2f5(0x71,0x15d)+_0x44d2f5(0x2e1,0x1f5)+_0x1b0d4c(0x735,0x62d)+'e\x20dat'+_0x44d2f5(0x3de,0x32f)+_0x44d2f5(0x40d,0x30d)+_0x44d2f5(0x194,0x203)+'.';const _0x3542e2={};_0x3542e2['id']='JAVA-'+_0x1b0d4c(0x5a5,0x4e3)+_0x44d2f5(0x288,0x268),_0x3542e2[_0x1b0d4c(0x3fe,0x445)]=_0x1b0d4c(0x598,0x5cb)+'336',_0x3542e2['sever'+'ity']=_0x1b0d4c(0x5b2,0x589)+'cal',_0x3542e2['title']=_0x1b0d4c(0x3e0,0x447)+_0x1b0d4c(0x448,0x4f5)+'ocity'+_0x44d2f5(0x167,0x20c)+_0x44d2f5(0x329,0x2ec)+_0x1b0d4c(0x66f,0x57e)+'User\x20'+_0x44d2f5(0x1f9,0x28e),_0x3542e2[_0x1b0d4c(0x4a9,0x42a)+_0x1b0d4c(0x35b,0x409)+'n']=_0x44d2f5(0x266,0x374)+_0x44d2f5(0x267,0x29b)+'\x20user'+'\x20inpu'+_0x1b0d4c(0x3ec,0x4a3)+_0x1b0d4c(0x57a,0x4a8)+'ity\x20t'+_0x1b0d4c(0x438,0x4cf)+_0x44d2f5(0x2f0,0x351)+_0x1b0d4c(0x698,0x620)+_0x44d2f5(0x2c5,0x317)+'e\x20exe'+_0x44d2f5(0x39c,0x2d6)+'n.',_0x3542e2[_0x44d2f5(0x20a,0x1d0)+_0x1b0d4c(0x5b5,0x594)]=[_0x44d2f5(0x220,0x237)],_0x3542e2['patte'+'rn']=/Velocity\.evaluate\s*\(\s*\w+\s*,\s*\w+\s*,\s*["'][^"']*["']\s*,\s*new\s+StringReader\s*\(/g,_0x3542e2[_0x44d2f5(0x23d,0x214)]=_0x1b0d4c(0x6a7,0x5b3)+_0x1b0d4c(0x561,0x520)+_0x44d2f5(0x2c2,0x1fe)+_0x44d2f5(0x286,0x1e6)+'ity\x20t'+_0x44d2f5(0x2cf,0x20d)+_0x44d2f5(0x2de,0x1f4)+_0x44d2f5(0x1fa,0x1bc)+'Never'+'\x20pass'+_0x44d2f5(0x252,0x181)+_0x44d2f5(0x303,0x2ed)+_0x44d2f5(0xdd,0x1b9)+_0x44d2f5(0x1cd,0x1e6)+'ity.e'+_0x1b0d4c(0x56d,0x515)+'te().';const _0x43974c={};_0x43974c['id']='JAVA-'+_0x44d2f5(0x2e6,0x221)+_0x44d2f5(0x3c6,0x320),_0x43974c['cwe']=_0x44d2f5(0x229,0x309)+_0x44d2f5(0x24f,0x213),_0x43974c[_0x44d2f5(0x1e9,0x2e0)+_0x44d2f5(0x12b,0x189)]=_0x1b0d4c(0x609,0x589)+_0x44d2f5(0x2fc,0x261),_0x43974c[_0x44d2f5(0x1be,0x2a3)]=_0x44d2f5(0x212,0x185)+_0x44d2f5(0x333,0x27f)+_0x1b0d4c(0x5c0,0x55b)+'f\x20Exp'+_0x1b0d4c(0x4dc,0x4bc)+_0x1b0d4c(0x66f,0x5ff)+_0x1b0d4c(0x46e,0x456)+_0x1b0d4c(0x699,0x5ef)+_0x44d2f5(0x1dc,0x276),_0x43974c[_0x1b0d4c(0x4c6,0x42a)+'iptio'+'n']=_0x1b0d4c(0x54b,0x5b9)+'ssing'+_0x1b0d4c(0x394,0x443)+_0x1b0d4c(0x648,0x5af)+'t\x20as\x20'+_0x44d2f5(0x29d,0x1ad)+'leaf\x20'+'expre'+_0x44d2f5(0x266,0x2ae)+'s\x20ena'+_0x44d2f5(0x119,0x1c2)+_0x1b0d4c(0x434,0x42d)+_0x44d2f5(0x2dd,0x2fe)+_0x44d2f5(0x149,0x14b)+_0x1b0d4c(0x5c3,0x61e)+'and\x20R'+'CE.',_0x43974c[_0x1b0d4c(0x42e,0x492)+'ages']=[_0x44d2f5(0x267,0x237)],_0x43974c[_0x1b0d4c(0x5a3,0x53a)+'rn']=/templateEngine\.process\s*\([^,]*(?:request|param|input|body)/g,_0x43974c[_0x44d2f5(0x1d1,0x214)]=_0x44d2f5(0xfc,0x195)+_0x1b0d4c(0x6a8,0x604)+_0x44d2f5(0x104,0x181)+_0x1b0d4c(0x6c5,0x5af)+_0x1b0d4c(0x412,0x4a3)+_0x1b0d4c(0x4c1,0x521)+_0x1b0d4c(0x498,0x47d)+_0x44d2f5(0x2ad,0x1b6)+'s\x20to\x20'+'Thyme'+_0x44d2f5(0x2ad,0x2cb)+_0x1b0d4c(0x560,0x511)+'prede'+_0x1b0d4c(0x619,0x5c5)+_0x44d2f5(0x346,0x2a0)+'lates'+_0x44d2f5(0x422,0x35b)+_0x44d2f5(0x160,0x236)+_0x1b0d4c(0x6b8,0x609)+_0x44d2f5(0x386,0x2e5)+_0x1b0d4c(0x6b1,0x59b);const _0x478b99={};function _0x45fc(){const _0x2f7e36=['ifvZzsa','kcjODhq','ienYB3m','BMuNige','DMfSDwe','BIbWB28','j3mGCxu','AxrOBsa','DMfYAwe','vxnLigO','Eg1Sl2y','igfYzsa','vsbYywm','igfUBM8','AgvUlue','CMvKzwy','DgvTCgW','ywn0B3i','y2fS','q1nsrIa','B24Gzw4','DwfNzsa','y3rHyMW','C2vUC2K','mZaXrNnQuxnJ','mdaY','vMf1Bhq','rY0Wmdq','mwDrq1v3qW','BMvKv2K','AwvKifu','DxjLifi','yxr1CMu','uKfdrs0','lxnLBNm','iff1zxi','zwzPBMu','Ag91Dca','y3rVCJO','Chv0','mJq3ntmYBwjZzeTY','Cgf0Dgu','Aw9UlG','kgzPBMq','ieLUAMu','CMf0Aw8','vxnLihq','B25JDxi','4OcuifrOEq','mZm4mZy2nwvprLb4ua','CxvLCNK','CMvKzw4','ihrOzsa','CMLUz3m','zxjPDMe','Dg9TAwm','Aw9UCYa','BgXVD2W','uMvMzxi','CgXHDgu','rxHWCMu','DMLYB24','zw5JzsW','sw5WDxq','Bw90zsa','q1Dflty','vw5Zywy','zxj5igq','CMfJDge','ChbYB3y','DMfSDwu','BNn0zwe','ignVBM4','q1Dflti','BwvSzwe','wfHflta','yxrPBMC','ig5VDca','DguGD2K','CMuPigK','yMXLigy','ihrLBxa','ve9dve8','BIbtzw4','DgL0Bgu','BgvZifi','rgLZywi','BMzPz3u','BMCGA2u','u2vUC2K','igv4Cg8','igfUige','B3v0ieq','AwD1CMe','ihzHBhu','C3nPB24','BgWGC3q','ihbLCM0','BNrPywW','yxjRzxi','sw5Zzwm','BIbVCIa','yxnLifu','Aw5WDxq','DYbXDwu','AxrLCMK','kgfWCgW','C2HHCMu','EsbMCM8','zNjVBsa','y3qGCge','tg9Nz2K','B25PEMu','rY0Wmdu','zwvWigK','BMCGC3K','AwWUuMe','ExmGzNi','BMCGzw4','AxPHDgK','y3jPDgK','zsbezxm','EhbSAwm','AcbLEhq','BgvHzI4','C3vWCgW','Aw9UlIa','ywqOAw4','BMCGDxm','ChjPBMC','B25ZDhi','ywDLCW','B3iGA2u','C2L0Axy','Dg9Y','y3v0Aw8','iokaLcbtCa','lcb0CNu','zxmU','B24UChi','mJu1otK4nJrks2fJA0m','sMf2ysa','ig9Yige','ig9Yihm','C2v0rMu','C2v2zxi','CYbPBIa','CMLUzYa','C2fSBg8','Esb3Axq','CMLIDxq','ksKUBg8','Dwn0B3i','zsK7','yxjZzxi','DgL2zsa','l215yxa','Bgf0zsa','igLUChu','B2jHBgW','CY4Gvxm','y3rPB24','vxnLiha','B3nLCYa','zxmGyw4','zYbRzxK','ysbZCgu','ywXSB3C','uhjVy2u','DcbLBMe','t3bLBIa','CgfYC2K','uMfJzsa','zcb3CMK','B25NB0q','zYbftca','tw9Uz28','BMrWB2K','zxmGuMu','zYbMAwW','zMLUzwq','uKnflG','B3DLze8','CdOVl2e','zxjPywW','BwvKAxu','q1Dflte','AgvUlwe','BxbSyxq','AhjVBMK','zwWGyMK','zsbHBMq','ugfYC2K','zMLLBgq','DxqGu2e','igLUiea','u1bssu4','Chv0kq','BMrVBsa','nLLJyLrmqG','CYbJB2q','uMvKAxi','qIbXDwu','zsbMCM8','zYdIGjqGCa','ys53Agu','AxrYyxi','qvbjigu','ic5HBgW','mdaZ','y3rLzca','u3rYAw4','EsbLEhq','z29YAxq','ierHDge','zxmGBgK','CYbLEha','oIbMywm','uMfUzg8','Bsb3Axq','zwn0CYW','zwqGy2W','zxiGsw4','DhmGBwe','ysbTB2q','AwXKy2e','lunVBNq','zxjTAxq','CMvXDwK','ihzHCMK','BMfSigu','uLmGt3i','AgfZuM8','DhLWzs0','BMPLy3q','ig5LDYa','zgLZywi','zsbszxe','B24GzNi','kcKGB24','ihzPysa','AxrOB3u','B2rLzca','ihbHC3m','CYb0Agu','CgfJAgu','u2fMzum','u0fyuge','BcbHDhq','EhrLCM4','ig11C3q','Chv0zuK','qNvPBgq','ChjLC3m','DwvZDca','Aw5NieS','ywLUC3q','ruWGzxG','DgvZigu','ywjSzxm','4Ocuie5VBG','B2LUDhm','B20Gzw4','DhbZoI8','uKvesvi','BNmGzw4','zsbJB2q','yxnOtwe','ihDPDgG','DgLVBIa','A2uGDg8','BMfIBgu','vcb3Axq','Aw4Gtg8','ifHyrsa','Dwn0Dxi','kezPBhq','zcbTB24','DxrPBc4','yxrLigK','nteWmdu0nNbHtLriuq','BNrPy2e','ihbHCNm','BguGq1m','AcbZywy','DgvYBMe','y3vYzvi','BgvKihm','BNrPDgK','zwnRlxq','CYGIAhq','CM1ZlG','ksbMB3i','rxzHBhu','Axb0Aw8','sLDuihm','y29Kzwq','qwXSB3C','Aw5Qzwm','ifnbwfa','igfUEsa','z3mU','B21WAwW','zwnRlvq','AxrOigm','Dg9YEs4','zwrPCMu','DxrPB24','zYdIGjqGvW','DgHLiee','AxrPzxm','Bg9HzcG','AgLNAa','zgf0ywi','zYb0BYa','C2vZige','igzPBgu','AxrVCMK','tM9tuuW','Esbkyxy','mtG0ntC0sKjHveTd','CMLLCYa','ntfvtejYtgy','y3rVCIG','yxrLlwm','rM9Yz2u','AwDUAw4','zgvZy3i','ieXHBMC','BgDVCMK','u3bYAw4','DgHTige','Bgf0zxm','reiGCMe','EhbVC2u','ChjLzgK','BNqSiee','CYbbueK','zcbVzIa','zxiTy28','lIbvC2u','zwqGr2W','Cg9PBNq','ywzLq28','C3rYAw4','CIbZDge','yxjHBwu','u3bLy2K','zw5ZAxq','zcKUieS','zu1HCMS','DgLHBhm','ihvZzxi','ignVBMy','y3DL','igzVCIa','u1nussa','yMuGDxm','BYbLBMy','BNzPCM8','Axr5','zKfIC2u','ihbYzwq','ifvZzxi','zwf0Dxi','BNrYB2W','iev4zwm','CNKGC3q','zwqGzM8','q1Dfltm','zwqGzg8','B20Gvxm','tMv2zxi','BgvZie4','Ew5JAhi','zsKGB3i','igfKBwK','DgLVBG','BwfPBNm','BMDVrei','C3n3B3i','y3qGvvi','zwn1CMK','BcbLBNq','BsbPCYa','ltaWmq','uKXZihC','DgvSzxm','zgvYCYa','zxiGvgu','CIbZzwm','y2TZigy','DMeUDxq','uLmGy28','zw5HyMW','lwjHC2u','vgH5Bwu','sLDuiokaLa','AwDPBG','ywXNB3i','BNrZigu','CMf3ihe','DhrLCM4','yw5KB20','ienVzgu','DhjPBMC','igvUzha','BMfNzxi','Dcb0BYa','yxnZzxm','yxrLihm','BgvZlIa','C291CMm','sKfwqs0','AwfSAxO','AxnHyMW','tK9tuuW','yMXLCYa','Aw5Nige','yxnLiem','ig9YAwC','Axr5lxm','BsbvC2u','zMvdB24','zsb1C2u','igfSz28','qvbjigK','vxnLiem','luf0B20','zxjZlMu','DgL0Awu','BgfUz3u','BgWGB3i','sgfYzgm','q29UzgK','BNmU','ksb3Axq','CM9Tigm','q1Dfltu','ltaWmW','t25SEsa','BMv3ifm','zgvJBci','DMfSAwq','C3rYDwm','zwfZAwW','zsbHCMi','vxnLifm','DcbHCYa','zcbszwq','AMf2ys4','ienYAxq','icGQksa','vMvSB2m','zxjWB2W','DxqGAw4','y3jLzgu','zsbfBMq','iokaLcbQyq','CIbjBNa','wwfTBcG','ruWGzxy','Cc5JB20','igvUywi','yxv0Agu','zYdIGjqGqW','Axn0lIa','DguGzMK','CYb3Axq','rxHLy3u','CMLNAw4','ywXPzge','iokaLcbnBW','CMvZC2K','ihjLBge','wufntca','DxnLCI0','Aw5Lzca','ywX1yxq','DguU','zhmSihq','AxrSEtO','BMrPBMC','u25HA2u','q1jfrc0','zw50Awm','Ag0SigS','B0rcigK','B3jJzsa','EhrYywm','ievm','ifrLBxa','zw1WBge','zYbPBNq','AwnHDgK','q1DfltK','qNLoyw0','AxjLy3q','mZm2','zML4','mdaX','DhKUu2u','BIbLEha','mZu4mdGZu2v2rfPN','A3mU','yxrPB24','AxzLihi','icHkv1q','yxr0ywm','zxmVzgK','zNKGywW','BguGzxG','u1nuss0','vMfSAwq','DgLUzYa','AxrPDMu','DY1KB2m','sw5Qzwm','q29Kzsa','mtbOwuTPtg4','ihbOAxm','yMXLzca','zxH0zxi','BMCGCMe','CNKGyxq','C2vJCMu','Aw4GBg8','zwn0Aw4','v2L0Ag8','DhmGDg8','4OcuifzLBa','mte5mJu2ve1WvNHu','DgvYAxO','ig1Vzgu','AMf2yq','igjLigu','sLDulta','B3iGysa','AgvZigK','EMf0Aw8','q1DfltC','BgLUzYa','zcbZDge','ie1VBMC','igXVzYa','zgL0Aw8','B3bLCNq','rgf0ysa','revtrvi','A2vUCYa','C3rLBxm','AwmGq2G','yxzHlNm','DxjPDhK','ueKGDg8','ysbVyMO','Bg93zwq','zhbVAw4'];_0x45fc=function(){return _0x2f7e36;};return _0x45fc();}_0x478b99['id']=_0x1b0d4c(0x587,0x480)+_0x44d2f5(0x119,0x1c1)+_0x44d2f5(0x167,0x1a2),_0x478b99[_0x44d2f5(0x142,0x183)]='CWE-9'+'43',_0x478b99[_0x44d2f5(0x3d2,0x2e0)+_0x44d2f5(0xb9,0x189)]=_0x1b0d4c(0x4ea,0x589)+_0x44d2f5(0x2f5,0x261),_0x478b99[_0x1b0d4c(0x5a9,0x565)]='NoSQL'+'\x20Inje'+_0x1b0d4c(0x60d,0x5b2)+_0x1b0d4c(0x3ec,0x4bb)+_0x44d2f5(0x12a,0x19c)+_0x1b0d4c(0x60b,0x534)+_0x44d2f5(0x2f2,0x2bb)+_0x1b0d4c(0x404,0x489)+_0x44d2f5(0x23b,0x1ec)+'ut',_0x478b99['descr'+_0x1b0d4c(0x308,0x409)+'n']='Build'+'ing\x20M'+_0x1b0d4c(0x531,0x5bf)+_0x44d2f5(0x298,0x319)+_0x44d2f5(0xec,0x162)+_0x1b0d4c(0x4b3,0x57e)+'user\x20'+_0x1b0d4c(0x60a,0x578)+_0x44d2f5(0x221,0x1f0)+_0x1b0d4c(0x4af,0x458)+'oSQL\x20'+_0x44d2f5(0x5f,0x14b)+'tion\x20'+'attac'+'ks.',_0x478b99['langu'+_0x44d2f5(0x24a,0x2d2)]=[_0x44d2f5(0x161,0x237)],_0x478b99[_0x44d2f5(0x273,0x278)+'rn']=/(?:BasicDBObject|Document)\.parse\s*\(\s*(?:request|req|input|param|body)/g,_0x478b99[_0x1b0d4c(0x3c0,0x4d6)]=_0x44d2f5(0x1bc,0x27d)+'yped\x20'+_0x1b0d4c(0x5d9,0x543)+'\x20buil'+_0x44d2f5(0xf5,0x1a5)+_0x44d2f5(0x303,0x363)+_0x44d2f5(0x2da,0x1ce)+'q,\x20Cr'+_0x1b0d4c(0x4e0,0x57a)+_0x44d2f5(0x2ef,0x31c)+_0x44d2f5(0x223,0x29e)+_0x1b0d4c(0x4ae,0x558)+'d\x20of\x20'+_0x1b0d4c(0x5f9,0x5bc)+_0x1b0d4c(0x5e8,0x4ee)+'w\x20que'+_0x44d2f5(0xc0,0x190)+_0x1b0d4c(0x614,0x546)+'.';const _0x2fad5c={};_0x2fad5c['id']=_0x1b0d4c(0x536,0x480)+'NOSQL'+'-002',_0x2fad5c[_0x44d2f5(0x93,0x183)]=_0x1b0d4c(0x5b2,0x4d2)+'43',_0x2fad5c[_0x44d2f5(0x247,0x2e0)+_0x1b0d4c(0x4c1,0x44b)]=_0x44d2f5(0x3d7,0x2c7)+_0x1b0d4c(0x603,0x523),_0x2fad5c[_0x1b0d4c(0x4a8,0x565)]=_0x1b0d4c(0x448,0x421)+_0x44d2f5(0x2a6,0x27b)+_0x1b0d4c(0x4e1,0x5b2)+_0x44d2f5(0x215,0x2d7)+_0x44d2f5(0x3db,0x2e2)+_0x44d2f5(0x272,0x244)+_0x44d2f5(0x3f1,0x2ff)+_0x1b0d4c(0x43f,0x430)+_0x1b0d4c(0x4ef,0x579)+'ry',_0x2fad5c['descr'+'iptio'+'n']=_0x44d2f5(0x210,0x322)+_0x1b0d4c(0x5d0,0x4d0)+_0x44d2f5(0x1e7,0x1e7)+_0x1b0d4c(0x480,0x4dc)+_0x44d2f5(0x3bd,0x312)+'Query'+_0x1b0d4c(0x531,0x51e)+'tatio'+_0x1b0d4c(0x61a,0x61a)+'ables'+_0x1b0d4c(0x43d,0x502)+_0x1b0d4c(0x58e,0x4ca)+_0x44d2f5(0x317,0x339)+_0x1b0d4c(0x5ba,0x53b),_0x2fad5c[_0x44d2f5(0x137,0x1d0)+_0x1b0d4c(0x492,0x594)]=[_0x44d2f5(0x286,0x237)];function _0x44d2f5(_0x1b668f,_0x439140){return _0x1e17(_0x439140-0x75,_0x1b668f);}_0x2fad5c['patte'+'rn']=/@Query\s*\(\s*["']\{[^}]*\?\d+/g,_0x2fad5c[_0x1b0d4c(0x4d9,0x4d6)]=_0x44d2f5(0x280,0x1e0)+_0x1b0d4c(0x602,0x592)+_0x44d2f5(0x3a0,0x325)+_0x1b0d4c(0x504,0x517)+_0x44d2f5(0x370,0x292)+_0x44d2f5(0x193,0x285)+_0x44d2f5(0x3ac,0x35c)+_0x1b0d4c(0x4c5,0x53c)+_0x44d2f5(0x238,0x211)+_0x1b0d4c(0x39a,0x45a)+_0x44d2f5(0x20d,0x1e4)+'eria\x20'+_0x44d2f5(0x250,0x1cb)+_0x1b0d4c(0x594,0x558)+_0x1b0d4c(0x435,0x435)+_0x44d2f5(0x212,0x1b2)+'uery\x20'+_0x44d2f5(0x268,0x179)+_0x44d2f5(0x171,0x14e);const _0x565dc8={};_0x565dc8['id']='JAVA-'+_0x1b0d4c(0x5b1,0x4fb)+'01',_0x565dc8[_0x1b0d4c(0x45c,0x445)]=_0x44d2f5(0x1d7,0x192)+'45',_0x565dc8[_0x44d2f5(0x3db,0x2e0)+_0x1b0d4c(0x335,0x44b)]=_0x1b0d4c(0x4e1,0x589)+_0x1b0d4c(0x556,0x523),_0x565dc8[_0x44d2f5(0x333,0x2a3)]=_0x1b0d4c(0x459,0x470)+'\x20No\x20A'+_0x1b0d4c(0x442,0x42c)+'thm\x20V'+_0x44d2f5(0x18d,0x1f8)+_0x44d2f5(0xfc,0x19a),_0x565dc8[_0x1b0d4c(0x534,0x42a)+_0x1b0d4c(0x488,0x409)+'n']=_0x1b0d4c(0x526,0x5d1)+'ng\x20JW'+_0x44d2f5(0x468,0x35f)+_0x44d2f5(0x1bd,0x274)+_0x1b0d4c(0x5a8,0x49e)+'ating'+_0x1b0d4c(0x5c3,0x545)+_0x44d2f5(0x2ab,0x1b0)+_0x1b0d4c(0x560,0x518)+_0x1b0d4c(0x5da,0x5b8)+'s\x20\x27no'+_0x44d2f5(0x22a,0x252)+_0x44d2f5(0x1cf,0x16a)+_0x44d2f5(0x19c,0x16c)+'ttack'+'s.',_0x565dc8[_0x44d2f5(0x1a0,0x1d0)+_0x44d2f5(0x3bd,0x2d2)]=[_0x44d2f5(0x264,0x237)],_0x565dc8[_0x1b0d4c(0x514,0x53a)+'rn']=/Jwts\.parser(?:Builder)?\s*\(\s*\)\s*\.setSigningKey\s*\([^)]+\)\s*\.parse(?:Claims)?(?:Jws|Jwt)?\s*\(/g,_0x565dc8[_0x1b0d4c(0x4af,0x4d6)]=_0x1b0d4c(0x679,0x5b3)+_0x44d2f5(0x3ef,0x2e9)+_0x1b0d4c(0x5aa,0x60d)+'er().'