https://xvshifu.github.io/xvsf/categories/java%E5%9F%BA%E7%A1%80java%E5%AE%89%E5%85%A8/Recent content in Java基础&Java安全 on xvsfhttps://xvshifu.github.io/xvsf/img/1.pnghttps://xvshifu.github.io/xvsf/img/1.pngHugo -- 0.162.1zh-cnThu, 27 Nov 2025 21:00:00 +0800https://xvshifu.github.io/xvsf/posts/cve-2022-22947spring-cloud-gateway-%E5%AD%A6%E4%B9%A0--spel-%E7%9A%84%E5%A4%9A%E7%A7%8D%E6%B3%A8%E5%85%A5/Thu, 27 Nov 2025 21:00:00 +0800https://xvshifu.github.io/xvsf/posts/cve-2022-22947spring-cloud-gateway-%E5%AD%A6%E4%B9%A0--spel-%E7%9A%84%E5%A4%9A%E7%A7%8D%E6%B3%A8%E5%85%A5/CVE-2022-22947——Spring Cloud Gateway 学习 &amp; SpEL 的多种注入https://xvshifu.github.io/xvsf/posts/el-%E8%A1%A8%E8%BE%BE%E5%BC%8F%E6%B3%A8%E5%85%A5/Mon, 17 Nov 2025 11:01:00 +0800https://xvshifu.github.io/xvsf/posts/el-%E8%A1%A8%E8%BE%BE%E5%BC%8F%E6%B3%A8%E5%85%A5/EL 表达式注入https://xvshifu.github.io/xvsf/posts/spel-%E8%A1%A8%E8%BE%BE%E5%BC%8F%E6%B3%A8%E5%85%A5/Mon, 17 Nov 2025 11:00:00 +0800https://xvshifu.github.io/xvsf/posts/spel-%E8%A1%A8%E8%BE%BE%E5%BC%8F%E6%B3%A8%E5%85%A5/SpEL 表达式注入https://xvshifu.github.io/xvsf/posts/java%E5%86%85%E5%AD%98%E9%A9%ACtomcat-valve%E5%9E%8B%E7%9A%84%E4%B8%89%E7%A7%8D%E6%B3%A8%E5%85%A5/Sat, 08 Nov 2025 15:04:00 +0800https://xvshifu.github.io/xvsf/posts/java%E5%86%85%E5%AD%98%E9%A9%ACtomcat-valve%E5%9E%8B%E7%9A%84%E4%B8%89%E7%A7%8D%E6%B3%A8%E5%85%A5/Java内存马——Tomcat Valve型的三种注入https://xvshifu.github.io/xvsf/posts/java-%E5%86%85%E5%AD%98%E9%A9%AC%E7%AC%AC%E5%9B%9B%E7%AF%87---agent-%E5%86%85%E5%AD%98%E9%A9%AC/Sat, 08 Nov 2025 15:03:00 +0800https://xvshifu.github.io/xvsf/posts/java-%E5%86%85%E5%AD%98%E9%A9%AC%E7%AC%AC%E5%9B%9B%E7%AF%87---agent-%E5%86%85%E5%AD%98%E9%A9%AC/Java 内存马第四篇 - Agent 内存马https://xvshifu.github.io/xvsf/posts/java-%E5%86%85%E5%AD%98%E9%A9%AC%E7%AC%AC%E4%B8%89%E7%AF%87---spring-%E5%86%85%E5%AD%98%E9%A9%AC/Sat, 08 Nov 2025 15:02:00 +0800https://xvshifu.github.io/xvsf/posts/java-%E5%86%85%E5%AD%98%E9%A9%AC%E7%AC%AC%E4%B8%89%E7%AF%87---spring-%E5%86%85%E5%AD%98%E9%A9%AC/Java 内存马第三篇 - Spring 内存马https://xvshifu.github.io/xvsf/posts/java-%E5%86%85%E5%AD%98%E9%A9%AC%E7%AC%AC%E4%BA%8C%E7%AF%87---tomcat-%E5%86%85%E5%AD%98%E9%A9%AC/Sat, 08 Nov 2025 15:01:00 +0800https://xvshifu.github.io/xvsf/posts/java-%E5%86%85%E5%AD%98%E9%A9%AC%E7%AC%AC%E4%BA%8C%E7%AF%87---tomcat-%E5%86%85%E5%AD%98%E9%A9%AC/Java 内存马第二篇 - Tomcat 内存马https://xvshifu.github.io/xvsf/posts/java-%E5%86%85%E5%AD%98%E9%A9%AC%E7%AC%AC%E4%B8%80%E7%AF%87---%E5%9F%BA%E7%A1%80/Sat, 08 Nov 2025 15:00:00 +0800https://xvshifu.github.io/xvsf/posts/java-%E5%86%85%E5%AD%98%E9%A9%AC%E7%AC%AC%E4%B8%80%E7%AF%87---%E5%9F%BA%E7%A1%80/Java 内存马第一篇 - 基础https://xvshifu.github.io/xvsf/posts/fastjson%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96/Tue, 21 Oct 2025 15:00:00 +0800https://xvshifu.github.io/xvsf/posts/fastjson%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96/FastJson反序列化https://xvshifu.github.io/xvsf/posts/shiro%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96/Tue, 21 Oct 2025 15:00:00 +0800https://xvshifu.github.io/xvsf/posts/shiro%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96/Shiro反序列化https://xvshifu.github.io/xvsf/posts/jndi/Wed, 