Java Server-Side Template Injection Vulnerability Analysis

Java Server-Side Template Injection Vulnerability Analysis FreeMarker FreeMarker template files consist of four main components: (1) Text: Directly output portions (2) Comments: Using <#-- ... --> format for comments, content inside won't be output (3) Interpolation: ${...} or #{...} formatted sections, similar to placeholders that will b ...

Posted on Wed, 05 Aug 2026 16:55:40 +0000 by firmolari

Custom Velocity Templates for MyBatisPlus Code Generation

Controller Template package ${package.Controller}; import org.springframework.web.bind.annotation.RequestMapping; #if(${restControllerStyle}) import org.springframework.web.bind.annotation.RestController; #else import org.springframework.stereotype.Controller; #end #if(${superControllerClassPackage}) import ${superControllerClassPackage}; #end ...

Posted on Wed, 13 May 2026 21:34:02 +0000 by jd57