+_0x1b0d4c(0x500,0x5f5)+'reSig'+_0x44d2f5(0x22e,0x26c)+'th(al'+_0x44d2f5(0x36f,0x324)+_0x1b0d4c(0x400,0x4c9)+'ey)\x20t'+_0x44d2f5(0x100,0x187)+_0x1b0d4c(0x5dc,0x4cb)+_0x1b0d4c(0x616,0x5b7)+'cific'+_0x44d2f5(0xb3,0x1ca)+'rithm'+'.';const _0x1beee9={};function _0x1e17(_0x5740dd,_0x2ba570){_0x5740dd=_0x5740dd-(-0x7*-0x509+-0x1*-0x1315+-0x3582);const _0x52cf57=_0x45fc();let _0x51710a=_0x52cf57[_0x5740dd];if(_0x1e17['oABceL']===undefined){var _0x8eaea3=function(_0xb0370e){const _0xd1558f='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0x5c5d23='',_0x43b7ca='';for(let _0x105e90=0xe24+0x520+0x9*-0x224,_0x454cb6,_0x180b27,_0x1d4614=0x15b*0x2+0x491+-0x1b*0x45;_0x180b27=_0xb0370e['charAt'](_0x1d4614++);~_0x180b27&&(_0x454cb6=_0x105e90%(0xa3*0x11+0x1971+-0x74*0x50)?_0x454cb6*(0x153*0x8+0x1*0x187f+0x3*-0xb9d)+_0x180b27:_0x180b27,_0x105e90++%(-0x1*-0x1fdd+0x361*0x1+-0x9*0x3ea))?_0x5c5d23+=String['fromCharCode'](0x2020+-0x20ae+0x18d&_0x454cb6>>(-(-0x4*-0x60f+0x1*0x3ad+-0x1be7*0x1)*_0x105e90&0x728*0x4+0x1*0x100e+-0x2ca8)):0x1186+-0x1ecd+0xd47){_0x180b27=_0xd1558f['indexOf'](_0x180b27);}for(let _0xb716c=-0x215c+0xfc6+0x1*0x1196,_0x47a83b=_0x5c5d23['length'];_0xb716c<_0x47a83b;_0xb716c++){_0x43b7ca+='%'+('00'+_0x5c5d23['charCodeAt'](_0xb716c)['toString'](0x1699*0x1+-0x3e6+-0x12a3))['slice'](-(0x4*0x74c+0x11cb+-0x2ef9));}return decodeURIComponent(_0x43b7ca);};_0x1e17['LnZfuL']=_0x8eaea3,_0x1e17['frqddy']={},_0x1e17['oABceL']=!![];}const _0x2845a3=_0x52cf57[0x18ab+0x3*-0x3b9+-0xd80],_0x35b993=_0x5740dd+_0x2845a3,_0x5f23ad=_0x1e17['frqddy'][_0x35b993];return!_0x5f23ad?(_0x51710a=_0x1e17['LnZfuL'](_0x51710a),_0x1e17['frqddy'][_0x35b993]=_0x51710a):_0x51710a=_0x5f23ad,_0x51710a;}_0x1beee9['id']=_0x44d2f5(0xf1,0x1be)+_0x1b0d4c(0x582,0x4fb)+'02',_0x1beee9[_0x1b0d4c(0x363,0x445)]=_0x44d2f5(0x2e8,0x23d)+'98',_0x1beee9[_0x44d2f5(0x209,0x2e0)+'ity']='criti'+'cal',_0x1beee9[_0x1b0d4c(0x537,0x565)]=_0x44d2f5(0x264,0x1ae)+'\x20Hard'+_0x1b0d4c(0x3bc,0x40b)+'\x20Sign'+_0x44d2f5(0x3d8,0x34e)+'ey',_0x1beee9[_0x1b0d4c(0x4be,0x42a)+_0x44d2f5(0x25b,0x147)+'n']=_0x1b0d4c(0x563,0x494)+_0x44d2f5(0x292,0x341)+_0x1b0d4c(0x30f,0x40a)+_0x44d2f5(0x26f,0x167)+_0x1b0d4c(0x4c5,0x5b6)+_0x44d2f5(0x298,0x2e1)+_0x44d2f5(0x22e,0x1bd)+_0x1b0d4c(0x6bb,0x61b)+'e\x20can'+_0x44d2f5(0x1bc,0x238)+_0x44d2f5(0x1a1,0x20a)+'ted\x20f'+_0x1b0d4c(0x392,0x498)+_0x44d2f5(0x5b,0x14f)+_0x1b0d4c(0x6ea,0x5ee)+_0x44d2f5(0x113,0x1ba)+'.',_0x1beee9[_0x1b0d4c(0x541,0x492)+'ages']=[_0x44d2f5(0x335,0x237)],_0x1beee9[_0x44d2f5(0x256,0x278)+'rn']=/\.signWith\s*\(\s*(?:SignatureAlgorithm\.\w+\s*,\s*)?["'][^"']{8,}["']/g,_0x1beee9[_0x44d2f5(0x27c,0x214)]='Load\x20'+'signi'+_0x1b0d4c(0x672,0x569)+_0x1b0d4c(0x5b3,0x586)+_0x44d2f5(0x300,0x355)+_0x1b0d4c(0x650,0x54e)+'ment\x20'+_0x44d2f5(0x2f3,0x257)+_0x44d2f5(0x2af,0x1c2)+_0x1b0d4c(0x414,0x4fc)+_0x44d2f5(0x216,0x22e)+_0x1b0d4c(0x556,0x5f0)+_0x1b0d4c(0x553,0x47a)+'.';const _0x3ce6da={};_0x3ce6da['id']=_0x1b0d4c(0x4ab,0x480)+_0x44d2f5(0x3c3,0x357)+'-001',_0x3ce6da[_0x44d2f5(0x22a,0x183)]=_0x44d2f5(0x2e7,0x290)+'01',_0x3ce6da[_0x1b0d4c(0x5d4,0x5a2)+_0x44d2f5(0x257,0x189)]=_0x44d2f5(0x2ad,0x308)+'m',_0x3ce6da[_0x1b0d4c(0x5e6,0x565)]=_0x44d2f5(0x405,0x2f9)+'Redir'+'ect\x20—'+_0x1b0d4c(0x3ef,0x44e)+_0x1b0d4c(0x546,0x5f3)+'rolle'+_0x1b0d4c(0x4f5,0x4a4)+_0x1b0d4c(0x4a2,0x4d4),_0x3ce6da['descr'+_0x1b0d4c(0x48a,0x409)+'n']=_0x1b0d4c(0x6a1,0x5da)+_0x44d2f5(0x284,0x230)+_0x1b0d4c(0x37e,0x41d)+_0x1b0d4c(0x3c2,0x4bf)+_0x1b0d4c(0x54f,0x58e)+_0x1b0d4c(0x5f6,0x52f)+'RLs\x20w'+_0x44d2f5(0x3d0,0x340)+'t\x20val'+'idati'+_0x44d2f5(0x1a6,0x263)+_0x44d2f5(0x427,0x352)+_0x44d2f5(0x1a0,0x229)+'hing.',_0x3ce6da[_0x44d2f5(0x28b,0x1d0)+_0x1b0d4c(0x65e,0x594)]=['java'],_0x3ce6da['patte'+'rn']=/(?:response\.sendRedirect|ModelAndView\s*\(\s*["']redirect:)\s*\(?\s*(?:request\.getParameter|req\.getParameter|params\.get)/g,_0x3ce6da[_0x1b0d4c(0x5b8,0x4d6)]=_0x1b0d4c(0x3fd,0x4e4)+'ate\x20r'+_0x1b0d4c(0x4af,0x415)+_0x44d2f5(0x227,0x19e)+'Ls\x20ag'+_0x1b0d4c(0x601,0x611)+_0x44d2f5(0x1f9,0x2aa)+_0x1b0d4c(0x520,0x54a)+_0x1b0d4c(0x5bf,0x4b5)+'Only\x20'+_0x44d2f5(0x240,0x2f6)+_0x44d2f5(0x305,0x1fb)+_0x44d2f5(0x301,0x2ea)+'paths'+_0x1b0d4c(0x5f5,0x59f)+_0x44d2f5(0x1e0,0x294)+_0x1b0d4c(0x448,0x455)+_0x1b0d4c(0x4f2,0x45d)+'.';const _0x4ebd1b={};_0x4ebd1b['id']='JAVA-'+'EL-00'+'1',_0x4ebd1b[_0x44d2f5(0x11e,0x183)]=_0x1b0d4c(0x3d0,0x4d2)+'17',_0x4ebd1b[_0x44d2f5(0x358,0x2e0)+'ity']=_0x1b0d4c(0x5f2,0x589)+_0x1b0d4c(0x57a,0x523),_0x4ebd1b[_0x44d2f5(0x20a,0x2a3)]=_0x44d2f5(0x2e1,0x28b)+'ssion'+_0x1b0d4c(0x4c3,0x42b)+_0x44d2f5(0x21e,0x264)+_0x44d2f5(0x335,0x226)+_0x44d2f5(0x400,0x35c)+'—\x20Use'+_0x44d2f5(0x134,0x1ec)+_0x1b0d4c(0x40e,0x4aa)+_0x44d2f5(0x1ff,0x20b),_0x4ebd1b['descr'+'iptio'+'n']=_0x1b0d4c(0x53c,0x636)+_0x1b0d4c(0x595,0x55d)+_0x1b0d4c(0x35d,0x443)+_0x1b0d4c(0x5b7,0x5af)+_0x1b0d4c(0x4b8,0x4a3)+_0x1b0d4c(0x67b,0x59e)+_0x44d2f5(0x2b4,0x350)+_0x44d2f5(0x36c,0x34c)+_0x44d2f5(0x20e,0x287)+_0x1b0d4c(0x489,0x46d)+_0x1b0d4c(0x664,0x5c3)+_0x44d2f5(0x257,0x28f)+_0x44d2f5(0x184,0x227)+_0x44d2f5(0x2df,0x1f6)+'tion.',_0x4ebd1b[_0x1b0d4c(0x4cf,0x492)+_0x1b0d4c(0x618,0x594)]=[_0x44d2f5(0x163,0x237)],_0x4ebd1b['patte'+'rn']=/(?:ExpressionFactory|ValueExpression|ELProcessor)\s*.*?(?:createValueExpression|eval)\s*\([^)]*(?:request|param|input)/g,_0x4ebd1b[_0x44d2f5(0x154,0x214)]=_0x44d2f5(0x229,0x195)+'\x20pass'+_0x1b0d4c(0x419,0x443)+_0x1b0d4c(0x5f1,0x5af)+_0x44d2f5(0xe4,0x1b9)+_0x44d2f5(0x130,0x1ee)+_0x44d2f5(0x199,0x1ff)+_0x44d2f5(0x390,0x2cd)+_0x1b0d4c(0x675,0x5b3)+_0x1b0d4c(0x3fd,0x43d)+_0x1b0d4c(0x555,0x4f7)+'ed\x20ap'+'proac'+_0x1b0d4c(0x577,0x4fd)+_0x1b0d4c(0x4df,0x558)+'d.';const _0x5491a1={};_0x5491a1['id']=_0x44d2f5(0x1bf,0x1be)+'RAND-'+_0x44d2f5(0x2d0,0x215),_0x5491a1[_0x44d2f5(0x285,0x183)]='CWE-3'+'38',_0x5491a1[_0x44d2f5(0x2ac,0x2e0)+_0x1b0d4c(0x532,0x44b)]='mediu'+'m',_0x5491a1['title']=_0x1b0d4c(0x5c5,0x575)+_0x44d2f5(0x20a,0x26e)+_0x44d2f5(0x17a,0x1b4)+_0x44d2f5(0xe3,0x1eb)+_0x44d2f5(0x142,0x1a9)+_0x44d2f5(0x206,0x2c3)+_0x44d2f5(0x30d,0x315)+'for\x20S'+_0x44d2f5(0x277,0x19f)+'ty',_0x5491a1['descr'+'iptio'+'n']=_0x1b0d4c(0x4a7,0x4a5)+_0x1b0d4c(0x529,0x627)+_0x44d2f5(0x409,0x329)+_0x44d2f5(0x94,0x1a1)+_0x44d2f5(0x105,0x170)+_0x44d2f5(0x18b,0x265)+_0x44d2f5(0x3ad,0x30e)+_0x44d2f5(0x285,0x349)+_0x1b0d4c(0x53e,0x55e)+_0x44d2f5(0x234,0x186)+_0x44d2f5(0x7f,0x191)+_0x1b0d4c(0x3c2,0x469)+_0x1b0d4c(0x60b,0x50c)+_0x44d2f5(0x1b7,0x271)+_0x44d2f5(0x13c,0x224)+_0x44d2f5(0x19b,0x2ad)+_0x1b0d4c(0x661,0x5e8)+_0x44d2f5(0x363,0x35d)+_0x44d2f5(0x230,0x246)+_0x1b0d4c(0x48d,0x595)+'ys.',_0x5491a1[_0x44d2f5(0xe1,0x1d0)+_0x44d2f5(0x2fa,0x2d2)]=[_0x44d2f5(0x2cb,0x237)],_0x5491a1[_0x44d2f5(0x1be,0x278)+'rn']=/new\s+Random\s*\(\s*\)/g,_0x5491a1[_0x1b0d4c(0x400,0x4d6)]=_0x44d2f5(0x152,0x258)+_0x1b0d4c(0x51e,0x50b)+_0x44d2f5(0xcd,0x19f)+_0x44d2f5(0x21b,0x216)+_0x44d2f5(0x36f,0x36d)+'andom'+_0x1b0d4c(0x371,0x446)+'secur'+_0x44d2f5(0x1d1,0x1c6)+_0x44d2f5(0x7c,0x17d)+_0x44d2f5(0x21a,0x21b)+'andom'+_0x44d2f5(0x2d0,0x2ad)+_0x44d2f5(0x3bf,0x2d9);const _0x488a1e={};_0x488a1e['id']=_0x1b0d4c(0x48c,0x480)+_0x1b0d4c(0x5a9,0x532)+_0x1b0d4c(0x47e,0x4d7),_0x488a1e[_0x44d2f5(0x147,0x183)]='CWE-3'+'62',_0x488a1e['sever'+'ity']=_0x1b0d4c(0x64f,0x5ca)+'m',_0x488a1e['title']=_0x44d2f5(0x3e1,0x2fb)+_0x1b0d4c(0x575,0x495)+_0x1b0d4c(0x617,0x61e)+_0x44d2f5(0x45b,0x353)+_0x1b0d4c(0x441,0x48f)+_0x44d2f5(0x2e2,0x248)+_0x44d2f5(0x241,0x150)+_0x44d2f5(0x34d,0x25d)+'ct',_0x488a1e[_0x1b0d4c(0x41d,0x42a)+_0x44d2f5(0x136,0x147)+'n']='Readi'+'ng\x20an'+_0x1b0d4c(0x665,0x5be)+_0x1b0d4c(0x4c6,0x4e5)+_0x44d2f5(0x367,0x2ba)+_0x1b0d4c(0x551,0x501)+_0x1b0d4c(0x4ef,0x55f)+'thout'+'\x20sync'+_0x1b0d4c(0x59f,0x5ce)+_0x1b0d4c(0x585,0x4fe)+'n\x20ena'+_0x44d2f5(0x116,0x1c2)+_0x1b0d4c(0x4f2,0x563)+_0x44d2f5(0x259,0x25b)+'e\x20con'+_0x1b0d4c(0x55f,0x504)+_0x44d2f5(0x281,0x1d4),_0x488a1e[_0x44d2f5(0x2dc,0x1d0)+'ages']=[_0x1b0d4c(0x3f5,0x4f9)],_0x488a1e[_0x1b0d4c(0x446,0x53a)+'rn']=/if\s*\(\s*\w+\.(?:containsKey|contains|isEmpty|size)\s*\([^)]*\)\s*\)\s*\{[^}]*\w+\.(?:put|add|remove)\s*\(/g,_0x488a1e[_0x44d2f5(0x269,0x214)]=_0x44d2f5(0x11d,0x1cc)+_0x1b0d4c(0x639,0x540)+'rentH'+_0x44d2f5(0x3fd,0x35a)+_0x1b0d4c(0x3b6,0x4b1)+_0x44d2f5(0x2ae,0x34a)+_0x1b0d4c(0x477,0x44c)+_0x1b0d4c(0x388,0x433)+_0x1b0d4c(0x5a0,0x548)+_0x44d2f5(0x2c5,0x289)+_0x1b0d4c(0x63f,0x54f)+_0x44d2f5(0x3db,0x2de)+_0x1b0d4c(0x55b,0x459)+_0x44d2f5(0x2b8,0x2bf)+'d\x20blo'+_0x44d2f5(0x1c5,0x1a8)+'or\x20ch'+_0x44d2f5(0x2f1,0x370)+_0x1b0d4c(0x6a2,0x5cc)+_0x1b0d4c(0x685,0x57f)+_0x44d2f5(0x279,0x1b3)+'s.';const _0x2cb699={};_0x2cb699['id']=_0x44d2f5(0xe5,0x1be)+'LOG-0'+'01',_0x2cb699[_0x1b0d4c(0x3e3,0x445)]=_0x44d2f5(0x29e,0x1d7)+'32',_0x2cb699[_0x44d2f5(0x36f,0x2e0)+_0x44d2f5(0x130,0x189)]=_0x44d2f5(0x258,0x159),_0x2cb699[_0x44d2f5(0x233,0x2a3)]=_0x1b0d4c(0x4d6,0x56a)+_0x1b0d4c(0x673,0x5ac)+_0x1b0d4c(0x588,0x506)+_0x1b0d4c(0x71a,0x622)+'gs',_0x2cb699['descr'+_0x44d2f5(0xc2,0x147)+'n']=_0x1b0d4c(0x52b,0x580)+'ng\x20pa'+_0x44d2f5(0x1b1,0x19d)+_0x44d2f5(0x1a3,0x201)+'okens'+',\x20or\x20'+_0x1b0d4c(0x448,0x4ab)+_0x44d2f5(0x1c1,0x2b1)+_0x1b0d4c(0x557,0x5e9)+_0x44d2f5(0x38c,0x2f2)+'them\x20'+_0x1b0d4c(0x4bc,0x4f1)+_0x1b0d4c(0x64a,0x5c4)+_0x44d2f5(0x367,0x2f3)+_0x44d2f5(0x3a0,0x364)+_0x1b0d4c(0x3d1,0x420)+_0x44d2f5(0x25c,0x2c2)+_0x1b0d4c(0x55c,0x509)+'.',_0x2cb699[_0x1b0d4c(0x4be,0x492)+_0x44d2f5(0x293,0x2d2)]=[_0x1b0d4c(0x41f,0x4f9)],_0x2cb699['patte'+'rn']=/(?:log|logger|LOG|LOGGER)\.(?:info|debug|warn|error|trace)\s*\([^)]*(?:password|secret|token|apiKey|api_key|credential|ssn|credit.?card)/gi,_0x2cb699[_0x44d2f5(0x255,0x214)]=_0x1b0d4c(0x41c,0x457)+_0x44d2f5(0x2e4,0x241)+_0x44d2f5(0x2d9,0x266)+_0x1b0d4c(0x654,0x5ac)+_0x1b0d4c(0x4eb,0x557)+_0x44d2f5(0x393,0x2ef)+'e\x20str'+_0x44d2f5(0x2a2,0x362)+'ed\x20lo'+'gging'+_0x1b0d4c(0x56f,0x61d)+'\x20reda'+_0x44d2f5(0x354,0x321)+_0x1b0d4c(0x6ca,0x5d2)+'s.';const _0x3e8acf={};_0x3e8acf['id']=_0x1b0d4c(0x4b6,0x480)+_0x44d2f5(0x1ff,0x29a)+'02',_0x3e8acf[_0x1b0d4c(0x46f,0x445)]=_0x1b0d4c(0x596,0x552)+'11',_0x3e8acf[_0x44d2f5(0x2e1,0x2e0)+'ity']=_0x1b0d4c(0x47e,0x589)+_0x1b0d4c(0x584,0x523),_0x3e8acf[_0x44d2f5(0x2e8,0x2a3)]='XXE\x20—'+_0x44d2f5(0xec,0x14c)+_0x1b0d4c(0x4b4,0x5ab)+'\x20With'+_0x1b0d4c(0x532,0x56d)+_0x1b0d4c(0x55a,0x482)+'ing\x20E'+_0x1b0d4c(0x641,0x60a)+'al\x20En'+_0x1b0d4c(0x51b,0x491)+'s',_0x3e8acf[_0x1b0d4c(0x499,0x42a)+'iptio'+'n']=_0x1b0d4c(0x583,0x608)+'rserF'+_0x44d2f5(0x25b,0x260)+_0x44d2f5(0x1f8,0x2e4)+_0x44d2f5(0x311,0x274)+_0x1b0d4c(0x5d2,0x5fd)+'ling\x20'+_0x1b0d4c(0x525,0x4ed)+_0x1b0d4c(0x59a,0x5f7)+_0x1b0d4c(0x73d,0x631)+'es\x20en'+'ables'+_0x1b0d4c(0x66d,0x623)+_0x44d2f5(0x260,0x21d)+_0x44d2f5(0x296,0x219),_0x3e8acf[_0x44d2f5(0x15a,0x1d0)+_0x44d2f5(0x30c,0x2d2)]=[_0x44d2f5(0x16a,0x237)],_0x3e8acf[_0x44d2f5(0x342,0x278)+'rn']=/SAXParserFactory\.newInstance\s*\(\s*\)(?:(?!setFeature).)*\.newSAXParser/gs,_0x3e8acf['fix']=_0x44d2f5(0x1ef,0x2a5)+_0x44d2f5(0x2fa,0x220)+_0x44d2f5(0x2a5,0x36c)+_0x1b0d4c(0x416,0x462)+_0x44d2f5(0x1ad,0x157)+_0x44d2f5(0x3c6,0x328)+_0x1b0d4c(0x460,0x414)+_0x1b0d4c(0x507,0x5a1)+_0x44d2f5(0x2bb,0x26f)+_0x1b0d4c(0x60f,0x512)+_0x1b0d4c(0x5b7,0x5c8)+_0x1b0d4c(0x6f8,0x606)+'.org/'+_0x44d2f5(0x249,0x259)+_0x44d2f5(0xdb,0x18d)+_0x1b0d4c(0x51c,0x4e0)+_0x44d2f5(0x352,0x2e3)+_0x1b0d4c(0x4fa,0x4e7)+_0x44d2f5(0x2ed,0x338)+_0x44d2f5(0x131,0x1db)+_0x1b0d4c(0x586,0x59a)+_0x1b0d4c(0x645,0x5aa);const _0x16abb0={};_0x16abb0['id']=_0x44d2f5(0x15f,0x1be)+_0x44d2f5(0x1ee,0x245)+_0x44d2f5(0xe5,0x1d8),_0x16abb0['cwe']='CWE-5'+'02',_0x16abb0[_0x1b0d4c(0x573,0x5a2)+_0x1b0d4c(0x37f,0x44b)]=_0x44d2f5(0x359,0x2c7)+_0x44d2f5(0x16d,0x261),_0x16abb0[_0x1b0d4c(0x502,0x565)]=_0x44d2f5(0x2dd,0x291)+_0x1b0d4c(0x610,0x58a)+_0x44d2f5(0x353,0x307)+_0x1b0d4c(0x65c,0x588)+'on\x20—\x20'+_0x44d2f5(0x2d8,0x204)+_0x44d2f5(0x276,0x1fc)+_0x44d2f5(0x182,0x231)+_0x1b0d4c(0x67b,0x5d3)+_0x44d2f5(0xdd,0x1c8)+_0x1b0d4c(0x447,0x49f)+_0x44d2f5(0x2b3,0x2d5),_0x16abb0[_0x44d2f5(0x182,0x168)+_0x44d2f5(0x1d7,0x147)+'n']=_0x1b0d4c(0x5c5,0x4c6)+_0x44d2f5(0x2e7,0x1fc)+_0x44d2f5(0x192,0x158)+_0x44d2f5(0x228,0x1d5)+_0x1b0d4c(0x509,0x536)+_0x44d2f5(0x414,0x345)+_0x1b0d4c(0x5b6,0x593)+_0x44d2f5(0x1f3,0x2e7)+'\x20can\x20'+'deser'+_0x1b0d4c(0x565,0x481)+_0x1b0d4c(0x42d,0x4a1)+_0x44d2f5(0x36e,0x31d)+_0x1b0d4c(0x473,0x422)+_0x44d2f5(0x1e6,0x24c)+_0x1b0d4c(0x547,0x5ed)+_0x44d2f5(0x258,0x1f0)+_0x44d2f5(0x191,0x23e)+_0x44d2f5(0x3ba,0x304),_0x16abb0[_0x1b0d4c(0x4ed,0x492)+_0x1b0d4c(0x6a1,0x594)]=[_0x1b0d4c(0x518,0x4f9)];function _0x1b0d4c(_0x223811,_0x52cf96){const _0x1008ed={_0x234e7a:0x337};return _0x1e17(_0x52cf96-_0x1008ed._0x234e7a,_0x223811);}_0x16abb0[_0x44d2f5(0x1d0,0x278)+'rn']=/new\s+Yaml\s*\(\s*\)\s*\.load\s*\(/g,_0x16abb0[_0x1b0d4c(0x499,0x4d6)]=_0x1b0d4c(0x5a7,0x4a2)+_0x44d2f5(0x28c,0x178)+'nstru'+_0x44d2f5(0x278,0x275)+_0x44d2f5(0x3f3,0x33a)+_0x1b0d4c(0x40e,0x4af)+_0x44d2f5(0x2bf,0x1da)+_0x1b0d4c(0x338,0x43a)+'nstru'+_0x1b0d4c(0x4ba,0x426)+_0x44d2f5(0x222,0x2e6)+_0x44d2f5(0x390,0x2ce)+_0x44d2f5(0x24e,0x314);const _0x3c9e8e={};_0x3c9e8e['id']=_0x1b0d4c(0x4ed,0x480)+_0x44d2f5(0x1ba,0x205)+_0x1b0d4c(0x455,0x4d7),_0x3c9e8e[_0x1b0d4c(0x42f,0x445)]=_0x1b0d4c(0x502,0x4ff)+'98',_0x3c9e8e[_0x44d2f5(0x26d,0x2e0)+_0x1b0d4c(0x426,0x44b)]=_0x44d2f5(0x23b,0x2c7)+_0x1b0d4c(0x507,0x523),_0x3c9e8e['title']=_0x44d2f5(0x140,0x1d2)+_0x1b0d4c(0x70a,0x603)+'Datab'+_0x1b0d4c(0x3ad,0x486)+_0x44d2f5(0x17b,0x282)+_0x44d2f5(0x159,0x180),_0x3c9e8e[_0x1b0d4c(0x494,0x42a)+_0x1b0d4c(0x455,0x409)+'n']='Hardc'+_0x44d2f5(0x237,0x341)+_0x1b0d4c(0x434,0x41c)+_0x44d2f5(0x2e7,0x2b5)+_0x1b0d4c(0x484,0x465)+_0x44d2f5(0x10e,0x151)+_0x44d2f5(0x2e3,0x282)+_0x1b0d4c(0x441,0x442)+_0x44d2f5(0x178,0x25a)+_0x1b0d4c(0x4b6,0x4a0)+_0x1b0d4c(0x50e,0x5e5)+_0x1b0d4c(0x559,0x555)+_0x44d2f5(0x1d1,0x29f)+'rom\x20c'+'ompil'+_0x44d2f5(0x34b,0x32c)+'asses'+'.',_0x3c9e8e['langu'+_0x1b0d4c(0x4bc,0x594)]=[_0x1b0d4c(0x538,0x4f9)],_0x3c9e8e[_0x1b0d4c(0x519,0x53a)+'rn']=/DriverManager\.getConnection\s*\(\s*["']jdbc:\w+:\/\/[^"']*["']\s*,\s*["']\w+["']\s*,\s*["'][^"']+["']/g,_0x3c9e8e[_0x1b0d4c(0x53d,0x4d6)]='Use\x20e'+_0x44d2f5(0x82,0x188)+'nment'+_0x44d2f5(0x36f,0x334)+'ables'+'\x20or\x20a'+_0x44d2f5(0x34d,0x297)+'ectio'+_0x44d2f5(0x1c0,0x254)+'l\x20wit'+_0x44d2f5(0x302,0x2ca)+'ernal'+_0x1b0d4c(0x50b,0x444)+_0x1b0d4c(0x48b,0x56e)+_0x1b0d4c(0x5b4,0x61e)+_0x44d2f5(0x33b,0x2b9)+_0x44d2f5(0x1a3,0x20f)+_0x1b0d4c(0x524,0x59c)+_0x44d2f5(0x274,0x243)+'ies,\x20'+_0x44d2f5(0x2d6,0x269)+').';export const javaExtendedRules=[_0x1eb716,_0x596a51,_0x3efaa4,_0x32ff25,_0x3542e2,_0x43974c,_0x478b99,_0x2fad5c,_0x565dc8,_0x1beee9,_0x3ce6da,_0x4ebd1b,_0x5491a1,_0x488a1e,_0x2cb699,_0x3e8acf,_0x16abb0,_0x3c9e8e];