24 Sep 2025 21:00:00 +0800https://xvshifu.github.io/xvsf/posts/jndi/JNDIhttps://xvshifu.github.io/xvsf/posts/rmi/Sat, 20 Sep 2025 15:00:00 +0800https://xvshifu.github.io/xvsf/posts/rmi/RMI基础及几种攻击方式https://xvshifu.github.io/xvsf/posts/cc4_cc2_cc5_cc7/Tue, 02 Sep 2025 19:00:00 +0800https://xvshifu.github.io/xvsf/posts/cc4_cc2_cc5_cc7/Java 反序列化学习 - CC4&amp;CC2&amp;CC5&amp;CC7链https://xvshifu.github.io/xvsf/posts/cc3/Mon, 01 Sep 2025 17:00:00 +0800https://xvshifu.github.io/xvsf/posts/cc3/Java 反序列化学习 - CC3链https://xvshifu.github.io/xvsf/posts/cc6/Sun, 31 Aug 2025 15:00:00 +0800https://xvshifu.github.io/xvsf/posts/cc6/Java 反序列化学习 - CC6链https://xvshifu.github.io/xvsf/posts/cc1/Sat, 30 Aug 2025 15:00:00 +0800https://xvshifu.github.io/xvsf/posts/cc1/Java 反序列化学习 - CC1链https://xvshifu.github.io/xvsf/posts/java%E5%BA%8F%E5%88%97%E5%8C%96%E4%B8%8E%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96/Tue, 26 Aug 2025 15:00:00 +0800https://xvshifu.github.io/xvsf/posts/java%E5%BA%8F%E5%88%97%E5%8C%96%E4%B8%8E%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96/Java 反序列化学习https://xvshifu.github.io/xvsf/posts/springboot/Thu, 14 Aug 2025 14:00:00 +0800https://xvshifu.github.io/xvsf/posts/springboot/SpringBoothttps://xvshifu.github.io/xvsf/posts/spring/Tue, 12 Aug 2025 14:00:00 +0800https://xvshifu.github.io/xvsf/posts/spring/Springhttps://xvshifu.github.io/xvsf/posts/javaee%E5%AE%89%E5%85%A8%E5%BC%80%E5%8F%91/Tue, 12 Aug 2025 00:00:00 +0000https://xvshifu.github.io/xvsf/posts/javaee%E5%AE%89%E5%85%A8%E5%BC%80%E5%8F%91/JavaEE 安全开发实践，Web 应用安全编码规范https://xvshifu.github.io/xvsf/posts/javase%E5%9F%BA%E7%A1%80%E5%AD%A6%E4%B9%A0/Tue, 12 Aug 2025 00:00:00 +0000https://xvshifu.github.io/xvsf/posts/javase%E5%9F%BA%E7%A1%80%E5%AD%A6%E4%B9%A0/JavaSE 基础知识学习笔记，Java 核心技术总结https://xvshifu.github.io/xvsf/posts/%E6%B3%A8%E8%A7%A3%E5%92%8C%E5%8F%8D%E5%B0%84/Tue, 12 Aug 2025 00:00:00 +0000https://xvshifu.github.io/xvsf/posts/%E6%B3%A8%E8%A7%A3%E5%92%8C%E5%8F%8D%E5%B0%84/<h1 id="注解">注解</h1> <h2 id="annotation">Annotation</h2> <ul> <li>作用： <ul> <li>不是程序本身，可以对程序做出解释</li> <li>可以被其他程序（比如：编译器等）读取</li> </ul> </li> <li>格式： <ul> <li>注解是以“@注释名”在代码中国存在的，可以添加一些参数值</li> </ul> </li> <li>可以附加在 package、class、method、field 等上面，相当于给他们添加了额外的辅助信息，我们可以通过反射机制编程实现对这些元数据的访问</li> </ul> <h2 id="内置注解">内置注解</h2> <ul> <li>@Override:定义在java.lang.Override 中，只适用于修饰方法，表示重写方法</li> <li>@Deprecated: 定义在 java.lang.Deprecated 中 ，可以用于修饰方法、属性、类，表示不鼓励程序员使用这样的元素</li> <li>@SuppressWarnings: 定义在java.labg.SuppressWarnings 中，用来抑制编译时的警告信息，但该注释需要添加参数</li> </ul> <div class="code-block-container" id="code-1780036574763953154" data-expanded="false" role="region" aria-labelledby="btn-code-1780036574763953154"> <div class="code-header"> <div class="mac-buttons"> <span class="mac-button red"></span> <span class="mac-button yellow"></span> <span class="mac-button green"></span> </div> <span class="code-language">java</span> <div class="code-actions"> <button class="copy-btn" title="Copy" aria-label="复制代码"> <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><rect x="9" y="9" width="13" height="13" rx="2" ry="2"></rect><path