Java Server-Side Template Injection Vulnerability Analysis
Java Server-Side Template Injection Vulnerability Analysis
FreeMarker
FreeMarker template files consist of four main components:
(1) Text: Directly output portions
(2) Comments: Using <#-- ... --> format for comments, content inside won't be output
(3) Interpolation: ${...} or #{...} formatted sections, similar to placeholders that will b ...
Posted on Wed, 05 Aug 2026 16:55:40 +0000 by firmolari
Custom Velocity Templates for MyBatisPlus Code Generation
Controller Template
package ${package.Controller};
import org.springframework.web.bind.annotation.RequestMapping;
#if(${restControllerStyle})
import org.springframework.web.bind.annotation.RestController;
#else
import org.springframework.stereotype.Controller;
#end
#if(${superControllerClassPackage})
import ${superControllerClassPackage};
#end ...
Posted on Wed, 13 May 2026 21:34:02 +0000 by jd57