package/dist/rules/java.js CHANGED
@@ -1 +1 @@
1
- (function(_0x1f84ea,_0x1bf959){const _0x2f2929={_0x528782:0x423,_0x2d287f:0x48f,_0x3d1ae2:0x3fb,_0x238886:0x495,_0x31053f:0x48c,_0x58587e:0x31e,_0x2f13e7:0x5a7,_0x410caf:0x495,_0x31e0a3:0x453,_0x28050c:0x305,_0x12f9cd:0x3f4},_0x673171={_0x284811:0x10a};function _0x1495c4(_0x3ee945,_0x5d2a09){return _0x17ac(_0x5d2a09-_0x673171._0x284811,_0x3ee945);}function _0x308300(_0x1a116d,_0x5523d2){return _0x17ac(_0x5523d2-0x257,_0x1a116d);}const _0xb1ecaf=_0x1f84ea();while(!![]){try{const _0x3f8b0=-parseInt(_0x308300(0x476,_0x2f2929._0x528782))/(0x1ae*0xd+0xc88*-0x2+0x33b)+parseInt(_0x308300(_0x2f2929._0x2d287f,_0x2f2929._0x3d1ae2))/(0x579*-0x3+-0x2144+0x31b1)+parseInt(_0x1495c4(0x388,0x40e))/(-0x60a+-0x252c+0x2b39)*(-parseInt(_0x1495c4(0x4b2,0x4db))/(-0x7*-0x4fd+0x1290+-0x1*0x3577))+parseInt(_0x308300(_0x2f2929._0x238886,_0x2f2929._0x31053f))/(0x19bd*-0x1+0x1e38+-0x476)*(parseInt(_0x1495c4(0x21f,_0x2f2929._0x58587e))/(0x115*0x1+-0x3*-0x9ae+0x1*-0x1e19))+parseInt(_0x1495c4(0x2bb,0x327))/(-0x1*0x259d+-0x1*0x14ba+0x1*0x3a5e)*(-parseInt(_0x308300(0x5f7,_0x2f2929._0x2f13e7))/(0x35*-0x89+-0x98c+0x25f1))+-parseInt(_0x308300(_0x2f2929._0x410caf,0x5af))/(-0x1392+-0x1*0x165a+0x29f5)*(parseInt(_0x1495c4(_0x2f2929._0x31e0a3,0x436))/(-0x8*0x17+0x1946+0xc42*-0x2))+parseInt(_0x308300(_0x2f2929._0x28050c,_0x2f2929._0x12f9cd))/(-0x8e*-0x2+-0x1*0x262b+-0x128d*-0x2);if(_0x3f8b0===_0x1bf959)break;else _0xb1ecaf['push'](_0xb1ecaf['shift']());}catch(_0x7dbf99){_0xb1ecaf['push'](_0xb1ecaf['shift']());}}}(_0x5173,-0x1*0xea7b5+-0xd232c+-0xad2e*-0x3c));const _0x5eaf01={};_0x5eaf01['id']='JAVA-'+'SQLI-'+_0x45cb19(0x567,0x55a),_0x5eaf01[_0x2b9155(0x3bb,0x49d)]=_0x2b9155(0x23b,0x2d6)+'9',_0x5eaf01[_0x45cb19(0x498,0x3f0)+'ity']=_0x2b9155(0x331,0x3c8)+_0x45cb19(0x441,0x519),_0x5eaf01[_0x45cb19(0x455,0x4e7)]=_0x2b9155(0x36a,0x28f)+_0x45cb19(0x425,0x4f2)+_0x45cb19(0x60b,0x542)+'\x20Stri'+_0x2b9155(0x3f4,0x30a)+_0x2b9155(0x3ac,0x41f)+_0x2b9155(0x34a,0x439)+_0x45cb19(0x4d4,0x3dd)+_0x45cb19(0x4f1,0x5e5),_0x5eaf01[_0x2b9155(0x3e6,0x31a)+_0x45cb19(0x544,0x4f9)+'n']=_0x45cb19(0x550,0x5de)+'tenat'+_0x2b9155(0x329,0x2d6)+_0x2b9155(0x3c1,0x2d9)+'nput\x20'+_0x2b9155(0x36c,0x278)+'SQL\x20q'+_0x45cb19(0x5e6,0x64e)+_0x2b9155(0x400,0x2e2)+'bles\x20'+'injec'+_0x2b9155(0x24c,0x1b1)+_0x2b9155(0x43c,0x384)+_0x45cb19(0x58b,0x46c),_0x5eaf01[_0x45cb19(0x448,0x4f8)+_0x45cb19(0x4c8,0x563)]=[_0x2b9155(0x2c9,0x248)],_0x5eaf01[_0x2b9155(0x2c2,0x203)+'rn']=/(?:createStatement|prepareStatement|createQuery|createNativeQuery|executeQuery|executeUpdate)\s*\(\s*(?:["'][^"']*["']\s*\+|\+\s*["'].*(?:SELECT|INSERT|UPDATE|DELETE|WHERE|FROM))/gi,_0x5eaf01[_0x2b9155(0x34d,0x356)]=_0x45cb19(0x5d4,0x533)+_0x2b9155(0x37d,0x35a)+_0x45cb19(0x48f,0x497)+'temen'+_0x2b9155(0x28d,0x2ce)+'h\x20par'+_0x2b9155(0x303,0x32e)+_0x2b9155(0x382,0x3f2)+_0x2b9155(0x338,0x36a)+_0x2b9155(0x265,0x30d)+_0x2b9155(0x37f,0x3c3)+_0x2b9155(0x433,0x4b1)+_0x2b9155(0x2dc,0x340)+_0x2b9155(0x286,0x1d9)+_0x45cb19(0x597,0x5a3)+_0x2b9155(0x279,0x367)+_0x2b9155(0x39a,0x2fc)+_0x45cb19(0x560,0x5b6)+'ment('+_0x45cb19(0x569,0x4dc)+_0x2b9155(0x273,0x32d)+_0x2b9155(0x242,0x20a)+_0x45cb19(0x4f3,0x5a6)+_0x2b9155(0x201,0x14a)+_0x45cb19(0x4be,0x49b)+_0x2b9155(0x289,0x351)+_0x45cb19(0x4dd,0x5e1)+_0x45cb19(0x63e,0x5c3)+_0x45cb19(0x505,0x423)+_0x2b9155(0x317,0x3d0)+_0x45cb19(0x495,0x53a)+';';const _0x264370={};function _0x2b9155(_0x929bb6,_0x59b70d){const _0x1e2daa={_0xb2e351:0x67};return _0x17ac(_0x929bb6-_0x1e2daa._0xb2e351,_0x59b70d);}_0x264370['id']=_0x2b9155(0x291,0x379)+_0x2b9155(0x2f0,0x2f5)+'002',_0x264370[_0x45cb19(0x5d9,0x5fa)]=_0x45cb19(0x459,0x57e)+'9',_0x264370['sever'+'ity']=_0x2b9155(0x331,0x3f5)+_0x45cb19(0x441,0x351),_0x264370[_0x2b9155(0x237,0x1cf)]=_0x2b9155(0x36a,0x263)+_0x2b9155(0x207,0x1cb)+_0x2b9155(0x3ed,0x375)+'\x20Stri'+'ng.fo'+'rmat\x20'+_0x45cb19(0x430,0x477)+_0x2b9155(0x29b,0x1ad)+'ry',_0x264370[_0x2b9155(0x3e6,0x477)+'iptio'+'n']='Using'+'\x20Stri'+_0x45cb19(0x633,0x59c)+_0x45cb19(0x4df,0x529)+'to\x20bu'+_0x45cb19(0x627,0x552)+_0x2b9155(0x3d2,0x3df)+'eries'+_0x2b9155(0x240,0x339)+_0x45cb19(0x524,0x4cf)+_0x2b9155(0x348,0x407)+_0x2b9155(0x27e,0x2bd),_0x264370[_0x45cb19(0x448,0x3bd)+_0x45cb19(0x4c8,0x54d)]=[_0x2b9155(0x2c9,0x31c)],_0x264370[_0x45cb19(0x4e0,0x552)+'rn']=/String\.format\s*\(\s*["'](?:SELECT|INSERT|UPDATE|DELETE|DROP|ALTER)\b/gi,_0x264370[_0x45cb19(0x56b,0x63a)]=_0x2b9155(0x225,0x332)+_0x2b9155(0x25d,0x246)+_0x45cb19(0x487,0x3da)+_0x2b9155(0x385,0x3b3)+_0x2b9155(0x402,0x368)+'\x20inst'+_0x45cb19(0x632,0x52f)+_0x2b9155(0x2df,0x263)+_0x45cb19(0x57f,0x607)+'ormat'+_0x2b9155(0x2e1,0x28a)+_0x2b9155(0x3fc,0x4f8);const _0x466b0f={};_0x466b0f['id']=_0x2b9155(0x291,0x2bb)+_0x45cb19(0x4bc,0x397)+'01',_0x466b0f[_0x2b9155(0x3bb,0x3a9)]=_0x45cb19(0x43c,0x384)+'11',_0x466b0f[_0x45cb19(0x498,0x4af)+_0x45cb19(0x5b9,0x585)]='criti'+_0x45cb19(0x441,0x53c),_0x466b0f[_0x45cb19(0x455,0x40b)]=_0x45cb19(0x42c,0x4af)+_0x45cb19(0x549,0x4a5)+_0x2b9155(0x328,0x327)+_0x45cb19(0x587,0x5b3)+'(XXE)'+_0x2b9155(0x37c,0x2fc)+'safe\x20'+_0x2b9155(0x359,0x3dd)+_0x2b9155(0x2b1,0x255)+'g',_0x466b0f[_0x45cb19(0x604,0x6ef)+_0x45cb19(0x544,0x627)+'n']=_0x2b9155(0x359,0x36e)+'arser'+_0x2b9155(0x367,0x25d)+_0x45cb19(0x444,0x430)+'disab'+'led\x20e'+_0x2b9155(0x32b,0x387)+'al\x20en'+_0x45cb19(0x437,0x503)+_0x45cb19(0x62b,0x70a)+_0x45cb19(0x559,0x465)+'\x20arbi'+'trary'+'\x20file'+_0x2b9155(0x30a,0x3da)+'\x20perf'+_0x45cb19(0x4f2,0x4df)+_0x45cb19(0x45b,0x397),_0x466b0f['langu'+_0x2b9155(0x2aa,0x3aa)]=['java'],_0x466b0f[_0x45cb19(0x4e0,0x4d0)+'rn']=/(?:DocumentBuilderFactory|SAXParserFactory|XMLInputFactory|TransformerFactory|SchemaFactory)\.newInstance\s*\(/g,_0x466b0f[_0x2b9155(0x34d,0x22f)]='Disab'+'le\x20ex'+_0x45cb19(0x43e,0x489)+'l\x20ent'+_0x2b9155(0x43d,0x3b5)+_0x2b9155(0x321,0x309)+_0x2b9155(0x28a,0x1db)+_0x2b9155(0x3e3,0x353)+_0x45cb19(0x47c,0x365)+_0x2b9155(0x2cd,0x36c)+_0x45cb19(0x5ed,0x585)+'pache'+_0x45cb19(0x5c3,0x678)+_0x2b9155(0x32e,0x401)+_0x45cb19(0x5fc,0x6de)+'es/di'+'sallo'+'w-doc'+_0x2b9155(0x28b,0x2da)+_0x45cb19(0x480,0x57d)+_0x2b9155(0x31d,0x225)+'e);';const _0x1d65c3={};_0x1d65c3['id']='JAVA-'+_0x45cb19(0x50d,0x426)+_0x2b9155(0x2e3,0x23f),_0x1d65c3['cwe']=_0x2b9155(0x432,0x46d)+'02',_0x1d65c3[_0x2b9155(0x27a,0x174)+'ity']=_0x45cb19(0x54f,0x64d)+_0x45cb19(0x441,0x3fe),_0x1d65c3[_0x45cb19(0x455,0x41f)]=_0x2b9155(0x3f9,0x3d0)+_0x2b9155(0x2fa,0x415)+_0x45cb19(0x489,0x5af)+_0x2b9155(0x436,0x33d)+_0x45cb19(0x46a,0x471)+_0x2b9155(0x3ce,0x3b8)+_0x2b9155(0x2f5,0x27d)+_0x45cb19(0x5da,0x6c0)+_0x2b9155(0x36f,0x41f),_0x1d65c3[_0x45cb19(0x604,0x667)+_0x45cb19(0x544,0x505)+'n']=_0x45cb19(0x4c4,0x4ae)+_0x45cb19(0x414,0x354)+_0x2b9155(0x3c9,0x3d8)+_0x2b9155(0x292,0x1e6)+_0x45cb19(0x625,0x6bd)+_0x2b9155(0x1f5,0x29e)+_0x2b9155(0x215,0x193)+'\x20on\x20u'+_0x2b9155(0x426,0x350)+_0x45cb19(0x55c,0x4fc)+_0x2b9155(0x376,0x2e1)+_0x45cb19(0x434,0x398)+'ecute'+_0x2b9155(0x2bd,0x340)+_0x45cb19(0x467,0x3d6)+_0x2b9155(0x405,0x51f)+'\x20(Apa'+_0x45cb19(0x647,0x71f)+_0x2b9155(0x29d,0x288)+_0x2b9155(0x302,0x2e7)+_0x2b9155(0x239,0x2dd)+_0x2b9155(0x203,0x194)+').',_0x1d65c3[_0x45cb19(0x448,0x40d)+_0x2b9155(0x2aa,0x2d1)]=[_0x2b9155(0x2c9,0x364)],_0x1d65c3[_0x2b9155(0x2c2,0x327)+'rn']=/(?:ObjectInputStream|readObject|readUnshared)\s*\(/g,_0x1d65c3[_0x2b9155(0x34d,0x30b)]=_0x45cb19(0x4f0,0x402)+'SON/P'+'rotob'+_0x45cb19(0x4f7,0x4f4)+_0x2b9155(0x1fa,0x2c8)+'.\x20If\x20'+'Objec'+_0x45cb19(0x5e7,0x5c7)+_0x45cb19(0x4b0,0x50e)+'am\x20is'+_0x2b9155(0x428,0x3a1)+_0x2b9155(0x2f2,0x386)+'mplem'+_0x45cb19(0x572,0x690)+_0x2b9155(0x3eb,0x436)+'Input'+_0x45cb19(0x4c7,0x45e)+_0x2b9155(0x2a8,0x23d)+_0x2b9155(0x3f3,0x4e5)+_0x2b9155(0x401,0x4f6)+_0x2b9155(0x21d,0x283)+'ict\x20a'+'llowe'+'d\x20cla'+'sses.';function _0x45cb19(_0x55ec2f,_0x3267f0){return _0x17ac(_0x55ec2f-0x285,_0x3267f0);}const _0x23b02f={};_0x23b02f['id']=_0x2b9155(0x291,0x286)+_0x45cb19(0x50d,0x4ff)+_0x45cb19(0x57c,0x617),_0x23b02f['cwe']=_0x45cb19(0x650,0x642)+'02',_0x23b02f['sever'+_0x45cb19(0x5b9,0x4e3)]=_0x45cb19(0x54f,0x46c)+'cal',_0x23b02f[_0x45cb19(0x455,0x34f)]='Insec'+_0x2b9155(0x2fa,0x1f9)+_0x2b9155(0x26b,0x1af)+'aliza'+'tion\x20'+_0x45cb19(0x5e0,0x6df)+'Decod'+'er',_0x23b02f[_0x2b9155(0x3e6,0x3aa)+_0x2b9155(0x326,0x3c8)+'n']=_0x45cb19(0x5cc,0x61f)+_0x2b9155(0x248,0x296)+_0x45cb19(0x47a,0x39e)+_0x2b9155(0x32a,0x398)+_0x2b9155(0x387,0x41d)+'bitra'+_0x2b9155(0x374,0x39a)+'de\x20wh'+_0x45cb19(0x537,0x50e)+_0x45cb19(0x5f8,0x6f5)+_0x2b9155(0x329,0x239)+_0x2b9155(0x426,0x4e1)+'ted\x20X'+_0x45cb19(0x595,0x603)+'put.',_0x23b02f[_0x45cb19(0x448,0x3ee)+_0x2b9155(0x2aa,0x2f1)]=[_0x2b9155(0x2c9,0x368)],_0x23b02f[_0x45cb19(0x4e0,0x43f)+'rn']=/XMLDecoder\s*\(\s*new/g,_0x23b02f[_0x2b9155(0x34d,0x35a)]=_0x2b9155(0x39e,0x40b)+'t\x20use'+'\x20XMLD'+_0x45cb19(0x5a1,0x497)+_0x45cb19(0x4ad,0x4fe)+_0x45cb19(0x5ab,0x66b)+_0x45cb19(0x53d,0x606)+_0x45cb19(0x645,0x682)+_0x2b9155(0x3a7,0x33b)+'se\x20a\x20'+_0x2b9155(0x1f2,0x307)+_0x45cb19(0x577,0x515)+_0x45cb19(0x48d,0x451)+_0x2b9155(0x396,0x3fc)+'SON\x20i'+_0x2b9155(0x394,0x3ba)+'d.';const _0x2cac40={};_0x2cac40['id']=_0x2b9155(0x291,0x313)+_0x45cb19(0x536,0x460)+_0x2b9155(0x349,0x307),_0x2cac40[_0x45cb19(0x5d9,0x57e)]=_0x45cb19(0x41d,0x536)+'8',_0x2cac40[_0x45cb19(0x498,0x442)+_0x2b9155(0x39b,0x4a2)]=_0x2b9155(0x331,0x2b7)+_0x2b9155(0x223,0x318),_0x2cac40['title']=_0x45cb19(0x57a,0x643)+_0x45cb19(0x432,0x35b)+_0x45cb19(0x566,0x600)+'on\x20—\x20'+_0x45cb19(0x590,0x567)+_0x2b9155(0x2ff,0x221)+_0x2b9155(0x35b,0x2a3)+_0x2b9155(0x39c,0x3ff)+_0x2b9155(0x34e,0x425)+'\x20inpu'+'t',_0x2cac40[_0x45cb19(0x604,0x5be)+_0x45cb19(0x544,0x5c0)+'n']='Runti'+_0x2b9155(0x2ff,0x22f)+_0x45cb19(0x526,0x61b)+'with\x20'+_0x2b9155(0x276,0x1b3)+_0x45cb19(0x439,0x543)+_0x2b9155(0x22e,0x351)+_0x45cb19(0x426,0x502)+_0x45cb19(0x45e,0x4e3)+_0x2b9155(0x325,0x3d1)+'\x20comm'+_0x2b9155(0x298,0x1e3)+'nject'+_0x45cb19(0x564,0x671),_0x2cac40[_0x2b9155(0x22a,0x309)+_0x2b9155(0x2aa,0x2ca)]=['java'],_0x2cac40[_0x45cb19(0x4e0,0x572)+'rn']=/Runtime\.getRuntime\s*\(\s*\)\.exec\s*\(\s*(?:["'][^"']*["']\s*\+|\+)/g,_0x2cac40[_0x2b9155(0x34d,0x35f)]='Use\x20P'+_0x2b9155(0x313,0x3fd)+'sBuil'+_0x45cb19(0x5b6,0x65b)+_0x45cb19(0x411,0x50f)+_0x45cb19(0x5d8,0x6a5)+'nt\x20li'+_0x2b9155(0x373,0x36c)+_0x2b9155(0x391,0x2cc)+_0x45cb19(0x5f8,0x6e0)+_0x45cb19(0x60d,0x65a)+'er(\x22c'+_0x45cb19(0x4d9,0x588)+_0x45cb19(0x44b,0x3dd)+'\x22,\x20\x22a'+'rg2\x22)'+_0x2b9155(0x2a5,0x2e4)+_0x45cb19(0x5f2,0x4f9);const _0x5393b6={};_0x5393b6['id']=_0x45cb19(0x4af,0x588)+_0x45cb19(0x536,0x53d)+_0x45cb19(0x5b0,0x651),_0x5393b6[_0x45cb19(0x5d9,0x54f)]=_0x45cb19(0x41d,0x352)+'8',_0x5393b6['sever'+_0x45cb19(0x5b9,0x55a)]=_0x45cb19(0x54f,0x5e0)+'cal',_0x5393b6[_0x45cb19(0x455,0x574)]='Comma'+_0x2b9155(0x214,0x297)+_0x2b9155(0x348,0x39d)+'on\x20—\x20'+'Proce'+_0x2b9155(0x200,0x276)+_0x45cb19(0x607,0x5c3)+_0x45cb19(0x5ce,0x509)+_0x2b9155(0x305,0x35f),_0x5393b6['descr'+_0x2b9155(0x326,0x34c)+'n']=_0x2b9155(0x21f,0x1e8)+'\x20Proc'+_0x45cb19(0x468,0x44f)+'ilder'+'\x20with'+_0x45cb19(0x42a,0x39b)+'l\x20int'+'erpre'+'ter\x20a'+_0x45cb19(0x461,0x342)+'namic'+_0x2b9155(0x270,0x351)+'ands\x20'+_0x45cb19(0x56f,0x590)+_0x2b9155(0x222,0x229)+_0x2b9155(0x348,0x30d)+'on.',_0x5393b6[_0x2b9155(0x22a,0x288)+'ages']=[_0x45cb19(0x4e7,0x53c)],_0x5393b6[_0x45cb19(0x4e0,0x506)+'rn']=/ProcessBuilder\s*\(\s*(?:Arrays\.asList\s*\()?