d="M5 15H4a2 2 0 0 1-2-2V4a2 2 0 0 1 2-2h9a2 2 0 0 1 2 2v1"></path></svg> </button> <button class="toggle-btn" id="btn-code-1780036574763953154" title="Toggle" aria-expanded="false" aria-controls="code-1780036574763953154" aria-label="展开或折叠代码块"> <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-down"><polyline points="6 9 12 15 18 9"></polyline></svg> </button> </div> </div> <div class="code-content" id="code-1780036574763953154-content"><div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt" id="1"><span class="lnlinks"> 1</span> </span><span class="lnt" id="2"><span class="lnlinks"> 2</span> </span><span class="lnt" id="3"><span class="lnlinks"> 3</span> </span><span class="lnt" id="4"><span class="lnlinks"> 4</span> </span><span class="lnt" id="5"><span class="lnlinks"> 5</span> </span><span class="lnt" id="6"><span class="lnlinks"> 6</span> </span><span class="lnt" id="7"><span class="lnlinks"> 7</span> </span><span class="lnt" id="8"><span class="lnlinks"> 8</span> </span><span class="lnt" id="9"><span class="lnlinks"> 9</span> </span><span class="lnt" id="10"><span class="lnlinks">10</span> </span><span class="lnt" id="11"><span class="lnlinks">11</span> </span><span class="lnt" id="12"><span class="lnlinks">12</span> </span><span class="lnt" id="13"><span class="lnlinks">13</span> </span><span class="lnt" id="14"><span class="lnlinks">14</span> </span><span class="lnt" id="15"><span class="lnlinks">15</span> </span><span class="lnt" id="16"><span class="lnlinks">16</span> </span><span class="lnt" id="17"><span class="lnlinks">17</span> </span><span class="lnt" id="18"><span class="lnlinks">18</span> </span><span class="lnt" id="19"><span class="lnlinks">19</span> </span><span class="lnt" id="20"><span class="lnlinks">20</span> </span><span class="lnt" id="21"><span class="lnlinks">21</span> </span><span class="lnt" id="22"><span class="lnlinks">22</span> </span><span class="lnt" id="23"><span class="lnlinks">23</span> </span><span class="lnt" id="24"><span class="lnlinks">24</span> </span><span class="lnt" id="25"><span class="lnlinks">25</span> </span><span class="lnt" id="26"><span class="lnlinks">26</span> </span><span class="lnt" id="27"><span class="lnlinks">27</span> </span><span class="lnt" id="28"><span class="lnlinks">28</span> </span><span class="lnt" id="29"><span class="lnlinks">29</span> </span><span class="lnt" id="30"><span class="lnlinks">30</span> </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-java" data-lang="java"><span class="line"><span class="cl"><span class="kn">package</span><span class="w"> </span><span class="nn">com.kuang.annotation</span><span class="p">;</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="kn">import</span><span class="w"> </span><span class="nn">java.util.ArrayList</span><span class="p">;</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="kn">import</span><span class="w"> </span><span class="nn">java.util.List</span><span class="p">;</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="c1">//什么是注解</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="kd">public</span><span class="w"> </span><span