Drun1baby
diff --git a/‎.DS_Store‎
0 Bytes b/‎.DS_Store‎
0 Bytes
diff --git a/‎JavaSecurity/.DS_Store‎
0 Bytes b/‎JavaSecurity/.DS_Store‎
0 Bytes
diff --git a/‎JavaSecurity/SnakeYaml/src/main/java/BypassAnalyze/bypassBlackList.java‎
Lines changed: 1 addition & 1 deletion b/‎JavaSecurity/SnakeYaml/src/main/java/BypassAnalyze/bypassBlackList.java‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎JavaSecurity/SnakeYaml/target/classes/BypassAnalyze/bypassBlackList.class‎
0 Bytes b/‎JavaSecurity/SnakeYaml/target/classes/BypassAnalyze/bypassBlackList.class‎
0 Bytes
@@ -15,7 +15,7 @@ public String yamlLoads(String payload) {
 
         try {
             for (String riskyToken : RISKY_STR_ARR) {
-                if (payload.contains("!!")) {
+                if (payload.contains(riskyToken)) {
                     System.out.println("can not has malicious remote script");
                     return "failed";
                 }
Original file line number	Diff line number	Diff line change
`@@ -15,7 +15,7 @@ public String yamlLoads(String payload) {`
`15`	`15`
`16`	`16`	`try {`
`17`	`17`	`for (String riskyToken : RISKY_STR_ARR) {`
`18`		`- if (payload.contains("!!")) {`
	`18`	`+ if (payload.contains(riskyToken)) {`
`19`	`19`	`System.out.println("can not has malicious remote script");`
`20`	`20`	`return "failed";`
`21`	`21`	`}`