\s*["'](?:bash|sh|cmd|cmd\.exe)['"]\s*,\s*["'](?:-c|\/c)['"]\s*,/g,_0x5393b6[_0x2b9155(0x34d,0x3c6)]='Avoid'+_0x2b9155(0x20c,0x11f)+_0x45cb19(0x626,0x5f8)+_0x45cb19(0x578,0x5fe)+_0x2b9155(0x422,0x531)+'se\x20Pr'+_0x45cb19(0x5f8,0x54a)+_0x2b9155(0x3ef,0x4ac)+'er\x20wi'+_0x2b9155(0x3cc,0x4d2)+_0x2b9155(0x20a,0x1c9)+_0x45cb19(0x4bd,0x41d)+_0x2b9155(0x244,0x1a8)+_0x45cb19(0x493,0x599)+_0x2b9155(0x236,0x168)+_0x45cb19(0x614,0x5e8);const _0x4528e9={};_0x4528e9['id']='JAVA-'+_0x45cb19(0x423,0x4e9)+'001',_0x4528e9[_0x45cb19(0x5d9,0x625)]=_0x2b9155(0x350,0x244)+'2',_0x4528e9[_0x2b9155(0x27a,0x248)+_0x2b9155(0x39b,0x3e5)]=_0x2b9155(0x416,0x4dc),_0x4528e9[_0x2b9155(0x237,0x1d4)]=_0x45cb19(0x613,0x5b2)+'Trave'+'rsal\x20'+_0x45cb19(0x4fc,0x5ab)+'r\x20inp'+'ut\x20in'+_0x2b9155(0x322,0x384)+_0x45cb19(0x5ac,0x693),_0x4528e9[_0x2b9155(0x3e6,0x3af)+_0x45cb19(0x544,0x581)+'n']=_0x45cb19(0x5b5,0x66a)+_0x45cb19(0x54b,0x5f0)+_0x2b9155(0x3a1,0x38b)+_0x2b9155(0x36e,0x2f7)+_0x45cb19(0x474,0x541)+_0x2b9155(0x3af,0x47b)+_0x2b9155(0x2cf,0x33b)+'ut\x20sa'+_0x45cb19(0x530,0x529)+_0x45cb19(0x54d,0x658)+'\x20allo'+'ws\x20re'+_0x2b9155(0x3a6,0x397)+'/writ'+_0x45cb19(0x5f1,0x640)+'rbitr'+'ary\x20f'+_0x45cb19(0x5c9,0x4ea),_0x4528e9[_0x2b9155(0x22a,0x2fa)+_0x2b9155(0x2aa,0x26f)]=[_0x2b9155(0x2c9,0x212)],_0x4528e9['patte'+'rn']=/new\s+File\s*\(\s*(?:request\.getParameter|request\.getAttribute|params\.get|[^)]+\+\s*(?:request|param|input|user))/g,_0x4528e9['fix']='Canon'+_0x2b9155(0x42c,0x459)+_0x45cb19(0x641,0x70b)+_0x2b9155(0x320,0x43f)+_0x2b9155(0x25b,0x310)+_0x45cb19(0x563,0x661)+_0x45cb19(0x4d3,0x419)+'icalP'+_0x2b9155(0x2a7,0x1c6)+_0x2b9155(0x31b,0x20c)+'verif'+_0x45cb19(0x586,0x500)+'start'+'s\x20wit'+_0x2b9155(0x221,0x199)+'\x20expe'+_0x45cb19(0x576,0x625)+_0x2b9155(0x330,0x3b4)+'direc'+_0x45cb19(0x4a8,0x4f8);const _0x341dfc={};_0x341dfc['id']=_0x45cb19(0x4af,0x3f4)+'SSRF-'+'001',_0x341dfc['cwe']='CWE-9'+'18',_0x341dfc[_0x45cb19(0x498,0x3e9)+_0x45cb19(0x5b9,0x521)]=_0x2b9155(0x416,0x39a),_0x341dfc[_0x45cb19(0x455,0x3b7)]='Serve'+_0x45cb19(0x4a1,0x487)+_0x2b9155(0x299,0x313)+_0x2b9155(0x35d,0x3c1)+_0x45cb19(0x5c1,0x6d8)+_0x45cb19(0x463,0x556)+_0x2b9155(0x3d0,0x2cc)+_0x2b9155(0x266,0x199)+_0x2b9155(0x309,0x3f4)+_0x45cb19(0x659,0x675)+_0x2b9155(0x2f7,0x1ee)+'ut',_0x341dfc[_0x2b9155(0x3e6,0x3a1)+_0x45cb19(0x544,0x428)+'n']=_0x45cb19(0x5d3,0x665)+_0x45cb19(0x5e4,0x539)+_0x2b9155(0x388,0x38d)+_0x2b9155(0x419,0x51c)+_0x45cb19(0x507,0x4b4)+'ction'+'\x20from'+'\x20user'+_0x45cb19(0x4ea,0x5f1)+'t\x20can'+_0x45cb19(0x517,0x4c0)+_0x2b9155(0x3f0,0x4bd)+'terna'+'l\x20ser'+_0x45cb19(0x427,0x442)+'.',_0x341dfc[_0x2b9155(0x22a,0x306)+_0x2b9155(0x2aa,0x1b5)]=[_0x45cb19(0x4e7,0x421)],_0x341dfc['patte'+'rn']=/new\s+URL\s*\(\s*(?:request\.getParameter|request\.getAttribute|params\.get|[^)]+\+\s*(?:request|param|input|user))/g,_0x341dfc[_0x45cb19(0x56b,0x5a8)]=_0x2b9155(0x231,0x194)+_0x2b9155(0x241,0x23f)+_0x2b9155(0x3cb,0x447)+_0x2b9155(0x218,0x1b8)+_0x45cb19(0x603,0x62a)+'allow'+_0x45cb19(0x488,0x574)+'of\x20al'+'lowed'+_0x45cb19(0x643,0x63d)+_0x2b9155(0x29a,0x251)+'nd\x20ho'+_0x45cb19(0x606,0x70d)+_0x45cb19(0x4d2,0x55a)+'\x20priv'+'ate\x20I'+_0x2b9155(0x2db,0x20f)+_0x2b9155(0x2f4,0x3a5);const _0x2f9c0e={};_0x2f9c0e['id']=_0x2b9155(0x291,0x362)+'CRYPT'+_0x45cb19(0x575,0x673),_0x2f9c0e['cwe']=_0x45cb19(0x41c,0x3f2)+'27',_0x2f9c0e[_0x2b9155(0x27a,0x2cd)+_0x45cb19(0x5b9,0x6bd)]='high',_0x2f9c0e[_0x2b9155(0x237,0x254)]=_0x45cb19(0x64e,0x557)+_0x45cb19(0x438,0x409)+_0x45cb19(0x509,0x4d9)+_0x45cb19(0x570,0x542)+_0x2b9155(0x2a3,0x321)+_0x45cb19(0x496,0x4cd)+'1',_0x2f9c0e[_0x2b9155(0x3e6,0x4a9)+_0x45cb19(0x544,0x66a)+'n']=_0x45cb19(0x48b,0x44e)+'nd\x20SH'+_0x2b9155(0x2c3,0x1de)+_0x2b9155(0x3b9,0x474)+_0x45cb19(0x62e,0x6b9)+_0x2b9155(0x335,0x29c)+_0x45cb19(0x420,0x31e)+_0x45cb19(0x4ca,0x45b)+_0x2b9155(0x3d1,0x403)+_0x2b9155(0x288,0x227)+'rity\x20'+_0x2b9155(0x3a4,0x33c)+_0x2b9155(0x41e,0x524),_0x2f9c0e['langu'+_0x2b9155(0x2aa,0x1ce)]=['java'],_0x2f9c0e[_0x45cb19(0x4e0,0x598)+'rn']=/MessageDigest\.getInstance\s*\(\s*["'](?:MD5|SHA-?1)["']\s*\)/gi,_0x2f9c0e[_0x2b9155(0x34d,0x2d9)]=_0x45cb19(0x46d,0x512)+_0x2b9155(0x30d,0x308)+_0x45cb19(0x62d,0x57c)+_0x45cb19(0x5e5,0x603)+'ger:\x20'+'Messa'+_0x45cb19(0x4cc,0x4c9)+_0x2b9155(0x28e,0x2b2)+_0x45cb19(0x490,0x379)+_0x45cb19(0x472,0x4ca)+'(\x22SHA'+_0x2b9155(0x23a,0x32f)+').';const _0x39ae75={};_0x39ae75['id']=_0x45cb19(0x4af,0x563)+_0x2b9155(0x33c,0x385)+'O-002',_0x39ae75[_0x2b9155(0x3bb,0x44f)]=_0x2b9155(0x1fe,0x212)+'27',_0x39ae75['sever'+_0x2b9155(0x39b,0x455)]=_0x2b9155(0x331,0x3f1)+_0x2b9155(0x223,0x22b),_0x39ae75[_0x2b9155(0x237,0x203)]=_0x2b9155(0x430,0x513)+_0x45cb19(0x438,0x35b)+_0x2b9155(0x2eb,0x37f)+_0x2b9155(0x352,0x364)+_0x45cb19(0x4e6,0x5be)+_0x45cb19(0x44d,0x496)+_0x2b9155(0x246,0x18c),_0x39ae75[_0x2b9155(0x3e6,0x2d8)+_0x45cb19(0x544,0x4a3)+'n']=_0x2b9155(0x2ec,0x364)+_0x45cb19(0x514,0x40a)+_0x2b9155(0x3e0,0x39b)+_0x45cb19(0x64f,0x661)+_0x2b9155(0x41b,0x52e)+_0x45cb19(0x4b6,0x548)+_0x2b9155(0x389,0x4ae)+_0x2b9155(0x370,0x2a9)+'y\x20bre'+_0x2b9155(0x26c,0x1f7)+'e.\x203D'+'ES\x20(D'+_0x45cb19(0x435,0x431)+_0x45cb19(0x48c,0x3bd)+_0x45cb19(0x508,0x4d5)+'cated'+'.',_0x39ae75[_0x45cb19(0x448,0x534)+_0x45cb19(0x4c8,0x51a)]=['java'],_0x39ae75[_0x2b9155(0x2c2,0x2dd)+'rn']=/Cipher\.getInstance\s*\(\s*["'](?:DES|DESede|DES\/|DESede\/)/gi,_0x39ae75['fix']=_0x2b9155(0x3ff,0x346)+_0x45cb19(0x64c,0x709)+_0x45cb19(0x57e,0x665)+_0x2b9155(0x314,0x36c)+_0x45cb19(0x4cb,0x3d4)+_0x2b9155(0x30f,0x319)+'getIn'+'stanc'+_0x2b9155(0x258,0x1f1)+'S/GCM'+'/NoPa'+_0x2b9155(0x2be,0x329)+'\x22)';const _0x27def3={};_0x27def3['id']=_0x2b9155(0x291,0x259)+'CRYPT'+_0x45cb19(0x584,0x60d),_0x27def3[_0x45cb19(0x5d9,0x57d)]=_0x45cb19(0x41c,0x328)+'27',_0x27def3[_0x45cb19(0x498,0x385)+_0x45cb19(0x5b9,0x54f)]=_0x45cb19(0x634,0x603),_0x27def3['title']='Weak\x20'+_0x45cb19(0x438,0x3a8)+_0x45cb19(0x509,0x405)+_0x45cb19(0x570,0x636)+'ECB\x20M'+_0x45cb19(0x52e,0x426),_0x27def3['descr'+_0x45cb19(0x544,0x555)+'n']=_0x45cb19(0x5de,0x58c)+_0x2b9155(0x3ea,0x39b)+_0x45cb19(0x5fa,0x54b)+'ts\x20id'+_0x2b9155(0x43a,0x326)+_0x2b9155(0x3b2,0x3f3)+'ocks\x20'+_0x2b9155(0x336,0x21c)+'entic'+_0x2b9155(0x2fd,0x2d9)+'phert'+_0x45cb19(0x55d,0x54d)+'revea'+'ling\x20'+_0x45cb19(0x4e0,0x405)+'rns.\x20'+'The\x20E'+'CB\x20pe'+_0x2b9155(0x3bd,0x40d)+_0x2b9155(0x2b8,0x1b8)+_0x45cb19(0x652,0x558),_0x27def3['langu'+_0x2b9155(0x2aa,0x264)]=[_0x45cb19(0x4e7,0x3f3)],_0x27def3[_0x45cb19(0x4e0,0x46b)+'rn']=/Cipher\.getInstance\s*\(\s*["'](?:AES|DES|DESede)\/ECB\//gi,_0x27def3[_0x2b9155(0x34d,0x254)]=_0x2b9155(0x281,0x32d)+'CM\x20or'+'\x20CBC\x20'+_0x2b9155(0x228,0x300)+_0x45cb19(0x41b,0x349)+'er.ge'+_0x45cb19(0x465,0x3b9)+_0x2b9155(0x2af,0x213)+_0x45cb19(0x5cf,0x4d2)+_0x45cb19(0x615,0x6f5)+_0x2b9155(0x3b4,0x413)+_0x45cb19(0x596,0x679);const _0x4ea8fc={};_0x4ea8fc['id']=_0x45cb19(0x4af,0x4fc)+_0x45cb19(0x60a,0x4fa)+_0x45cb19(0x567,0x636),_0x4ea8fc[_0x45cb19(0x5d9,0x6e9)]=_0x2b9155(0x1fe,0x140)+'38',_0x4ea8fc[_0x45cb19(0x498,0x570)+_0x2b9155(0x39b,0x35f)]=_0x2b9155(0x416,0x504),_0x4ea8fc[_0x2b9155(0x237,0x29c)]='Insec'+_0x2b9155(0x1f1,0x27b)+_0x2b9155(0x3df,0x3f1)+'\x20—\x20ja'+_0x2b9155(0x406,0x3ef)+_0x45cb19(0x60f,0x63c)+_0x45cb19(0x5fb,0x4e0)+_0x45cb19(0x42e,0x336)+_0x2b9155(0x34f,0x339)+'ty',_0x4ea8fc[_0x45cb19(0x604,0x6b5)+_0x45cb19(0x544,0x529)+'n']=_0x45cb19(0x4ee,0x4a9)+_0x2b9155(0x40c,0x3b4)+_0x45cb19(0x4de,0x43f)+_0x2b9155(0x263,0x248)+'predi'+_0x45cb19(0x616,0x70a)+_0x45cb19(0x59f,0x4f6)+_0x2b9155(0x2e4,0x3a4)+_0x45cb19(0x5be,0x5b9)+_0x2b9155(0x22c,0x300)+'ed\x20fo'+_0x2b9155(0x2f1,0x2fb)+_0x2b9155(0x252,0x272)+_0x45cb19(0x492,0x3b4)+'\x20or\x20s'+_0x2b9155(0x34f,0x333)+_0x2b9155(0x327,0x43b)+_0x2b9155(0x253,0x15f)+'ns.',_0x4ea8fc[_0x2b9155(0x22a,0x23d)+_0x2b9155(0x2aa,0x1f5)]=['java'],_0x4ea8fc[_0x2b9155(0x2c2,0x274)+'rn']=/new\s+Random\s*\(\s*\)/g,_0x4ea8fc[_0x2b9155(0x34d,0x390)]=_0x45cb19(0x64b,0x643)+'ava.s'+'ecuri'+_0x45cb19(0x50b,0x5b3)+_0x45cb19(0x4c0,0x5cc)+_0x2b9155(0x3df,0x2fa)+_0x45cb19(0x4f6,0x59a)+'ureRa'+_0x2b9155(0x3dd,0x2cb)+_0x2b9155(0x40e,0x39b)+_0x45cb19(0x45d,0x4d9)+_0x45cb19(0x600,0x4fe)+_0x45cb19(0x4c0,0x4db)+'andom'+_0x45cb19(0x573,0x64e);function _0x17ac(_0x1c51e2,_0x3603fd){_0x1c51e2=_0x1c51e2-(-0x925*-0x1+0x1*0x1d5c+-0x24f7*0x1);const _0x4b12cc=_0x5173();let _0x144f54=_0x4b12cc[_0x1c51e2];if(_0x17ac['DhDwQi']===undefined){var _0x3372d2=function(_0x973171){const _0x56c06d='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0x387032='',_0x240d10='';for(let _0x3ce951=-0x1*-0x1489+-0xc*0xc9+-0xb1d,_0x257982,_0x9e924c,_0x2ee4f6=0x1*-0x279+0x1d67+-0x2*0xd77;_0x9e924c=_0x973171['charAt'](_0x2ee4f6++);~_0x9e924c&&(_0x257982=_0x3ce951%(0x1d*0xe0+-0x470+-0x14ec)?_0x257982*(-0x5cc*-0x1+-0xa54*-0x1+-0x20*0x7f)+_0x9e924c:_0x9e924c,_0x3ce951++%(-0xb7d+0x10*-0x1fe+0x5*0x8ad))?_0x387032+=String['fromCharCode'](-0x1*-0xd82+0x112d+-0x13*0x190&_0x257982>>(-(-0x1f3f+0x347+0x1bfa)*_0x3ce951&-0x251*-0xd+-0xd*0x259+0x6e)):0x61*0x13+-0x1a38+0x1305){_0x9e924c=_0x56c06d['indexOf'](_0x9e924c);}for(let _0x229da8=0x17d8+0x202*-0x1+-0x15d6*0x1,_0x1cc181=_0x387032['length'];_0x229da8<_0x1cc181;_0x229da8++){_0x240d10+='%'+('00'+_0x387032['charCodeAt'](_0x229da8)['toString'](-0x186e+-0x25c4+0x3e42))['slice'](-(-0x165c+-0xe38+0x2496));}return decodeURIComponent(_0x240d10);};_0x17ac['BlFufg']=_0x3372d2,_0x17ac['dUaeYz']={},_0x17ac['DhDwQi']=!![];}const _0x5a5b3c=_0x4b12cc[-0x10e8+0x1402+-0x2*0x18d],_0x494d77=_0x1c51e2+_0x5a5b3c,_0x57350b=_0x17ac['dUaeYz'][_0x494d77];return!_0x57350b?(_0x144f54=_0x17ac['BlFufg'](_0x144f54),_0x17ac['dUaeYz'][_0x494d77]=_0x144f54):_0x144f54=_0x57350b,_0x144f54;}const _0x2a456b={};_0x2a456b['id']=_0x45cb19(0x4af,0x521)+_0x45cb19(0x51a,0x542)+_0x2b9155(0x349,0x34b),_0x2a456b[_0x2b9155(0x3bb,0x3ff)]=_0x2b9155(0x294,0x291)+'0',_0x2a456b[_0x45cb19(0x498,0x487)+_0x45cb19(0x5b9,0x5cd)]=_0x45cb19(0x54f,0x59e)+_0x2b9155(0x223,0x277),_0x2a456b[_0x2b9155(0x237,0x1d1)]=_0x2b9155(0x316,0x209)+_0x45cb19(0x5e3,0x4fe)+_0x45cb19(0x46a,0x503)+_0x45cb19(0x53c,0x42f)+_0x45cb19(0x571,0x631)+_0x2b9155(0x2c5,0x37a)+_0x45cb19(0x5ff,0x55e)+'in\x20LD'+_0x45cb19(0x419,0x2f4)+_0x45cb19(0x46f,0x537),_0x2a456b[_0x45cb19(0x604,0x53e)+_0x45cb19(0x544,0x605)+'n']=_0x45cb19(0x5b5,0x5d2)+'input'+_0x2b9155(0x390,0x3be)+'DAP\x20q'+_0x45cb19(0x5e6,0x5d2)+_0x2b9155(0x367,0x46d)+_0x2b9155(0x226,0x250)+_0x45cb19(0x485,0x47d)+_0x45cb19(0x522,0x612)+_0x45cb19(0x5f7,0x66d)+'lows\x20'+_0x2b9155(0x316,0x27e)+_0x2b9155(0x363,0x441)+_0x2b9155(0x3b3,0x3c6),_0x2a456b['langu'+_0x2b9155(0x2aa,0x1d8)]=[_0x2b9155(0x2c9,0x3ed)],_0x2a456b['patte'+'rn']=/(?:search|lookup)\s*\(\s*(?:["'][^"']*["']\s*\+|\+\s*["'].*(?:cn=|uid=|ou=|dc=))/gi,_0x2a456b['fix']=_0x2b9155(0x20f,0x1ac)+_0x2b9155(0x421,0x3a9)+_0x45cb19(0x55b,0x4a7)+'LDAP\x20'+_0x2b9155(0x3d5,0x2f0)+'cters'+_0x45cb19(0x49e,0x3b0)+'se\x20pa'+_0x45cb19(0x629,0x69d)+'erize'+'d\x20LDA'+_0x45cb19(0x4ae,0x4dd)+_0x45cb19(0x469,0x3b6);const _0x5abc54={};_0x5abc54['id']='JAVA-'+_0x45cb19(0x449,0x42c)+_0x45cb19(0x5f4,0x542),_0x5abc54[_0x45cb19(0x5d9,0x5a7)]=_0x2b9155(0x23b,0x1cb)+'62',_0x5abc54[_0x2b9155(0x27a,0x2cb)+'ity']=_0x45cb19(0x634,0x6bd),_0x5abc54[_0x45cb19(0x455,0x4f9)]=_0x45cb19(0x628,0x55f)+_0x45cb19(0x4d8,0x577)+'urity'+_0x45cb19(0x431,0x31f)+'RF\x20Di'+_0x2b9155(0x333,0x3c6)+'d',_0x5abc54[_0x45cb19(0x604,0x508)+_0x45cb19(0x544,0x4b0)+'n']=_0x2b9155(0x3e7,0x3ee)+'ling\x20'+'CSRF\x20'+_0x2b9155(0x2a1,0x31c)+_0x45cb19(0x635,0x5d6)+_0x2b9155(0x3db,0x35a)+_0x2b9155(0x418,0x3e2)+'he\x20ap'+_0x2b9155(0x2b3,0x25b)+_0x45cb19(0x46a,0x3e4)+'to\x20Cr'+_0x2b9155(0x2ab,0x2f9)+_0x2b9155(0x2c7,0x1d7)+_0x2b9155(0x356,0x34c)+'t\x20For'+'gery\x20'+_0x45cb19(0x65a,0x760)+'ks.',_0x5abc54[_0x2b9155(0x22a,0x24a)+_0x2b9155(0x2aa,0x39b)]=['java'],_0x5abc54[_0x2b9155(0x2c2,0x240)+'rn']=/\.csrf\s*\(\s*\)\s*\.disable\s*\(\s*\)/g,_0x5abc54['fix']=_0x45cb19(0x622,0x576)+_0x2b9155(0x282,0x22e)+_0x2b9155(0x2a1,0x308)+_0x45cb19(0x635,0x67c)+_0x45cb19(0x4da,0x53d)+'led.