class="kd">class</span> <span class="nc">Test01</span><span class="w"> </span><span class="kd">extends</span><span class="w"> </span><span class="n">Object</span><span class="w"> </span><span class="p">{</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="c1">//@Override 重写的注解</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="nd">@Override</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="kd">public</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="nf">toString</span><span class="p">()</span><span class="w"> </span><span class="p">{</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="kd">super</span><span class="p">.</span><span class="na">toString</span><span class="p">();</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="p">}</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="c1">//@Deprecated 不推荐程序员使用，但可以使用，或者存在更好的方式</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="nd">@Deprecated</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="kd">public</span><span class="w"> </span><span class="kd">static</span><span class="w"> </span><span class="kt">void</span><span class="w"> </span><span class="nf">test</span><span class="p">()</span><span class="w"> </span><span class="p">{</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="n">System</span><span class="p">.</span><span class="na">out</span><span class="p">.</span><span class="na">println</span><span class="p">(</span><span class="s">&#34;Deprecated&#34;</span><span class="p">);</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="p">}</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="c1">//镇压警告</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="nd">@SuppressWarnings</span><span class="p">(</span><span class="s">&#34;all&#34;</span><span class="p">)</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="kd">public</span><span class="w"> </span><span class="kt">void</span><span class="w"> </span><span class="nf">test02</span><span class="p">()</span><span class="w"> </span><span class="p">{</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="n">List</span><span class="w"> </span><span class="n">list</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">new</span><span class="w"> </span><span class="n">ArrayList</span><span class="p">();</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="p">}</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="kd">public</span><span class="w"> </span><span class="kd">static</span><span class="w"> </span><span class="kt">void</span><span class="w"> </span><span class="nf">main</span><span class="p">(</span><span class="n">String</span><span class="o">[]</span><span class="w"> </span><span class="n">args</span><span class="p">)</span><span class="w"> </span><span class="p">{</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="n">test</span><span class="p">();</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="p">}</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="p">}</span></span></span></code></pre></td></tr></table> </div> </div></div> </div><h2 id="元注解">元注解</h2> <ul> <li> <p>作用：负责注解其他注解的注解</p>