\x20'+'If\x20bu'+'ildin'+'g\x20a\x20s'+_0x45cb19(0x657,0x73f)+_0x45cb19(0x478,0x4bd)+_0x2b9155(0x230,0x233)+_0x2b9155(0x1fc,0x322)+'ken-b'+'ased\x20'+_0x45cb19(0x5ad,0x5f9)+'inste'+_0x45cb19(0x4fb,0x44c);function _0x5173(){const _0x504edd=['Dg9YEs4','DhLWzs0','vxnLihq','Dcb3Axq','zxn0lMC','CIb3Axq','ucbXDwu','sKfwqs0','Dfn0CMu','y3vYAxq','q1DfltK','u3rYAxa','ywnJzxa','zMf1Bhq','yw5KigK','zsbszxe','BwvZige','tcbXDwu','mtKZnvrwyMPHDq','B21TB24','wfHflta','yMLUyxi','rsbPzca','ChjVDgu','y3vYzvi','tuq1ig8','Bsb2zxi','lNn0yxi','sMf2ysa','yxrOkcK','CIaOsKu','rMLSDgu','ywDLCW','B3nZlvm','yNjVA2u','ztOGq2K','z2veAwC','yw5JzsG','BMfTzsa','yxjZAw4','ieXHBMC','CgXPy2e','qMXVy2S','q2fUB24','BIbPBIa','DcbWCM8','ihbYB2i','zw5KCg8','zYbtzwm','BwqIlca','igvUywi','igfYyMK','zgrPBMC','oYbWCY4','uMfUzg8','CM1HDca','Cgf0Dgu','qteGyxi','BwuGDMu','EMvKigK','igv2ywW','AxrLifi','revtig8','AMf2yq','AwvYlIa','kcjvC2u','igLUChu','kcjODhq','BcbJzxi','D2L0Ag8','AMf2ys4','DhLSzsa','vxnLieO','CxvLCNK','B3jTifm','DxnLCNm','B250zxG','zxjUyw0','oIbtzwm','DwyGAw4','DxrOzw4','ucbYyw4','yxrLBwu','ywqU','4OcuifvZzq','zIbtDhi','BgWGAg8','igzVCIa','BwuGvMu','ltaWmq','ig11C3q','igvUzha','lMLUzM8','CMLUzYG','zgLZywi','q29UBMu','zgvWCMu','B2DYyxa','revtigG','DhKUu2u','igHVC3q','revtrvi','u1fmss0','CIb0B2S','zwqSigK','DwfNzsa','z2vZlG','zwn0sw4','yxmGB24','CIbPBNa','uMvXDwK','igfJy2u','DxjLieq','y2f0zsa','terbuc0','ywWGy2K','z2DPBMC','BwuUzxG','BgvKifq','BIbmyw4','CYbNywq','yw1LDgu','AxPHDgK','C2HLBgW','D3mGAw4','De1HBMe','zwmOksa','tcbMCM8','CYbHBMq','igeGC2e','FsiSihm','seeTmJu','oIaUyw4','CgHLCI4','B2rL','AwnHDgK','BML0AxO','CM9Jzxm','tsbTB2q','AxqGBg8','terbuca','msWGDxm','q01ess0','zw4GChi','igfSBca','igfUzca','Bg9Nigu','lcb0CNu','4OcuifvUCW','CNvZDgu','zsbWyxq','oIbMywm','igzPBgu','ifvUC2e','rY0Wmdi','D3mGt1m','Axb0Aw8','DhKGzgu','ywWGrw4','Aw5Nihu','zxHLy3u','EhrLCM4','ienbCYW','Aw5WDxq','Eg1Sl2y','yxrPB24','yMfZzsa','y3jPDgK','q29Uy2e','C2fIBgu','DgLMAwm','yxbOAwm','Dg8GAwq','zwqGBg8','ihf1zxi','CIbSB2C','B3n0BMe','ihjLywq','q1jzufq','y2LHBca','DgvKigq','zxH0lca','Aw46ihS','Aw9Uigm','u3rHDgu','q1Dflte','ocKU','AcbNzxq','Aw9UlG','iIKUAge','AMvJDgK','mdaX','BMf0Aw8','iLnfteu','CNrPzMK','zML4','BMfTAwm','zwn1CMK','q1Dflti','zw5HyMW','AhKG4Ocuia','yw5PDgK','zw50ie8','kcK7','zxf1zxm','tY0Wmde','y3rLzca','we1miha','B2nHDgK','zwmGD2K','q29TBwe','DwvZDca','ltaWmG','C2vUC2K','DgGGr0m','Aw5NlMy','DNvSBMu','Aw5Qzwm','DgLJyxq','ihrOzw0','tY0Wmdm','CYb3Axq','EsbPDca','DgL0Esa','u1fmieK','nJzZCevPuK8','Aw50BYa','A3mU','AwXLig8','CMvHBq','DMLHBgW','zsKPlIa','uNvUDgK','C3q6ig4','CNKGy28','igXVywq','yxrHigm','tuWGAw4','Aw5NiIK','id0Gy28','Chv0igK','zgf0zsa','iokaLcbvBG','CMvWyxi','CM1PDee','uhjLCge','igLUigW','zs4Gsxq','CML6zwq','zwnVzgu','DgHHDca','zwqGCxu','ihzHBgK','DguGyxi','uKWVshq','CYb0CMK','icHdvKu','BsbuCNu','rM9Yigm','Acb1BNq','ihbHDgG','yxv0Aca','igLUieW','zxCGuhi','mdaY','ndKZmtC2mhriDwz6CW','BNn0zwe','iI9Hzg0','ig9YieO','vxnLCIa','zgvYihC','ienstey','zxbHCMu','Axr5','DgGGzhK','CgfZC2u','rg8GBM8','C2vZige','ig5VDca','igLUigy','EhbYzxm','rM9Yz2u','ChvYCg8','lM9YzY8','ywrPBMC','DxqUifu','lIbvC2u','te9hlta','tfmGC2u','AwXLCY4','BMnHDgu','AgvYCYG','we1mrgu','Aw9UCYa','D2L0Aca','iKffuY8','ywWGyMW','DgLVBI4','B1bHzgq','q3jLyxq','vxnLifa','mJmWmJrVCerpBem','AcbYzxm','zsbJCNK','CMD1Bwu','y3DL','Chv0u3q','BMD1Aw4','CgvYBhK','ovHovMzwrq','runcig0','C2vYigK','4OcuifHnta','B2LUDhm','ywX1yxq','sw5Qzwm','Aw5Nifu','C3rYB24','DwvYAwu','DeLUChu','sK5essa','uKXZige','DgGGzgK','kcjbre0','4Ocuie9IAG','CdOVl2e','rhLUyw0','BIbMB3i','uuWGCxu','Aw5Nige','DcGP','y2HHCMe','rY0Wmde','tfmGq2u','EsbJB2q','B24GywW','B2nLC3m','igv4Cg8','BMnYExa','BMrVBsa','zwf0Dxi','yw5KB20','BhKGnty','BNb1Dca','zxCGu2u','C2v0rMu','DhrPBMC','DcbHBIa','zgvZy3i','rgLZywi','C3rZlIa','BgrLCIa','B2rLigu','yMPLy3q','uKforc0','Aw9UiokaLa','tg9NieK','qNvPBgq','C3mGAw4','AwWUuMe','vMvYAwy','ucaYota','BMCGy28','ugf0Aca','BgLZDc4','r0nnl04','y3rHyMW','sw5Zzwm','ChjPBMC','AxrPDMu','u1fmlG','icHtCeu','AMvJDca','vxnLiee','CYbLBMe','ksb0BYa','zxjPzxm','AguGzgu','s2vLCca','ignVzgu','DMeUDxq','yw0UCMu','BcbPBNy','AwXKifm','u3bYAw4','CMfTzxq','DxrPBc4','CYbJyw4','CMfUzg8','nIbVCIa','ChrVz3i','ywDLCIa','tcKGzxG','yNLWyxm','zwfKig8','BMCUzM8','AgLNAa','y3rPB24','C2vZihq','DhbvuKW','ihnLBNm','A2v5CYa','q3vZDg8','yw1LCY4','C2vZlG','CYbTDxm','C2v0u3q','zsbZCgu','B24Uifu','EMuGDgG','igfZifm','ihnJAgu','BNrYDxm','zcbPBNa','ig5Lzwq','y2HLiem','CYbJzxi','C3rnyw4','AwnHBgK','vxnLigO','rvmGD2K','igLUDg8','v2vHAYa','lwjPDca','q1Dfltu','CMvKu3q','BgvTlG','ifrYDxm','ywXPEMe','DgL2zsa','mZa0mtK2DwrqEwTs','Dgf0zwW','zw50Awm','Bsb1C2u','yxr0ywm','AxrPzxm','DxjLifi','C2fMzsa','AxrOige','CMfIAwW','ywrpyMO','t2jQzwm','BwvKAxu','zwqGDxm','iokaLcbWzq','C3rLywq','qvaGCxu','C2uGDg8','ienPCgG','q1Dfltm','q1DfltC','C3ncDwK','ifDirvi','ywXSEsa','AgfPBNm','ntiZmJm3otLWv0rPCMK','uefusc0','zMfRzsa','BMPLy3q','CMLUz3m','DMLJzxm','CMvJDca','mti4odqYyvvMvwDx','ihnOzwW','CYb0BYa','we1mieu','rxnJyxa','zM9Yihm','Aw4VkIO','Aw4Gu1e','iokaLcbduW','BMqGsw4','zwn0kcK','yw4GzxG','rvnLzgu','z2fPBNm','DgL0Awu','q3j5Chq','DgvUyxq','zxiGAw4','CMvZDhi','q1Dflty','vxnPBMC','DgvYBMe','Acb0Agu','zxmGAw4','y2fS','BgvZifq','vxnLiha','Ag91Dca','ugvYBwK','Bw9KztO','DxnLCIa','BgfUz3u','u1bssu4','yMuGDxm','iMfYzZe','zwqGC3q','CIbervm','ueKSihu','vMfSAwq','B2CGC3q','mtu1mtq5mKv0zKnXyG','ruWTmda','DxjPDhK','BwvUDca','DgL0Bgu','BgWGB24','z2v0igm','lti1nIi','q1DfltG','De1HDgm','u1jglG','CMuGyxu','Bsa9ig4','igfSBg8','yxrLifu','rLjptsa','BMqGzhK','EsbHBMq','CNKG4Ocuia','zwrL','DeLUC3q','y29Kzxi','DhjHCNK','zxnZqNu','CMLLCY4','DgLVBIa','yxrLCYa','BgvKieG','vxnLifm','CYbVCIa','zxj5','zw5Zlca','y2LZAw8','DgfUy2u','C2LVBNm','CgvYyxq','rxHWCMu','zsGIquu','AwzPzxi','zxnZiee','Acb3Axq','ignHBIa','yxjHBwu','yxr1CMu','BIbSB2C','veXtlta','su4Ikq','zgvJBci','BsbPCYa','CMLMAwm','AwvZoIa','AwmGvvi','C2fUAxq','C3rUyw0','DgvYAxO','BgLZDca','zxnLCMK','ywTHyMW','tuq1ige','ksbPCYa','yxjZzxi','ignVBw0','zwrtDge','zxrjBNm','q1qGkIa','A2v5CYW','igfYz3u','y29Uy2e','zxjjzcK','CIbtsee','BM4UChi','C2v2zxi','nJCZohnKBhf2Dq','Aw50CYa','Cevm','B24U','igeGs2u','ig9Yihu','vxnLieC','q1nsrIa','CI1tAwq','mtCWmwDVtMjOua','DhjPy3q','BNqGChm','EMuODxm','ihnLy3u','psa/iIK'];_0x5173=function(){return _0x504edd;};return _0x5173();}const _0x40b136={};_0x40b136['id']='JAVA-'+'SPRIN'+_0x2b9155(0x324,0x41b),_0x40b136['cwe']=_0x45cb19(0x459,0x409)+'62',_0x40b136[_0x2b9155(0x27a,0x2d9)+_0x45cb19(0x5b9,0x49e)]=_0x2b9155(0x416,0x3dc),_0x40b136['title']='Sprin'+_0x2b9155(0x2ba,0x2c2)+_0x45cb19(0x453,0x3e5)+_0x45cb19(0x417,0x465)+_0x2b9155(0x37e,0x2e9)+_0x45cb19(0x456,0x378)+'\x20sens'+_0x2b9155(0x3fb,0x34c)+_0x2b9155(0x2e5,0x210)+_0x2b9155(0x3c3,0x38c),_0x40b136[_0x2b9155(0x3e6,0x3ca)+'iptio'+'n']=_0x45cb19(0x445,0x3d4)+_0x45cb19(0x602,0x57f)+_0x45cb19(0x538,0x616)+'acces'+_0x45cb19(0x42b,0x4db)+_0x2b9155(0x35f,0x43b)+_0x45cb19(0x655,0x765)+_0x2b9155(0x2b9,0x1ad)+_0x45cb19(0x49a,0x400)+_0x2b9155(0x413,0x311)+_0x45cb19(0x5bd,0x5ab)+_0x2b9155(0x2da,0x2e0)+_0x45cb19(0x582,0x4c9)+_0x45cb19(0x564,0x688),_0x40b136[_0x45cb19(0x448,0x324)+_0x2b9155(0x2aa,0x35d)]=[_0x45cb19(0x4e7,0x604)],_0x40b136[_0x45cb19(0x4e0,0x4fe)+'rn']=/\.antMatchers\s*\(\s*["']\/(?:admin|api|internal|manage|actuator)[^"']*["']\s*\)\.permitAll/g,_0x40b136[_0x45cb19(0x56b,0x5e8)]=_0x2b9155(0x2f8,0x1e8)+_0x45cb19(0x45c,0x408)+'thent'+_0x45cb19(0x52f,0x63f)+'on\x20on'+_0x45cb19(0x638,0x6ae)+_0x45cb19(0x619,0x58b)+_0x45cb19(0x503,0x3e6)+_0x45cb19(0x5e1,0x548)+_0x2b9155(0x30e,0x38c)+_0x45cb19(0x45a,0x4f5)+_0x45cb19(0x5cb,0x663)+_0x45cb19(0x5b3,0x53a)+_0x45cb19(0x42f,0x4ac)+_0x2b9155(0x347,0x42d)+'sRole'+_0x45cb19(0x5eb,0x4ed)+_0x2b9155(0x261,0x206);const _0x70884e={};_0x70884e['id']=_0x45cb19(0x4af,0x58f)+_0x2b9155(0x234,0x19d)+'1',_0x70884e[_0x45cb19(0x5d9,0x625)]=_0x45cb19(0x4b2,0x44b)+'17',_0x70884e['sever'+_0x45cb19(0x5b9,0x693)]=_0x45cb19(0x54f,0x491)+'cal',_0x70884e['title']=_0x45cb19(0x475,0x45c)+'ssion'+_0x45cb19(0x4d0,0x47f)+_0x45cb19(0x511,0x5e0)+'Injec'+'tion\x20'+_0x45cb19(0x4fc,0x55b)+_0x2b9155(0x2f7,0x3b1)+'ut\x20in'+'\x20EL/S'+_0x45cb19(0x49b,0x587),_0x70884e[_0x2b9155(0x3e6,0x4ac)+_0x45cb19(0x544,0x592)+'n']=_0x2b9155(0x397,0x44c)+_0x45cb19(0x54b,0x656)+'\x20in\x20S'+_0x2b9155(0x3fa,0x2d4)+'\x20Expr'+'essio'+_0x45cb19(0x51f,0x5ac)+'guage'+_0x45cb19(0x61b,0x6eb)+_0x45cb19(0x630,0x57e)+'press'+'ions\x20'+'can\x20e'+'xecut'+'e\x20arb'+'itrar'+_0x45cb19(0x5f6,0x68c)+'e.',_0x70884e[_0x45cb19(0x448,0x35d)+_0x45cb19(0x4c8,0x4f7)]=['java'],_0x70884e[_0x45cb19(0x4e0,0x4b8)+'rn']=/(?:ExpressionParser|SpelExpressionParser)\s*\(\s*\)\.parseExpression\s*\(\s*(?:request|param|input|user)/g,_0x70884e[_0x45cb19(0x56b,0x4af)]='Never'+_0x2b9155(0x2c6,0x321)+'uate\x20'+_0x2b9155(0x229,0x270)+_0x2b9155(0x32d,0x2f7)+_0x2b9155(0x424,0x42f)+'pEL\x20e'+_0x45cb19(0x5c0,0x660)+_0x2b9155(0x255,0x33e)+_0x2b9155(0x3a8,0x35a)+_0x45cb19(0x529,0x47c)+'fe\x20ev'+_0x45cb19(0x5e2,0x58c)+_0x45cb19(0x55f,0x58a)+_0x45cb19(0x4f4,0x47f)+_0x45cb19(0x4ab,0x51e)+_0x2b9155(0x3b8,0x411)+_0x2b9155(0x285,0x329)+'ed\x20me'+'thods'+'.';const _0x18e4ba={};_0x18e4ba['id']=_0x2b9155(0x291,0x2e1)+'TLS-0'+'01',_0x18e4ba[_0x2b9155(0x3bb,0x324)]='CWE-2'+'95',_0x18e4ba[_0x2b9155(0x27a,0x38a)+'ity']=_0x45cb19(0x54f,0x54a)+'cal',_0x18e4ba['title']=_0x45cb19(0x605,0x723)+_0x2b9155(0x300,0x33d)+_0x45cb19(0x5f5,0x5b8)+_0x2b9155(0x34c,0x2b8)+_0x2b9155(0x2fb,0x3eb)+_0x2b9155(0x3f2,0x4f4)+'icati'+'on',_0x18e4ba[_0x45cb19(0x604,0x622)+'iptio'+'n']='Custo'+_0x45cb19(0x5a9,0x4ac)+_0x2b9155(0x42b,0x540)+_0x2b9155(0x411,0x458)+_0x45cb19(0x5a2,0x47d)+_0x45cb19(0x4b4,0x3a1)+'ts\x20al'+_0x2b9155(0x2ce,0x22e)+_0x2b9155(0x334,0x333)+_0x2b9155(0x24d,0x22f)+_0x45cb19(0x506,0x4ef)+_0x45cb19(0x442,0x55c)+_0x2b9155(0x3aa,0x2fd)+_0x45cb19(0x4b1,0x3f3)+'y.',_0x18e4ba[_0x2b9155(0x22a,0x2b8)+_0x2b9155(0x2aa,0x20c)]=[_0x2b9155(0x2c9,0x260)],_0x18e4ba[_0x45cb19(0x4e0,0x43f)+'rn']=/X509TrustManager[^}]*checkServerTrusted[^}]*\{\s*\}/g,_0x18e4ba['fix']=_0x2b9155(0x28c,0x249)+_0x45cb19(0x621,0x642)+_0x2b9155(0x297,0x2e6)+_0x45cb19(0x653,0x581)+_0x45cb19(0x525,0x5d2)+'ger.\x20'+_0x2b9155(0x38c,0x314)+'ustom'+_0x45cb19(0x54a,0x56c)+_0x2b9155(0x375,0x381)+_0x2b9155(0x365,0x28d)+_0x2b9155(0x42f,0x396)+_0x2b9155(0x27f,0x1c6)+'yStor'+'e.';const _0x36c3e8={};_0x36c3e8['id']=_0x45cb19(0x4af,0x459)+_0x2b9155(0x260,0x22c)+'02',_0x36c3e8['cwe']=_0x45cb19(0x56e,0x5af)+'95',_0x36c3e8[_0x2b9155(0x27a,0x17f)+_0x2b9155(0x39b,0x41c)]=_0x45cb19(0x54f,0x443)+_0x45cb19(0x441,0x36c),_0x36c3e8[_0x45cb19(0x455,0x4b4)]='Disab'+_0x45cb19(0x46c,0x3be)+_0x45cb19(0x558,0x4b5)+_0x2b9155(0x2e2,0x280)+_0x2b9155(0x264,0x2d3)+'ation',_0x36c3e8[_0x2b9155(0x3e6,0x3e2)+_0x2b9155(0x326,0x271)+'n']='Allow'+_0x2b9155(0x3d3,0x39d)+_0x45cb19(0x4fe,0x563)+_0x45cb19(0x486,0x509)+'es\x20by'+_0x2b9155(0x39d,0x286)+_0x45cb19(0x648,0x548)+_0x2b9155(0x334,0x400)+'ate\x20h'+'ostna'+_0x2b9155(0x2c4,0x1f8)+_0x2b9155(0x264,0x1ad)+_0x2b9155(0x32f,0x39c)+'.',_0x36c3e8[_0x45cb19(0x448,0x4f1)+_0x2b9155(0x2aa,0x2d8)]=[_0x2b9155(0x2c9,0x328)],_0x36c3e8[_0x45cb19(0x4e0,0x41d)+'rn']=/(?:ALLOW_ALL_HOSTNAME_VERIFIER|NoopHostnameVerifier|setHostnameVerifier\s*\(\s*(?:SSLSocketFactory\.ALLOW_ALL|new\s+(?:AllowAll|Noop)))/g,_0x36c3e8[_0x2b9155(0x34d,0x2b8)]='Use\x20t'+_0x45cb19(0x621,0x640)+_0x2b9155(0x297,0x262)+_0x2b9155(0x2ee,0x37f)+_0x2b9155(0x2b0,0x25a)+'verif'+_0x45cb19(0x4e8,0x469)+_0x2b9155(0x41c,0x38e)+_0x45cb19(0x4c2,0x3bf)+_0x2b9155(0x259,0x1d1)+_0x2b9155(0x41f,0x3b8)+_0x2b9155(0x2b7,0x37a)+_0x45cb19(0x5dc,0x56d)+_0x2b9155(0x386,0x3a9)+_0x2b9155(0x37b,0x387)+'hostn'+_0x45cb19(0x63b,0x676);const _0x3c4b35={};_0x3c4b35['id']=_0x45cb19(0x4af,0x3e6)+_0x2b9155(0x3a9,0x417)+'01',_0x3c4b35[_0x2b9155(0x3bb,0x3f3)]=_0x45cb19(0x561,0x5a5)+'17',_0x3c4b35['sever'+'ity']=_0x45cb19(0x415,0x427)+'m',_0x3c4b35[_0x45cb19(0x455,0x402)]=_0x2b9155(0x3ee,0x3ee)+_0x45cb19(0x425,0x347)+'ion\x20—'+_0x45cb19(0x541,0x61f)+_0x2b9155(0x312,0x274)+_0x2b9155(0x1f8,0x231)+_0x2b9155(0x21c,0x300)+_0x2b9155(0x37a,0x306)+_0x45cb19(0x47d,0x45e),_0x3c4b35[_0x2b9155(0x3e6,0x33b)+_0x2b9155(0x326,0x322)+'n']=_0x2b9155(0x397,0x339)+_0x2b9155(0x32d,0x380)+_0x45cb19(0x59e,0x61b)+_0x45cb19(0x450,0x4f8)+_0x2b9155(0x2dc,0x37e)+'nts\x20c'+'an\x20in'+_0x45cb19(0x61c,0x627)+_0x45cb19(0x424,0x395)+_0x2b9155(0x31c,0x29f)+'ntrie'+_0x45cb19(0x46e,0x368)+'explo'+_0x45cb19(0x533,0x4e7)+'g4j-s'+_0x45cb19(0x4ef,0x5db)+_0x45cb19(0x580,0x6a6)+_0x45cb19(0x412,0x3af)+_0x2b9155(0x43d,0x379)+_0x2b9155(0x38a,0x35a)+'-2021'+'-4422'+_0x45cb19(0x562,0x46a),_0x3c4b35[_0x2b9155(0x22a,0x140)+'ages']=[_0x2b9155(0x2c9,0x2ce)],_0x3c4b35[_0x45cb19(0x4e0,0x44f)+'rn']=/(?:logger|log|LOG)\.(?:info|debug|warn|error|trace|fatal)\s*\(\s*(?:["'][^"']*["']\s*\+|\+\s*(?:request|param|input|user))/g,_0x3c4b35[_0x45cb19(0x56b,0x486)]='Use\x20p'+'arame'+_0x45cb19(0x487,0x3b5)+_0x45cb19(0x555,0x641)+_0x45cb19(0x51c,0x4a1)+':\x20log'+_0x45cb19(0x504,0x4b8)+_0x45cb19(0x4e9,0x5f2)+_0x45cb19(0x557,0x4b7)+_0x45cb19(0x55e,0x43f)+_0x45cb19(0x52a,0x5cb)+_0x45cb19(0x571,0x46c)+_0x2b9155(0x287,0x234)+_0x45cb19(0x4f5,0x5ff)+_0x2b9155(0x371,0x440)+_0x45cb19(0x4b3,0x412)+_0x45cb19(0x5b7,0x599)+_0x2b9155(0x31b,0x3a7)+_0x45cb19(0x5e8,0x53a)+'looku'+'p\x20pat'+'terns'+'.';export const javaRules=[_0x5eaf01,_0x264370,_0x466b0f,_0x1d65c3,_0x23b02f,_0x2cac40,_0x5393b6,_0x4528e9,_0x341dfc,_0x2f9c0e,_0x39ae75,_0x27def3,_0x4ea8fc,_0x2a456b,_0x5abc54,_0x40b136,_0x70884e,_0x18e4ba,_0x36c3e8,_0x3c4b35];
1
+ (function(_0x5b8577,_0x26ec28){const _0x1084b4={_0x7e61bc:0x33b,_0x5c7e41:0x287,_0x4265b8:0x158,_0x13d690:0x28e,_0x5b19f9:0x435,_0x2e3370:0x4f5,_0x64c122:0x3dd,_0x3438d7:0x2b3,_0x11a266:0x202,_0x385e1f:0x6b,_0x1f8055:0x82,_0x517c9e:0x52e,_0x417df5:0x57a,_0x1f0bda:0x550},_0x579672={_0x35a86d:0x114};function _0x537e83(_0x111d93,_0x3dc960){return _0x2d8b(_0x3dc960- -_0x579672._0x35a86d,_0x111d93);}const _0x37be5c=_0x5b8577();function _0x68d1dd(_0x41917d,_0x5c1147){return _0x2d8b(_0x41917d-0x20e,_0x5c1147);}while(!![]){try{const _0x13db8a=-parseInt(_0x537e83(0x350,0x297))/(0x23bf+-0x25e8+0x22a)+parseInt(_0x537e83(_0x1084b4._0x7e61bc,_0x1084b4._0x5c7e41))/(-0x1ea6+-0x8c8+-0x2770*-0x1)*(-parseInt(_0x537e83(_0x1084b4._0x4265b8,_0x1084b4._0x13d690))/(0x9*0x28c+-0x1ec6+0xb*0xb7))+-parseInt(_0x537e83(0x1fc,0x232))/(-0x602*0x2+-0x680+0x2*0x944)*(parseInt(_0x68d1dd(_0x1084b4._0x5b19f9,_0x1084b4._0x2e3370))/(0x1136*0x2+-0x23d7+-0x4*-0x5c))+parseInt(_0x68d1dd(_0x1084b4._0x64c122,_0x1084b4._0x3438d7))/(-0xfee+-0x5*0x3dd+0x2345*0x1)*(parseInt(_0x537e83(_0x1084b4._0x11a266,0xf9))/(-0x4ef+-0x6*-0x1bb+-0x56c))+parseInt(_0x537e83(-_0x1084b4._0x385e1f,_0x1084b4._0x1f8055))/(0xb6a+0x13*-0x17f+0x110b)+parseInt(_0x537e83(-0x5e,0x42))/(-0x4*0x881+0x1018+0x11f5)*(-parseInt(_0x68d1dd(_0x1084b4._0x517c9e,0x51d))/(0x2175+-0x1e39+-0x2*0x199))+-parseInt(_0x68d1dd(0x555,0x662))/(-0x1fed+-0xe64+-0x17*-0x204)*(-parseInt(_0x68d1dd(_0x1084b4._0x417df5,_0x1084b4._0x1f0bda))/(0x181f+0x1b87+-0x339a));if(_0x13db8a===_0x26ec28)break;else _0x37be5c['push'](_0x37be5c['shift']());}catch(_0x11ac75){_0x37be5c['push'](_0x37be5c['shift']());}}}(_0x4f33,0x2*-0x835d+-0x5efeb*0x1+0x12ae6f));const _0x219586={};_0x219586['id']=_0x23c872(-0x9b,-0x1b1)+'SQLI-'+_0x114655(0xaf,-0x35),_0x219586[_0x114655(-0x174,-0x68)]='CWE-8'+'9',_0x219586[_0x114655(-0x11a,-0x26)+_0x114655(-0x163,-0x151)]='criti'+_0x23c872(-0x235,-0x267),_0x219586[_0x114655(-0xb8,0x49)]='SQL\x20I'+_0x114655(0x4e,0xd4)+_0x114655(0x59,0x14d)+'\x20Stri'+'ng\x20co'+_0x23c872(-0x89,-0x121)+_0x23c872(-0x121,-0x16d)+'n\x20in\x20'+_0x114655(-0x65,0x44),_0x219586[_0x114655(-0x111,-0x207)+'iptio'+'n']=_0x23c872(-0xc2,-0xc6)+_0x23c872(-0x32c,-0x248)+_0x114655(0xa6,0x25)+_0x114655(0x45,0xda)+_0x114655(0xa1,0x162)+_0x23c872(-0x304,-0x24b)+_0x114655(-0x24,-0x53)+_0x23c872(-0x30,-0xe5)+_0x114655(0x9f,-0x64)+_0x23c872(-0xb4,-0x139)+_0x114655(0x42,-0xe8)+_0x23c872(-0x198,-0x1e6)+'attac'+_0x23c872(-0x195,-0x169),_0x219586[_0x23c872(-0x131,-0xbe)+'ages']=[_0x23c872(-0x2a,-0x142)],_0x219586[_0x23c872(-0xea,-0xf4)+'rn']=/(?:createStatement|prepareStatement|createQuery|createNativeQuery|executeQuery|executeUpdate)\s*\(\s*(?:["'][^"']*["']\s*\+|\+\s*["'].*(?:SELECT|INSERT|UPDATE|DELETE|WHERE|FROM))/gi,_0x219586['fix']='Use\x20P'+_0x114655(0xda,0x46)+_0x114655(-0x126,-0x20)+'temen'+_0x114655(-0x88,-0x2f)+'h\x20par'+_0x23c872(-0x246,-0x25e)+'rized'+_0x23c872(-0xd9,-0x57)+_0x114655(0x1c,0xde)+'Prepa'+_0x23c872(-0x209,-0x126)+_0x23c872(-0x22e,-0x190)+_0x114655(0x57,-0x4d)+_0x23c872(-0x236,-0x1bf)+_0x114655(-0x9e,0x12)+'epare'+_0x114655(-0x95,-0x1cd)+_0x23c872(0x2b,-0x106)+_0x23c872(-0x1a0,-0x263)+_0x114655(-0x1d,0xd4)+_0x23c872(-0x2ac,-0x252)+_0x114655(-0x5b,0x86)+_0x23c872(-0xa2,-0x9c)+'E\x20id\x20'+_0x114655(-0x8f,0x3a)+_0x114655(-0xb7,0x79)+_0x23c872(-0x184,-0x1de)+_0x114655(-0x12a,-0x17e)+_0x114655(-0x13a,-0x34)+_0x114655(-0x14c,-0x5c)+';';const _0x9f66={};function _0x4f33(){const _0x277c3c=['qwXSB3C','CYbJzxi','igfZifm','Aw9UCYa','Dg9YEs4','BcbJzxi','CMjPDhi','zgvWCMu','B2DYyxa','y2fUigu','Awn0ige','AwnHDgK','igfSBca','DhLSzsa','yw4GAw4','u3bYAw4','qMXVy2S','lwjPDca','BwvUDcG','tY0Wmde','Bw9KztO','CNnHBca','DMvYAwy','y2HLiem','CYbJyw4','ugf0Aca','ywrpyMO','iev4Chi','mdaY','BsbPCYa','Dgf0zwW','CMLMAwm','ihDPDgG','zxHWBg8','ihrOzw0','rxHWCMu','Cgf0Dgu','B2nLC3m','CYbNywq','CgvYyxq','DxrPBc4','CMfIAwW','BcbPBNq','ifvUC2e','BgrLCIa','tuq1ige','zwn1Dgu','AwvZoIa','C2fUAxq','DhjPy3q','zxjWCMu','DwvYAwu','CNvZDgu','BgvKieG','DY1KB2m','BgWGB24','D2L0Aca','AxqGBg8','qteGyxi','B24GywW','DxqUifu','Dwf0zsa','z2vYEsa','Acb3Axq','Acb1BNq','t2jQzwm','BMrVBsa','q0iGCgu','q2fUB24','iokaLcbQyq','B2nHDgK','zsKPlIa','igLUigW','vxnLCIa','q1Dfltu','BIbMB3i','Dfn0CMu','BwuGvMu','zZrQlxm','A2v5CYW','igzVCIa','qvaGCxu','q29Uy2e','tY0Wmdm','ihzHBgK','Aw5Qzwm','CMvHBq','EhrLCM4','C2vYigK','ig11C3q','BgfUz3u','BMfTzsa','DgfUy2u','DgLJyxq','B250zxG','Bsb2zxi','q1nsrIa','BMPLy3q','DcGP','DhKUu2u','BgLZDca','mtm2ndyZmfjWEuvbDG','BMqGAg8','DcbJyw4','DgLVBI4','rgLZywi','BNqGChm','BwvZige','Aw9UiokaLa','ig9Uihu','ihbYB2i','twvZC2e','C2fMzsa','DNvSBMu','CgHLCI4','icHdvKu','ihnLBNm','ignVzgu','CgfJAgu','kcjvC2u','ignVBw0','zcbJBge','CI1tAwq','AhKG4Ocuia','ifDirvi','FsiSihm','z2v0sw4','kfHyrsK','Aw50CYa','B3n0BMe','BNrYAwu','DxjLieq','zsbWyxq','B2CGC3q','ztOGq2K','BwuUzxG','CYbVCIa','Axb0Aw8','yxmGB24','ng5kqNrdyq','mtmYmhDWqxLRqq','ChrVz3i','zgvYihC','zgvJBci','C3rLywq','EsbICMu','igvUywi','q29TBwe','Aw9Uigm','AMvJDgK','DwyGAw4','z2v0igm','yNjVA2u','zgrPBMC','runcie0','CM1HDca','CML0Esa','AwzPzxi','vgHLieu','C2fIBgu','igLUieW','ChjVDgu','BMqGsw4','Aw9UlG','iIWGiMe','yw5PDgK','r0nnl04','icHtCeu','seeTmJu','ihjLywq','ltiWmJe','zxnLCMK','zxj5','zwqGBwu','igLUC3q','kcK7','yw4GzxG','mJa1mta0t1PVvvrh','CYbLBMe','ienstey','BNb1Dca','ltaWmq','we1miha','Chv0u3q','ywWGrw4','Aw5Nihu','CIbSB2C','EgvJDxq','Aw5NlMy','AguGzgu','Bg93CYa','tMv2zxi','rY0Wmde','ihf1zxi','mdaX','tuq1ig8','AwXLig8','C3nPB24','y2f0zwq','iokaLcbvBG','ksbPCYa','lMLUzM8','ueKSihu','yNLWyxm','BwuGDMu','q3jLyxq','ywXSEsa','B2nRCYa','AwXKzxi','rY0Wmdi','BMnYExa','vMvYAwy','DgvKifG','zwqGBg8','igLUifm','zxiUz2u','zwmOksa','C2vZige','AwnHBgK','AgLNAa','DhLWzs0','igLUChu','DxnLCIa','igHVC3q','mty0mtC0nLbfsgXgwa','CYb0CMK','ig5VDca','CdOVl2e','Acb0Agu','zwqSigK','zxnZqNu','m1HTywHnqq','q1Dflte','rvnLzgu','zxmGyNK','refqihe','icHbCge','CMvWyxi','uKXZige','uNvUDgK','otK3nJC2Ew1XuLDo','q00GB3i','u09ol1a','vMfSAwq','CgHLCNq','DxqGC2e','AxPHDgK','yML0CMe','yw5KCYa','sK5essa','zwqGCxu','igfYz3u','z2vZlG','C3rZlIa','zMuGzxy','Dg8Gq3i','ltaWmG','BNqGBgK','zwrL','AwXKifm','DxqGAw4','Bg9VA3u','ig9Yihm','ig5Lzwq','u3rYAxa','ywrPBMC','ucaYota','DgvYBNm','qNvPBgq','y29Kzxi','ow5ssKXvqq','ucbYyw4','ievml1m','ywnJzxa','y3DL','Eg1Sl2y','y3jPDgK','D3mGCMu','B24Uifu','DcbWCM8','CM1PDee','B3jTifm','CIb3Axq','rhLUyw0','zwf0Dxi','ywnJzxm','DwfNzsa','zgLZywi','z2vYoIa','zsbszxe','C2uGuhi','Axr5','y2fS','AguGyxa','q1Dfltm','rxnJyxa','iLnfteu','zs4Gm0q','uMfUzg8','wfHflta','tsbTB2q','yw1LDgu','rMLSDgu','l3DYAxq','DgHLBNq','ifn0CMK','zwn1CMK','igfJy2u','ihvZzxi','rg8GBM8','BNrYDxm','yMPLy3q','4OcuifvZzq','rLjptsa','zxjjzcK','Evn0B3i','AwXKAw4','y3vYAxq','uKWVshq','De1HDgm','Aw50BYa','ieXHBMC','u1bssu4','DgvUyxq','CMfUzg8','q3j5Chq','ChvYCg8','oIbtzwm','DgL2zsa','AcbYzxm','zxrjBNm','s2vLCca','msWGDxm','y3rHyMW','nJC1mdC0nefjBNj0sa','y2LZAw8','kcjtsee','we1mieu','C2fSBg8','AgvYCYG','Dxn0B20','DgvKigq','C3mGAw4','ksb0BYa','D2L0Ag8','ig9YieO','q1DfltK','yw5KigK','CMLUzYG','CNKGy28','ihnOzwW','q29UBMu','zwrtDge','CIb0B2S','vxnLiha','yMuGDxm','CMvJDca','zgLYzwm','z2DPBMC','DxjLuMe','zw5HyMW','BwvUDca','zw5Zlca','AwnHBfa','C2v2zxi','yxv0Aca','C2v0rMu','zxf1zxm','iokaLcbWzq','DhrPBMC','DgvYige','CIbervm','Cevm','zgvZy3i','Chv0igK','Dg8GAwq','vxnLiee','B21TB24','yw0UCMu','AxrPzxm','BIbSB2C','CMfTzxq','ienPCgG','B3nZlvm','uKyGrgK','BgLUzYa','DgHVzhm','BMCUzM8','zxmVzgK','zsbJCNK','yw1LCY4','mJy3mtHysNvgqvC','DhKGzgu','C3rUyw0','te9hlta','BguGzxG','runcig0','CYbTDxm','zcbPBNa','zgf0zsa','ienbCYW','ifrYDxm','rvmGkeq','ywqU','yMLUyxi','Aw4VkIO','q1Dflti','igv2ywW','oIbMywm','lcb0CNu','q3vZDg8','terbuca','CM5ZlIa','DgLMAwm','CMLUz3m','DxjLifi','zw50Awm','lNn0yxi','Aw46ihS','CYb0BYa','vxnLieC','DgLVBIa','igfYyMK','su4Ikq','yxjZzxi','zwmGD2K','DhmGywW','CMCYiIK','C2LVBNm','C2v0u3q','CMD1Bwu','zxjPzxm','yxrOkcK','igvUzha','zYbHihm','sw5Zzwm','Aw5NiIK','u1fmlG','AMf2ys4','iMfYzZe','BcbZzxi','DMLHBgW','DhbvuKW','Bsa9ig4','oIaUyw4','C1jVBgu','rM9Yz2u','DhjHCNK','DMLJzxm','C3ncDwK','BcbLBNq','CYb3Axq','yxbOAwm','mtm4nKrXAeTKva','ywWGyMW','BgvKlIa','DxrOzw4','Aw4Gu1e','DcbgB3i','revtig8','id0Gy28','zxn0lMC','DgL0Bgu','oYbWCY4','zM9Yihm','AgfPBNm','vxnLigO','qxzVAwq','C2vZihq','AwWUuMe','AMvJDca','AwmGvvi','BgXVD2u','B2rLigu','sKfwqs0','zYbtzwm','yxr0ywm','Aw5Nige','q1jzufq','nti2oda5nvzWCgvftG','tfmGq2u','C3rHBMm','DeLUC3q','zxiOiMm','tg9NieK','Aw5WDxq','ywTHyMW','DwvZDca','BM4UChi','yxrLCYa','y3vYzvi','ywDLCIa','C3nLCY4','zwqGzM8','uhjVy2u','A2v5CYa','DgGGzgK','u3rHDgu','tY0Wmdi','ChjPBMC','CNrPzMK','uuWGCxu','zML4','psa/iIK','BIbmyw4','BgvTlG','BNn0zwe','yxrLBwu','DhmGAwq','CIbPBNa','Dcb3Axq','ywXSB3C','ywXPEMe','veXtlta','swyGyNu','4OcuifvUCW','ihbLCMy','EMuODxm','BgvZifq','u2vYDMu','rM9Yigm','ywWGzw4','vxnLieO','q1DfltG','zwfKig8','igeGC2e','revtrvi','ihnJAgu','BhKGnty','yxrPB24','EsbPDca','rgvJB2q','igXVywq','zxiGAw4','igLUigy','ruWTmda','ihbYAxy','ocKU','ywDLCW','BgLZDc4','zxCGuhi','CM9Jzxm','BMf0Aw8','q01ess0','CgfZC2u','CxvLCNK','A3mU','sw5Qzwm','CM90B2i','uKforc0','ywX1yxq','B2rL','kcjbre0','igfUzca','Ag91Dca','DxnLCNm','C2vZlG','yw5KB20','y2LHBca','yxrHigm','CMvZDhi','Bg93zwq','DgvYAxO','z2vYlIa','y3rLCNm','uMvXDwK','ChjLC3m','uefusc0','DgGGzhK','igzYB20','zxnZiee','zwnVzgu','BcbPBNy','CMuGyxu','zwn0sw4','B3jTyxq','iI9Hzg0','zsbZCgu','B2LUDhm','DeLUChu','zxnZAw8','vxnPBMC','iIKUAge','zxiGD2K','yxrLieK','AMf2yq','v2vHAYa','Chv0lG','Dcb1C2u','y3rPB24','Bg9Nigu','De1HBMe','lIbvC2u','zIbtDhi','yMXLCYa','yxzHlNm','q1DfltC','AxrPDMu','ltq0mJi','ifHnteq','zMfRzsa','zMf1Bhq','zxCGu2u','ChjLzgK','zwn0kcK','y29Uy2e','igv4Cgu','vxnLifm','oIbSB2C','DgvYBMe','u1fmihe','tcbMCM8','tfmGC2u','CMvKu3q','vhjHDMu','C2uGysa','yxjHBwu','q1qGkIa','BMnHDgu','D3mGAw4','CIaOsKu','revtigG','we1mrgu','igeGs2u','BNmU','BgWGAg8','B24G4Ocuia'];_0x4f33=function(){return _0x277c3c;};return _0x4f33();}_0x9f66['id']=_0x114655(-0xac,-0x1c3)+'SQLI-'+_0x114655(0x9,0x141),_0x9f66['cwe']='CWE-8'+'9',_0x9f66['sever'+_0x114655(-0x163,-0x25f)]=_0x23c872(-0x390,-0x277)+_0x23c872(-0x221,-0x267),_0x9f66[_0x114655(-0xb8,-0x1db)]='SQL\x20I'+_0x114655(0x4e,0x3c)+_0x23c872(-0x6c,-0xac)+_0x23c872(-0x364,-0x25a)+_0x114655(-0x103,0xa)+_0x114655(0x88,-0x7e)+_0x23c872(-0x26e,-0x1c2)+'L\x20que'+'ry',_0x9f66[_0x23c872(-0x22f,-0x216)+_0x114655(0x76,-0x30)+'n']=_0x23c872(-0xa2,-0x146)+_0x114655(-0x155,-0xdd)+'ng.fo'+_0x23c872(-0xc4,-0x7d)+'to\x20bu'+_0x23c872(-0x1cc,-0x288)+_0x114655(-0x91,0x55)+_0x23c872(-0x267,-0x1dc)+'\x20allo'+_0x114655(-0x1b,0x89)+_0x114655(0x82,-0x98)+'on.',_0x9f66[_0x114655(0x47,0x84)+'ages']=[_0x114655(-0x3d,0xc)],_0x9f66[_0x114655(0x11,0x51)+'rn']=/String\.format\s*\(\s*["'](?:SELECT|INSERT|UPDATE|DELETE|DROP|ALTER)\b/gi,_0x9f66['fix']=_0x23c872(-0x1d3,-0x229)+'arame'+_0x23c872(-0x9d,-0x159)+_0x23c872(0x29,-0x1e)+'eries'+_0x114655(0x9b,0xc5)+_0x114655(-0x7a,-0x55)+_0x114655(-0x35,0x39)+_0x23c872(0x7f,-0x5c)+_0x114655(-0x47,-0xec)+_0x114655(0x3d,0xf2)+_0x114655(-0xd1,-0x1b5);const _0x284395={};_0x284395['id']='JAVA-'+_0x114655(-0x15b,-0x63)+'01',_0x284395[_0x114655(-0x174,-0x21d)]='CWE-6'+'11',_0x284395[_0x114655(-0x11a,-0x214)+_0x114655(-0x163,-0x179)]=_0x114655(-0x172,-0x27a)+_0x114655(-0x162,-0x211),_0x284395[_0x23c872(-0x124,-0x1bd)]=_0x114655(-0x135,-0x1e0)+_0x23c872(-0x156,-0xc1)+_0x23c872(0xae,-0x60)+'tity\x20'+_0x23c872(0x82,-0x99)+_0x114655(0xb4,-0x1c)+'safe\x20'+_0x114655(0xa3,0x1cb)+'arsin'+'g',_0x284395[_0x23c872(-0x19d,-0x216)+_0x23c872(0x5a,-0x8f)+'n']='XML\x20p'+_0x114655(-0xde,-0xd9)+_0x23c872(-0x14a,-0x1c8)+_0x114655(-0x5c,-0x114)+_0x114655(-0x167,-0x87)+'led\x20e'+_0x114655(0x44,-0xbc)+_0x23c872(-0x226,-0x182)+'titie'+_0x23c872(-0x4a,-0x100)+_0x114655(0x96,0x6a)+_0x23c872(-0x155,-0x1e5)+_0x23c872(-0x1ff,-0x1cc)+'\x20file'+'s\x20and'+_0x23c872(-0x11a,-0x187)+_0x114655(-0x16d,-0x7e)+'SRF.',_0x284395['langu'+_0x114655(-0x6c,-0x4c)]=['java'],_0x284395[_0x23c872(-0x1b5,-0xf4)+'rn']=/(?:DocumentBuilderFactory|SAXParserFactory|XMLInputFactory|TransformerFactory|SchemaFactory)\.newInstance\s*\(/g,_0x284395['fix']=_0x114655(0x56,0xa8)+_0x114655(-0xfb,-0x178)+_0x114655(-0x25,0xe5)+_0x114655(-0xc4,-0x7b)+_0x114655(-0x10b,0x4)+_0x23c872(-0x20b,-0x1f3)+'tory.'+_0x114655(-0x118,-0x14d)+'ature'+'(\x22htt'+_0x23c872(-0x15f,-0x35)+_0x114655(0x63,-0xd4)+'.org/'+_0x23c872(-0x1af,-0x278)+_0x23c872(-0x218,-0x26f)+_0x23c872(-0x239,-0x207)+_0x114655(-0x134,-0x3a)+_0x23c872(-0x71,-0xe2)+_0x114655(0xc9,0x4f)+_0x114655(0x7c,0xd8)+_0x114655(-0xed,-0xf6)+'e);';const _0x4e0676={};_0x4e0676['id']=_0x114655(-0xac,0xc)+_0x23c872(-0x204,-0x17d)+_0x114655(0xa2,0x9c),_0x4e0676['cwe']=_0x114655(0x37,0xca)+'02',_0x4e0676[_0x23c872(-0x337,-0x21f)+_0x23c872(-0x203,-0x268)]=_0x114655(-0x172,-0x1ef)+_0x114655(-0x162,-0x181),_0x4e0676['title']='Insec'+_0x114655(0x70,0xce)+_0x114655(0x98,0xc1)+_0x23c872(-0x11b,-0x18b)+_0x23c872(-0x111,-0x1e6)+'—\x20Obj'+_0x23c872(-0x58,-0x14d)+_0x23c872(-0x167,-0x61)+_0x114655(0x43,-0x10),_0x4e0676[_0x114655(-0x111,-0x19)+_0x114655(0x76,-0x30)+'n']='Java\x20'+_0x114655(0x2e,-0x40)+_0x23c872(-0x1bd,-0x148)+_0x23c872(-0x160,-0xcc)+_0x114655(-0x10c,-0x191)+_0x23c872(-0x229,-0xfe)+_0x23c872(-0x3a,-0x12f)+_0x114655(0x5a,0xb4)+_0x114655(-0x150,-0x175)+_0x23c872(-0x1b4,-0x236)+_0x114655(-0x57,0x5a)+_0x23c872(-0xa3,-0x68)+_0x114655(0x1b,0x96)+'\x20arbi'+'trary'+_0x114655(0x62,0x151)+_0x23c872(0x59,-0x2c)+_0x114655(0x4,-0x4c)+_0x114655(-0x10d,-0x1b7)+_0x23c872(-0x14a,-0xf2)+_0x23c872(-0xdb,-0x81)+_0x114655(-0xb5,-0x128)+').',_0x4e0676['langu'+_0x23c872(-0x8a,-0x171)]=[_0x114655(-0x3d,-0x2b)],_0x4e0676[_0x114655(0x11,-0xfe)+'rn']=/(?:ObjectInputStream|readObject|readUnshared)\s*\(/g,_0x4e0676[_0x23c872(-0x15e,-0x195)]=_0x23c872(-0x258,-0x181)+_0x114655(0xdf,0x1fa)+_0x23c872(-0x127,-0x167)+_0x23c872(-0x77,-0x82)+_0x114655(0x7d,0x161)+'.\x20If\x20'+'Objec'+_0x114655(-0x43,-0xcd)+_0x23c872(-0x130,-0xcc)+'am\x20is'+_0x114655(-0x17f,-0xc1)+_0x114655(0xd2,0x123)+'mplem'+'ent\x20O'+_0x114655(-0x14f,-0x3d)+'Input'+_0x23c872(-0x144,-0x25d)+_0x114655(-0x1a,-0xdc)+_0x114655(-0x17c,-0xd8)+_0x114655(-0x12f,-0x186)+_0x114655(-0x56,-0x9b)+_0x114655(-0x9,-0x25)+_0x23c872(-0x2b2,-0x1b3)+_0x23c872(-0x88,-0x9f)+_0x114655(-0x9a,-0x60);const _0x399f2c={};_0x399f2c['id']=_0x114655(-0xac,-0x1af)+'DESER'+_0x23c872(0x8,-0x18),_0x399f2c['cwe']='CWE-5'+'02',_0x399f2c[_0x114655(-0x11a,-0x235)+_0x23c872(-0x1f6,-0x268)]=_0x114655(-0x172,-0xd8)+'cal',_0x399f2c[_0x23c872(-0x186,-0x1bd)]=_0x23c872(-0x1db,-0x1d8)+_0x114655(0x70,0xcd)+'eseri'+_0x23c872(-0x240,-0x18b)+'tion\x20'+'—\x20XML'+_0x114655(-0x73,-0x176)+'er',_0x399f2c[_0x23c872(-0x18c,-0x216)+'iptio'+'n']=_0x23c872(0x7,-0x11d)+_0x114655(-0x179,-0x7b)+'\x20can\x20'+'execu'+'te\x20ar'+_0x23c872(-0x121,-0x21)+_0x23c872(-0x1d6,-0x22e)+'de\x20wh'+'en\x20pr'+_0x114655(0x12,-0xcf)+_0x23c872(-0x127,-0x5f)+_0x114655(-0x150,-0x184)+_0x114655(0xc1,-0x3e)+'ML\x20in'+_0x114655(-0x3b,0x3a),_0x399f2c[_0x114655(0x47,0x141)+'ages']=[_0x114655(-0x3d,0x8f)],_0x399f2c['patte'+'rn']=/XMLDecoder\s*\(\s*new/g,_0x399f2c[_0x23c872(-0x12c,-0x195)]=_0x23c872(-0x164,-0x256)+_0x23c872(-0x1dc,-0x13f)+_0x23c872(-0x159,-0x134)+_0x23c872(-0x251,-0x150)+_0x114655(-0x16c,-0x1af)+_0x23c872(-0x48,-0xd8)+_0x114655(0x21,0xd6)+_0x114655(-0xf8,-0xdf)+_0x114655(0x29,0x137)+_0x23c872(-0x239,-0x124)+_0x23c872(-0x160,-0xa8)+_0x114655(0xa3,0x69)+_0x23c872(-0x2f4,-0x1e3)+_0x114655(-0x12d,-0x1a3)+'SON\x20i'+_0x114655(-0x8c,-0x160)+'d.';const _0x3841b2={};_0x3841b2['id']='JAVA-'+_0x114655(-0x67,-0x6d)+_0x23c872(0x16,-0x56),_0x3841b2[_0x23c872(-0x22c,-0x279)]=_0x23c872(-0x23d,-0x137)+'8',_0x3841b2[_0x23c872(-0x349,-0x21f)+_0x114655(-0x163,-0x17c)]=_0x114655(-0x172,-0x1b3)+_0x114655(-0x162,-0xff),_0x3841b2[_0x114655(-0xb8,0x4f)]=_0x23c872(0x7c,-0x85)+_0x23c872(-0x164,-0x76)+_0x23c872(0x20,-0x83)+_0x23c872(-0x119,-0x119)+_0x114655(0xdc,0x35)+_0x114655(0x74,0x69)+_0x23c872(-0x189,-0x1e2)+_0x23c872(-0x74,-0x153)+'namic'+_0x114655(0xca,0x1f6)+'t',_0x3841b2[_0x114655(-0x111,-0x222)+_0x23c872(0x98,-0x8f)+'n']=_0x23c872(0xce,-0x29)+_0x114655(0x74,0x1a)+_0x23c872(-0x65,-0x40)+'with\x20'+_0x114655(-0x29,-0x17)+'tenat'+'ed\x20st'+_0x114655(-0xe8,-0x8)+'\x20allo'+'ws\x20OS'+_0x23c872(-0x18b,-0xa0)+_0x23c872(-0x35f,-0x230)+_0x23c872(-0x13c,-0xb7)+_0x114655(0x90,0x104),_0x3841b2[_0x114655(0x47,-0x5e)+_0x114655(-0x6c,-0x185)]=[_0x114655(-0x3d,-0xe1)],_0x3841b2[_0x23c872(-0x7,-0xf4)+'rn']=/Runtime\.getRuntime\s*\(\s*\)\.exec\s*\(\s*(?:["'][^"']*["']\s*\+|\+)/g,_0x3841b2[_0x23c872(-0x24e,-0x195)]='Use\x20P'+_0x23c872(-0x18a,-0x16e)+'sBuil'+_0x114655(0x7b,0x158)+'ith\x20a'+_0x23c872(-0x114,-0x1dd)+_0x23c872(-0x39d,-0x28a)+'st:\x20n'+_0x23c872(-0x1ac,-0x16f)+'ocess'+_0x114655(-0x17a,-0x28c)+_0x114655(-0xa3,-0xb)+'md\x22,\x20'+_0x23c872(-0x139,-0x1d4)+_0x23c872(-0x59,-0x74)+_0x114655(-0xdb,0xe)+_0x114655(-0xe5,-0x18d)+_0x114655(0x4f,0x160);const _0x1bd922={};_0x1bd922['id']=_0x114655(-0xac,0xa)+_0x114655(-0x67,-0x11f)+_0x23c872(-0x8c,-0xfc),_0x1bd922[_0x23c872(-0x232,-0x279)]=_0x23c872(-0xd9,-0x137)+'8',_0x1bd922['sever'+_0x23c872(-0x29e,-0x268)]=_0x23c872(-0x33a,-0x277)+_0x23c872(-0x2d5,-0x267),_0x1bd922[_0x114655(-0xb8,-0x1ce)]=_0x114655(0x80,0xbf)+_0x23c872(-0x1a6,-0x76)+'jecti'+'on\x20—\x20'+_0x23c872(-0xb2,-0x19d)+_0x23c872(-0x131,-0x1ca)+_0x23c872(-0x24,-0xec)+_0x23c872(-0x1ad,-0xe0)+'shell',_0x1bd922[_0x114655(-0x111,0x1c)+_0x23c872(-0x14e,-0x8f)+'n']=_0x114655(-0x41,0x1e)+'\x20Proc'+_0x114655(0xd3,0xed)+_0x114655(0xbd,0x1e6)+_0x23c872(-0x189,-0xf8)+'\x20shel'+_0x114655(0x17,0x110)+_0x23c872(-0x15,-0xe6)+_0x114655(-0x114,-0x13d)+'nd\x20dy'+'namic'+'\x20comm'+_0x114655(0xe5,0x1b6)+_0x114655(-0x11e,-0x38)+'es\x20in'+_0x114655(0x82,0xec)+'on.',_0x1bd922[_0x114655(0x47,0x11c)+_0x23c872(-0x4c,-0x171)]=[_0x23c872(-0x109,-0x142)],_0x1bd922['patte'+'rn']=/ProcessBuilder\s*\(\s*(?:Arrays\.asList\s*\()?\s*["'](?:bash|sh|cmd|cmd\.exe)['"]\s*,\s*["'](?:-c|\/c)['"]\s*,/g,_0x1bd922['fix']=_0x23c872(-0x16d,-0x1b8)+_0x114655(-0x128,-0x1aa)+_0x23c872(-0x236,-0x14f)+_0x23c872(-0x127,-0xd2)+_0x23c872(-0x19a,-0x275)+_0x23c872(-0x393,-0x269)+_0x114655(0x12,0xed)+_0x23c872(-0x173,-0x27f)+_0x23c872(-0xec,-0x144)+_0x23c872(-0x7b,-0x19b)+_0x114655(-0x122,-0x15b)+_0x114655(-0xf2,-0x143)+'y\x20and'+_0x114655(0xe8,0xb5)+_0x23c872(-0x307,-0x222)+_0x114655(-0x6b,0x81);const _0x4f60e6={};_0x4f60e6['id']='JAVA-'+_0x23c872(-0x252,-0x154)+'001',_0x4f60e6[_0x23c872(-0x29e,-0x279)]='CWE-2'+'2',_0x4f60e6[_0x114655(-0x11a,-0x78)+_0x114655(-0x163,-0xbe)]=_0x114655(0xc8,0x1d),_0x4f60e6['title']=_0x114655(0x6,-0x9f)+_0x23c872(-0x17e,-0x125)+_0x23c872(0x1,-0x103)+_0x23c872(-0x238,-0x253)+_0x23c872(-0x1bf,-0x18e)+_0x23c872(-0x292,-0x287)+'\x20file'+'\x20path',_0x4f60e6[_0x23c872(-0x2ab,-0x216)+_0x114655(0x76,-0x13)+'n']=_0x114655(0x36,0xed)+'input'+_0x114655(-0x70,-0x1a2)+_0x23c872(-0x17e,-0x54)+_0x114655(0x14,0x39)+_0x114655(-0x10,-0xd5)+_0x114655(-0x12e,-0x33)+_0x114655(0xe2,0x1f1)+'nitiz'+_0x114655(-0x75,-0x18d)+'\x20allo'+_0x23c872(-0x389,-0x276)+_0x114655(-0x17d,-0x266)+_0x23c872(-0x1f9,-0x25c)+_0x23c872(-0x236,-0x1ae)+_0x114655(-0xd,-0xd1)+'ary\x20f'+'iles.',_0x4f60e6[_0x23c872(-0x132,-0xbe)+'ages']=['java'],_0x4f60e6[_0x23c872(-0x2d,-0xf4)+'rn']=/new\s+File\s*\(\s*(?:request\.getParameter|request\.getAttribute|params\.get|[^)]+\+\s*(?:request|param|input|user))/g,_0x4f60e6['fix']='Canon'+_0x114655(0xc7,0x64)+'ze\x20th'+_0x114655(0x71,0x65)+_0x23c872(-0x13a,-0xd9)+'h\x20get'+_0x114655(0x31,-0xd1)+_0x114655(-0x11b,-0x22c)+_0x23c872(-0x112,-0x1db)+_0x114655(-0x5d,0xb)+_0x23c872(-0x1c1,-0x102)+_0x23c872(-0xb5,-0x179)+'start'+_0x23c872(-0x2cb,-0x1c8)+_0x23c872(0xef,-0x34)+_0x114655(-0x28,-0x5a)+'cted\x20'+'base\x20'+_0x23c872(-0x19d,-0x226)+_0x23c872(0x8,-0x114);const _0x98e848={};_0x98e848['id']=_0x23c872(-0xde,-0x1b1)+'SSRF-'+_0x114655(0xaf,-0x6d),_0x98e848[_0x114655(-0x174,-0x83)]=_0x23c872(-0x1b0,-0x231)+'18',_0x98e848[_0x114655(-0x11a,-0xce)+_0x23c872(-0x16c,-0x268)]=_0x114655(0xc8,0x12b),_0x98e848[_0x23c872(-0x9c,-0x1bd)]=_0x23c872(-0x227,-0x184)+_0x23c872(-0xcc,-0x9e)+_0x23c872(-0x178,-0x26a)+_0x114655(-0x9f,-0xe8)+_0x23c872(-0xe6,-0x1cd)+'ry\x20—\x20'+_0x23c872(-0x31d,-0x270)+_0x114655(-0xaf,-0x14e)+_0x114655(-0x23,-0xd5)+'m\x20use'+'r\x20inp'+'ut',_0x98e848[_0x23c872(-0x1c7,-0x216)+'iptio'+'n']=_0x114655(0xba,0xb3)+'ing\x20U'+_0x23c872(-0x1c6,-0x24d)+_0x23c872(-0x2ca,-0x1d1)+_0x23c872(-0x196,-0x22c)+_0x23c872(-0x1e8,-0x13e)+_0x114655(-0x4d,0x94)+_0x114655(-0x152,-0x2e)+_0x23c872(0x72,-0x3b)+_0x23c872(0x2b,-0xb1)+_0x23c872(-0x314,-0x258)+_0x23c872(-0x27a,-0x235)+_0x23c872(-0x7a,-0x12a)+_0x23c872(-0x259,-0x1d3)+_0x114655(-0xc6,-0xc6)+'.',_0x98e848[_0x23c872(-0xc4,-0xbe)+'ages']=[_0x23c872(-0x1d5,-0x142)],_0x98e848['patte'+'rn']=/new\s+URL\s*\(\s*(?:request\.getParameter|request\.getAttribute|params\.get|[^)]+\+\s*(?:request|param|input|user))/g,_0x98e848[_0x114655(-0x90,-0x102)]=_0x23c872(-0xa2,-0x25)+'ate\x20U'+_0x114655(0xdb,-0x50)+'gains'+'t\x20an\x20'+_0x114655(-0x87,-0x141)+_0x114655(0x51,0x56)+'of\x20al'+_0x23c872(-0x24e,-0x15a)+_0x23c872(-0x8e,-0x17c)+_0x114655(0x58,0xc1)+_0x114655(0x53,-0x6d)+_0x23c872(-0x145,-0x1b)+_0x23c872(-0x4c,-0x108)+_0x114655(-0x6e,-0x196)+_0x23c872(-0xef,-0x143)+_0x114655(-0x177,-0xe8)+_0x23c872(-0x146,-0x1c);const _0x548aff={};_0x548aff['id']=_0x23c872(-0x120,-0x1b1)+'CRYPT'+_0x114655(0x0,-0x4f),_0x548aff[_0x23c872(-0x384,-0x279)]='CWE-3'+'27',_0x548aff['sever'+'ity']='high',_0x548aff[_0x23c872(-0x2d8,-0x1bd)]='Weak\x20'+_0x114655(-0x141,-0x250)+_0x114655(-0xb,-0x96)+_0x23c872(0x42,-0x9d)+_0x114655(0xb0,-0x36)+'r\x20SHA'+'1',_0x548aff[_0x23c872(-0x249,-0x216)+_0x114655(0x76,0xbb)+'n']=_0x114655(0x1a,0x7f)+'nd\x20SH'+_0x114655(0x27,0x83)+_0x114655(-0x101,-0x16)+_0x114655(0x7a,0x175)+_0x114655(-0xc2,-0x1f7)+_0x114655(0xbb,-0x5c)+_0x114655(0x85,0xa3)+_0x114655(0x38,0x2a)+'\x20secu'+_0x114655(0x89,-0xaf)+_0x23c872(-0x211,-0x245)+_0x114655(-0x5a,-0x4c),_0x548aff[_0x23c872(-0x29,-0xbe)+'ages']=[_0x23c872(-0x1ba,-0x142)],_0x548aff['patte'+'rn']=/MessageDigest\.getInstance\s*\(\s*["'](?:MD5|SHA-?1)["']\s*\)/gi,_0x548aff[_0x114655(-0x90,-0xd7)]=_0x23c872(-0xc5,-0x12c)+_0x23c872(-0x111,-0x70)+'6\x20or\x20'+'stron'+_0x23c872(-0x386,-0x26b)+_0x114655(0x5c,0xc5)+'geDig'+_0x114655(-0xb9,0x5)+_0x23c872(-0x245,-0x241)+_0x114655(0x49,-0x5a)+_0x23c872(-0x103,-0x23b)+'-256\x22'+').';const _0x3c11f6={};_0x3c11f6['id']=_0x114655(-0xac,-0xef)+_0x114655(-0xa8,-0xdc)+_0x114655(-0x94,-0x9d),_0x3c11f6[_0x114655(-0x174,-0x75)]=_0x23c872(-0x31e,-0x265)+'27',_0x3c11f6[_0x23c872(-0x252,-0x21f)+_0x23c872(-0x34a,-0x268)]=_0x23c872(-0x254,-0x277)+_0x23c872(-0x28b,-0x267),_0x3c11f6[_0x23c872(-0x16c,-0x1bd)]=_0x114655(-0x3c,-0x5c)+_0x114655(-0x141,-0x25c)+_0x23c872(-0x56,-0x110)+_0x114655(0x68,-0x7a)+_0x23c872(-0x112,-0x1c0)+_0x23c872(-0x241,-0x218)+_0x114655(-0x184,-0xb4);function _0x23c872(_0x19bdf4,_0x2e1834){return _0x2d8b(_0x2e1834- -0x3d3,_0x19bdf4);}_0x3c11f6[_0x114655(-0x111,-0x233)+'iptio'+'n']=_0x114655(-0x19,-0x134)+_0x114655(0x77,0x79)+_0x23c872(-0x138,-0x17b)+_0x23c872(-0x1a6,-0x107)+_0x23c872(-0x69,-0x19c)+_0x114655(-0x12b,-0x161)+_0x114655(0xce,0xaf)+_0x114655(-0xcd,-0x1c1)+_0x23c872(-0x149,-0x87)+_0x114655(-0xa0,-0x1ac)+_0x114655(-0x15d,-0x142)+_0x114655(-0xf4,-0x1ff)+_0x114655(0xd6,-0x31)+_0x114655(0xb5,0x129)+_0x114655(-0xc,-0x5c)+_0x23c872(0x81,-0x52)+'.',_0x3c11f6[_0x114655(0x47,0xba)+_0x23c872(-0x220,-0x171)]=[_0x114655(-0x3d,-0x97)],_0x3c11f6['patte'+'rn']=/Cipher\.getInstance\s*\(\s*["'](?:DES|DESede|DES\/|DESede\/)/gi,_0x3c11f6[_0x114655(-0x90,-0x8)]=_0x23c872(-0x179,-0x213)+'ES\x20wi'+'th\x20GC'+_0x23c872(-0x2f6,-0x25f)+_0x114655(0x73,-0x8c)+_0x23c872(-0x1c6,-0xa6)+_0x23c872(-0x3b,-0x9a)+_0x23c872(-0x1fb,-0x1aa)+'e(\x22AE'+'S/GCM'+'/NoPa'+_0x114655(0x86,0x81)+'\x22)';const _0x556c9e={};_0x556c9e['id']=_0x23c872(-0xeb,-0x1b1)+_0x114655(-0xa8,0x82)+_0x114655(0x40,0x123),_0x556c9e[_0x114655(-0x174,-0x173)]=_0x23c872(-0x224,-0x265)+'27',_0x556c9e[_0x114655(-0x11a,-0xcf)+_0x114655(-0x163,-0x14e)]=_0x23c872(0x94,-0x3d),_0x556c9e[_0x114655(-0xb8,-0x163)]='Weak\x20'+_0x23c872(-0x16b,-0x246)+_0x114655(-0xb,0xd1)+_0x23c872(0x6c,-0x9d)+_0x23c872(-0x93,-0x7e)+_0x23c872(-0x19c,-0x164),_0x556c9e[_0x23c872(-0x15f,-0x216)+_0x114655(0x76,-0x2e)+'n']=_0x114655(-0xfa,-0x117)+_0x114655(-0xad,-0x1c5)+_0x114655(0xbf,0x1b9)+_0x23c872(-0xa3,-0x18f)+_0x23c872(-0x1e6,-0x1eb)+_0x114655(-0xc0,-0xe1)+_0x23c872(-0x17,-0x49)+_0x23c872(-0x144,-0x214)+_0x114655(-0xe6,-0x10f)+'al\x20ci'+_0x114655(0xe1,-0x29)+'ext,\x20'+'revea'+'ling\x20'+_0x114655(0x11,-0xbc)+_0x23c872(-0xe4,-0x1ef)+_0x114655(0x8b,0x80)+_0x23c872(-0xca,-0xd5)+'nguin'+_0x114655(0x5b,-0x73)+_0x114655(-0x8d,-0x139),_0x556c9e[_0x114655(0x47,0x21)+_0x114655(-0x6c,0x9a)]=[_0x23c872(-0x168,-0x142)],_0x556c9e[_0x114655(0x11,-0xf8)+'rn']=/Cipher\.getInstance\s*\(\s*["'](?:AES|DES|DESede)\/ECB\//gi,_0x556c9e[_0x23c872(-0x1e7,-0x195)]=_0x23c872(-0x2ac,-0x1e7)+_0x23c872(-0x87,-0x27)+'\x20CBC\x20'+_0x23c872(0x7,-0x104)+_0x23c872(-0x2b4,-0x20d)+_0x114655(0xc4,0x74)+_0x114655(-0xa4,-0x1b5)+'ance('+'\x22AES/'+_0x114655(0x93,0x10b)+'oPadd'+_0x23c872(-0x10d,-0x1d7);function _0x2d8b(_0x532817,_0x31557c){_0x532817=_0x532817-(-0x2*0x108b+0x903*-0x2+-0x315*-0x11);const _0x401b86=_0x4f33();let _0x194370=_0x401b86[_0x532817];if(_0x2d8b['ajGPIw']===undefined){var _0x20e3f7=function(_0x504b52){const _0x40a6f5='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0x4423e6='',_0x5504ba='';for(let _0x305b04=0x1860+0x1037+-0x2897,_0x4fd46a,_0x1ba3f1,_0x2d3301=-0x15*-0x12f+-0x823*-0x1+0x29*-0xce;_0x1ba3f1=_0x504b52['charAt'](_0x2d3301++);~_0x1ba3f1&&(_0x4fd46a=_0x305b04%(0x1eeb+0x1*-0xf05+-0x2*0x7f1)?_0x4fd46a*(-0xf0d*0x2+0x154c+0x90e)+_0x1ba3f1:_0x1ba3f1,_0x305b04++%(0x166d+0x1576+0x3fd*-0xb))?_0x4423e6+=String['fromCharCode'](0x10b1*0x1+-0x7e1+0x1*-0x7d1&_0x4fd46a>>(-(0x2080+-0x1081+-0xffd)*_0x305b04&0xab*0x27+0x19*0x157+-0x3b86)):-0x7ed*-0x1+0x237c+-0x2b69){_0x1ba3f1=_0x40a6f5['indexOf'](_0x1ba3f1);}for(let _0x373da7=0x12a9+0x1*0xb9+-0x1362,_0x317f39=_0x4423e6['length'];_0x373da7<_0x317f39;_0x373da7++){_0x5504ba+='%'+('00'+_0x4423e6['charCodeAt'](_0x373da7)['toString'](-0x8*-0x71+-0x2689+0x2311))['slice'](-(0x2*0x32b+0x13dc+0x1*-0x1a30));}return decodeURIComponent(_0x5504ba);};_0x2d8b['KMsyog']=_0x20e3f7,_0x2d8b['tmgozY']={},_0x2d8b['ajGPIw']=!![];}const _0x22f043=_0x401b86[0x2202+0x5d0+-0x13e9*0x2],_0x3cb606=_0x532817+_0x22f043,_0x195e90=_0x2d8b['tmgozY'][_0x3cb606];return!_0x195e90?(_0x194370=_0x2d8b['KMsyog'](_0x194370),_0x2d8b['tmgozY'][_0x3cb606]=_0x194370):_0x194370=_0x195e90,_0x194370;}const _0x1d5b00={};_0x1d5b00['id']=_0x23c872(-0x1d0,-0x1b1)+_0x114655(-0x61,-0x51)+_0x23c872(-0x76,-0x56),_0x1d5b00[_0x114655(-0x174,-0x177)]=_0x23c872(-0x1c9,-0x265)+'38',_0x1d5b00[_0x114655(-0x11a,-0x1f8)+'ity']='high',_0x1d5b00[_0x23c872(-0x24e,-0x1bd)]=_0x23c872(-0xfb,-0x1d8)+_0x114655(-0xe7,-0x220)+_0x23c872(-0x10f,-0x15e)+_0x114655(0x32,0x127)+'va.ut'+_0x23c872(-0x2a7,-0x1b6)+_0x23c872(-0x136,-0xd6)+_0x23c872(-0x12c,-0x1bb)+_0x23c872(-0x337,-0x259)+'ty',_0x1d5b00[_0x23c872(-0x1d9,-0x216)+_0x23c872(0x3,-0x8f)+'n']=_0x23c872(-0x1a8,-0x1d5)+_0x114655(0x15,0x3e)+_0x23c872(-0x2e6,-0x261)+_0x23c872(0x1c,-0xfb)+_0x23c872(-0x2f,-0x130)+_0x114655(-0x139,-0x146)+'e.\x20It'+_0x114655(0x46,-0x8)+_0x23c872(-0x15d,-0x36)+_0x23c872(-0x1f3,-0x228)+_0x114655(-0x99,-0x130)+_0x114655(-0x125,-0x64)+_0x114655(-0x11c,-0xae)+_0x114655(0x3c,0x91)+_0x114655(-0x180,-0x7a)+_0x114655(-0x154,-0x1a7)+_0x114655(-0xfe,-0x17)+_0x114655(-0x137,-0x6a)+_0x23c872(0x13,-0x11b),_0x1d5b00[_0x23c872(-0x99,-0xbe)+_0x114655(-0x6c,0x70)]=[_0x23c872(-0x160,-0x142)],_0x1d5b00[_0x23c872(-0x8,-0xf4)+'rn']=/new\s+Random\s*\(\s*\)/g,_0x1d5b00[_0x114655(-0x90,-0x196)]=_0x23c872(-0x1e8,-0x1b9)+_0x114655(-0x33,-0x26)+_0x23c872(-0x23d,-0x259)+_0x23c872(-0x68,-0xb5)+_0x114655(-0x9c,-0x1cd)+_0x23c872(-0x29,-0x15e)+_0x114655(-0x13f,-0x208)+_0x23c872(-0x185,-0x224)+_0x23c872(0xf,-0xd6)+_0x114655(-0x142,-0x142)+_0x114655(-0xcb,-0x6a)+_0x23c872(-0x91,-0x131)+_0x23c872(-0x2d1,-0x1a1)+_0x114655(-0x59,0x74)+_0x114655(0x9c,0x7);const _0x214e3c={};_0x214e3c['id']=_0x114655(-0xac,-0x18c)+'LDAP-'+_0x114655(0xaf,-0x1c),_0x214e3c[_0x114655(-0x174,-0x141)]=_0x23c872(-0x355,-0x231)+'0',_0x214e3c[_0x23c872(-0x348,-0x21f)+_0x23c872(-0x20f,-0x268)]=_0x114655(-0x172,-0x298)+_0x23c872(-0x327,-0x267),_0x214e3c[_0x23c872(-0xf9,-0x1bd)]=_0x114655(-0xeb,-0x167)+_0x23c872(-0xb0,-0x168)+_0x23c872(-0x139,-0x1e6)+_0x23c872(-0x8f,-0x188)+_0x23c872(-0xdf,-0x73)+'zed\x20i'+_0x23c872(-0x19b,-0x64)+'in\x20LD'+_0x114655(0x3e,0x11f)+_0x114655(0x99,0x8),_0x214e3c['descr'+'iptio'+'n']='User\x20'+_0x23c872(-0xf1,-0x1a6)+_0x114655(0x8d,-0x45)+_0x23c872(0xd,-0x2d)+_0x23c872(-0x22,-0xe5)+_0x23c872(-0xa0,-0x1c8)+_0x23c872(-0x95,-0x161)+_0x114655(0x1d,-0xd2)+_0x23c872(-0x94,-0x22)+_0x23c872(-0x1c,-0xdd)+_0x114655(0xab,0x1a3)+_0x23c872(-0x1b0,-0x1f0)+_0x114655(0x42,0xbb)+_0x23c872(-0x134,-0xb0),_0x214e3c[_0x114655(0x47,-0x8a)+_0x23c872(-0x204,-0x171)]=['java'],_0x214e3c[_0x114655(0x11,-0x85)+'rn']=/(?:search|lookup)\s*\(\s*(?:["'][^"']*["']\s*\+|\+\s*["'].*(?:cn=|uid=|ou=|dc=))/gi,_0x214e3c['fix']=_0x23c872(-0x24d,-0x264)+_0x23c872(-0x1b1,-0x14a)+_0x114655(-0x58,-0xba)+_0x23c872(-0xde,-0x1f0)+'chara'+_0x114655(-0x52,-0x7d)+'\x20or\x20u'+'se\x20pa'+_0x114655(-0x109,-0x9)+'erize'+'d\x20LDA'+'P\x20que'+'ries.';const _0x36de6b={};_0x36de6b['id']='JAVA-'+_0x23c872(-0x1be,-0x249)+_0x23c872(-0x137,-0x58),_0x36de6b[_0x114655(-0x174,-0xeb)]=_0x114655(-0x7b,-0x163)+'62',_0x36de6b[_0x114655(-0x11a,-0x24d)+_0x23c872(-0x33d,-0x268)]=_0x114655(0xc8,0x9f),_0x36de6b['title']=_0x23c872(-0x1e9,-0x109)+'g\x20Sec'+'urity'+'\x20—\x20CS'+_0x23c872(-0x232,-0x20b)+_0x23c872(0xb3,-0x79)+'d',_0x36de6b[_0x23c872(-0x106,-0x216)+_0x23c872(-0x1bf,-0x8f)+'n']='Disab'+_0x23c872(-0xd1,-0x20a)+_0x114655(0x4d,-0x87)+_0x23c872(0x2a,-0x77)+_0x23c872(-0x131,-0x13e)+'\x20expo'+_0x114655(-0xb2,-0x3a)+_0x23c872(-0x1cc,-0x266)+'plica'+_0x114655(-0xe1,-0xe9)+_0x23c872(0x33,-0x19)+_0x23c872(-0x158,-0x20c)+'ite\x20R'+_0x23c872(-0x337,-0x21c)+_0x23c872(-0x1f0,-0x1c1)+_0x114655(0x2b,-0x6f)+_0x114655(-0xaa,0x31)+'ks.',_0x36de6b['langu'+_0x114655(-0x6c,0x5a)]=['java'],_0x36de6b['patte'+'rn']=/\.csrf\s*\(\s*\)\s*\.disable\s*\(\s*\)/g,_0x36de6b['fix']=_0x114655(-0x13b,-0x17)+'CSRF\x20'+_0x23c872(-0x18a,-0x77)+'ction'+_0x23c872(0x77,-0x86)+_0x114655(-0xbf,-0xb5)+_0x114655(-0x84,-0x9e)+_0x114655(-0x14a,-0x76)+_0x23c872(-0x25c,-0x1d9)+_0x114655(0xb,0x36)+_0x114655(-0x4c,-0xf5)+_0x114655(0xb7,0x1e9)+'se\x20to'+'ken-b'+'ased\x20'+_0x23c872(-0x22c,-0x21e)+'inste'+_0x23c872(-0xe7,-0x1f8);const _0x30eb65={};_0x30eb65['id']='JAVA-'+_0x23c872(-0x170,-0x249)+_0x23c872(-0x132,-0x47),_0x30eb65[_0x114655(-0x174,-0x164)]='CWE-8'+'62',_0x30eb65[_0x23c872(-0x2ef,-0x21f)+_0x23c872(-0x2e2,-0x268)]='high',_0x30eb65[_0x114655(-0xb8,-0xc5)]=_0x23c872(-0x150,-0x109)+_0x23c872(-0x165,-0x1b0)+'urity'+_0x114655(-0x116,-0x1a6)+_0x114655(-0x16e,-0xa0)+_0x114655(0x24,0x4c)+_0x23c872(0x84,-0xa4)+'itive'+_0x23c872(-0x258,-0x1da)+_0x114655(-0x44,0x31),_0x30eb65[_0x114655(-0x111,0xe)+_0x23c872(-0x148,-0x8f)+'n']='Permi'+_0x114655(-0x115,-0x1e)+_0x114655(-0x7,-0x91)+_0x23c872(-0x1be,-0x26e)+_0x23c872(-0xf5,-0x1e8)+'sensi'+_0x114655(-0x13e,-0x219)+'endpo'+_0x114655(0x6d,0xbb)+_0x23c872(-0xeb,-0x4d)+_0x114655(0xc6,0x94)+_0x114655(-0xbe,0x57)+_0x114655(0x4a,-0x57)+_0x23c872(-0xe3,-0x75),_0x30eb65['langu'+'ages']=[_0x114655(-0x3d,0xe1)],_0x30eb65[_0x23c872(-0x24,-0xf4)+'rn']=/\.antMatchers\s*\(\s*["']\/(?:admin|api|internal|manage|actuator)[^"']*["']\s*\)\.permitAll/g,_0x30eb65[_0x114655(-0x90,-0x16d)]=_0x23c872(-0x17d,-0x156)+_0x23c872(-0x19f,-0x14e)+_0x114655(-0x156,-0x54)+'icati'+'on\x20on'+_0x23c872(-0xe5,-0xa4)+_0x23c872(-0xff,-0x136)+_0x23c872(-0x196,-0x1da)+_0x23c872(-0x1e1,-0x149)+_0x23c872(-0x1ed,-0x1cf)+_0x114655(-0x147,-0x18e)+_0x114655(-0x133,-0x65)+_0x114655(-0x46,-0x5c)+_0x23c872(-0x1b1,-0x1f6)+_0x114655(-0x40,0x83)+_0x114655(-0xc9,-0x119)+_0x23c872(-0x107,-0x163)+_0x23c872(-0x1bc,-0x1e4);const _0x46efd5={};_0x46efd5['id']='JAVA-'+_0x23c872(-0xfe,-0x174)+'1',_0x46efd5[_0x114655(-0x174,-0x76)]=_0x114655(-0x12c,-0x108)+'17',_0x46efd5['sever'+_0x114655(-0x163,-0xef)]=_0x23c872(-0x25d,-0x277)+_0x23c872(-0x2a5,-0x267),_0x46efd5[_0x23c872(-0x192,-0x1bd)]=_0x23c872(0x34,-0xf5)+_0x23c872(-0x50,-0x53)+_0x114655(-0x145,-0x1ca)+_0x23c872(-0x1c1,-0x26d)+'Injec'+_0x114655(-0xe1,-0x1ce)+_0x114655(-0x14e,-0xc7)+_0x114655(-0x89,-0xed)+_0x23c872(-0x34d,-0x287)+_0x23c872(-0x21e,-0x27b)+_0x23c872(-0x1d5,-0x217),_0x46efd5[_0x23c872(-0x1ac,-0x216)+'iptio'+'n']='User\x20'+_0x114655(-0xa1,0xc)+_0x23c872(-0xec,-0x42)+_0x23c872(-0xa9,-0x198)+_0x114655(0x8,0x121)+_0x114655(-0x42,0x47)+_0x114655(-0x8e,-0xae)+'guage'+_0x114655(0x94,-0x4d)+'L)\x20ex'+_0x114655(-0x50,0x2f)+_0x23c872(-0x113,-0x115)+_0x23c872(-0x1cb,-0x10f)+_0x23c872(0x1f,-0x5d)+'e\x20arb'+'itrar'+'y\x20cod'+'e.',_0x46efd5['langu'+_0x114655(-0x6c,-0xba)]=[_0x23c872(-0x122,-0x142)],_0x46efd5[_0x23c872(-0x1d6,-0xf4)+'rn']=/(?:ExpressionParser|SpelExpressionParser)\s*\(\s*\)\.parseExpression\s*\(\s*(?:request|param|input|user)/g,_0x46efd5[_0x23c872(-0xe8,-0x195)]=_0x114655(0xac,0x110)+_0x114655(-0xef,0x48)+_0x23c872(-0x1a6,-0xdb)+_0x114655(0xcb,0x58)+_0x23c872(-0x260,-0x1a6)+_0x114655(-0x11,-0xd0)+'pEL\x20e'+'xpres'+_0x114655(-0xda,-0x80)+_0x114655(-0x36,-0x15b)+_0x23c872(-0x248,-0x17e)+_0x114655(0xeb,0xb9)+_0x114655(-0x60,-0x33)+_0x23c872(-0x108,-0x84)+_0x23c872(-0x15c,-0xba)+_0x114655(-0x88,-0x1b1)+_0x23c872(-0x138,-0x242)+_0x114655(0x1e,0x5)+_0x23c872(0x5,-0x6b)+_0x23c872(-0x153,-0x209)+'.';const _0x23ea9f={};_0x23ea9f['id']='JAVA-'+_0x114655(-0x85,-0x128)+'01',_0x23ea9f[_0x23c872(-0x315,-0x279)]='CWE-2'+'95',_0x23ea9f[_0x23c872(-0x229,-0x21f)+'ity']=_0x114655(-0x172,-0x6f)+'cal',_0x23ea9f['title']=_0x23c872(-0x6b,-0xaf)+'led\x20T'+_0x23c872(-0x14b,-0x1ab)+_0x23c872(-0x171,-0x197)+'cate\x20'+_0x114655(0xc0,0x7b)+_0x114655(-0x8,0xcd)+'on',_0x23ea9f[_0x114655(-0x111,-0x180)+'iptio'+'n']=_0x23c872(-0x314,-0x1f1)+'m\x20Tru'+'stMan'+_0x23c872(-0x25f,-0x1a0)+'that\x20'+_0x23c872(-0x148,-0x27a)+_0x114655(-0xdc,-0x1bb)+_0x23c872(0x19,-0x113)+'tific'+_0x23c872(-0x139,-0x1a2)+_0x23c872(-0x2db,-0x26c)+_0x114655(-0x80,-0x9a)+_0x23c872(-0x186,-0x127)+_0x114655(-0x149,-0xdb)+'y.',_0x23ea9f['langu'+_0x23c872(-0xb9,-0x171)]=[_0x23c872(-0x5f,-0x142)],_0x23ea9f[_0x114655(0x11,-0x119)+'rn']=/X509TrustManager[^}]*checkServerTrusted[^}]*\{\s*\}/g,_0x23ea9f[_0x114655(-0x90,-0x50)]='Use\x20t'+_0x114655(0xaa,0xdc)+'fault'+_0x23c872(-0xe3,-0x1fa)+_0x114655(-0x37,-0x9d)+_0x114655(-0x53,-0x12d)+_0x114655(-0x7e,-0x91)+_0x114655(-0x132,-0x157)+_0x114655(-0xf6,-0x27)+_0x23c872(-0x259,-0x177)+_0x114655(0xf,-0xa1)+'\x20into'+_0x114655(-0x17,0x46)+_0x23c872(-0x320,-0x250)+'e.';const _0xaf31f1={};_0xaf31f1['id']=_0x23c872(-0x155,-0x1b1)+_0x114655(-0x85,-0xf4)+'02',_0xaf31f1['cwe']=_0x23c872(-0x2e0,-0x1f5)+'95';function _0x114655(_0x5baa56,_0xb0c9d2){return _0x2d8b(_0x5baa56- -0x2ce,_0xb0c9d2);}_0xaf31f1['sever'+_0x114655(-0x163,-0x78)]='criti'+'cal',_0xaf31f1[_0x23c872(-0x29a,-0x1bd)]=_0x114655(0x56,-0x4c)+_0x23c872(-0x39,-0xe3)+_0x114655(0x6e,0x47)+_0x114655(0x3a,0x7c)+_0x114655(0xc,0xed)+'ation',_0xaf31f1['descr'+'iptio'+'n']=_0x23c872(-0x166,-0x118)+_0x23c872(-0x2ba,-0x1ae)+_0x114655(-0x15,-0x10c)+_0x114655(-0xfd,-0x146)+_0x114655(0xd7,0x206)+_0x23c872(-0x152,-0x16b)+_0x114655(-0x12,-0xce)+_0x23c872(-0x1ec,-0x1ee)+'ate\x20h'+_0x23c872(0x9e,-0x97)+_0x114655(0xb9,0x114)+_0x114655(0xc,0x40)+'ation'+'.',_0xaf31f1['langu'+'ages']=[_0x23c872(-0x19,-0x142)],_0xaf31f1['patte'+'rn']=/(?:ALLOW_ALL_HOSTNAME_VERIFIER|NoopHostnameVerifier|setHostnameVerifier\s*\(\s*(?:SSLSocketFactory\.ALLOW_ALL|new\s+(?:AllowAll|Noop)))/g,_0xaf31f1[_0x23c872(-0x27b,-0x195)]='Use\x20t'+_0x23c872(-0xfb,-0x5b)+_0x114655(-0x2d,-0x68)+_0x23c872(-0x33,-0x39)+_0x114655(0x48,-0x97)+_0x23c872(-0xda,-0x102)+'ier.\x20'+_0x23c872(-0x214,-0x1f1)+_0x23c872(-0x164,-0xb9)+_0x114655(0x8a,-0x15)+_0x23c872(-0x296,-0x1fe)+_0x23c872(-0x37f,-0x274)+'perly'+_0x23c872(0x14,-0xc4)+_0x114655(-0xf7,-0x1a5)+'hostn'+_0x23c872(-0x25c,-0x205);const _0x49ae2f={};_0x49ae2f['id']='JAVA-'+_0x23c872(-0x33a,-0x201)+'01',_0x49ae2f[_0x23c872(-0x32f,-0x279)]=_0x23c872(0x9f,-0x30)+'17',_0x49ae2f['sever'+_0x114655(-0x163,-0x19d)]='mediu'+'m',_0x49ae2f[_0x23c872(-0x22c,-0x1bd)]=_0x23c872(-0x201,-0x1a7)+_0x23c872(-0x60,-0xb7)+_0x23c872(-0x5,-0xac)+_0x114655(0x18,0x3b)+'nitiz'+'ed\x20us'+_0x23c872(-0x76,-0x176)+_0x114655(-0x110,-0xfd)+_0x114655(-0x10a,0x24),_0x49ae2f[_0x23c872(-0x1af,-0x216)+_0x114655(0x76,0x111)+'n']='User\x20'+_0x114655(-0xa1,-0x19f)+_0x23c872(0x5f,-0xd0)+_0x114655(0x72,0x98)+'ateme'+'nts\x20c'+_0x23c872(-0xf8,-0x10a)+_0x23c872(-0x1d2,-0x1b5)+_0x23c872(-0x266,-0x133)+_0x23c872(-0x2d,-0x13d)+_0x23c872(-0x1a7,-0x96)+_0x114655(0x75,0x175)+_0x114655(0xe,-0xbf)+_0x23c872(-0x18d,-0xdf)+_0x23c872(-0x103,-0xca)+_0x114655(-0x6,-0x89)+_0x114655(0x5e,0x67)+_0x114655(0x16,-0x27)+_0x23c872(-0x202,-0x210)+_0x23c872(0x56,-0xa5)+_0x23c872(0x5e,-0x6e)+_0x114655(-0x30,-0x128)+_0x23c872(-0x24e,-0x172),_0x49ae2f[_0x114655(0x47,0xf8)+_0x114655(-0x6c,0xaf)]=['java'],_0x49ae2f[_0x114655(0x11,0x50)+'rn']=/(?:logger|log|LOG)\.(?:info|debug|warn|error|trace|fatal)\s*\(\s*(?:["'][^"']*["']\s*\+|\+\s*(?:request|param|input|user))/g,_0x49ae2f['fix']='Use\x20p'+_0x114655(-0x1e,-0x114)+_0x23c872(-0x1ce,-0x159)+_0x114655(0xc2,0xa7)+_0x23c872(-0x1eb,-0x225)+_0x23c872(-0xdd,-0x12b)+_0x114655(0xb6,0x130)+_0x114655(0x64,-0x76)+_0x23c872(-0xfd,-0x5e)+_0x114655(-0xe4,0x2b)+_0x114655(0x6a,0x166)+'aniti'+_0x23c872(-0x259,-0x186)+'ernam'+_0x23c872(-0x39,-0xd1)+_0x23c872(-0x388,-0x283)+_0x23c872(-0xf,-0x65)+_0x114655(-0x5d,-0x26)+_0x114655(0xe6,0x11d)+_0x23c872(-0x303,-0x286)+'p\x20pat'+_0x23c872(-0x39b,-0x280)+'.';export const javaRules=[_0x219586,_0x9f66,_0x284395,_0x4e0676,_0x399f2c,_0x3841b2,_0x1bd922,_0x4f60e6,_0x98e848,_0x548aff,_0x3c11f6,_0x556c9e,_0x1d5b00,_0x214e3c,_0x36de6b,_0x30eb65,_0x46efd5,_0x23ea9f,_0xaf31f1,_0x49ae2f];