About, Qianxin detects code vulnerabilities and XSS series solves them

Solution

When the code returns Xss verification

1.JSON.toJSONString( The type of return ); Turn into String

2. HtmlUtils.htmlEscape( Above 1 Of String); Verify and filter for XSS

3. JSONObject.parseObject( Above 2 Of String, type .class) Switch back to the corresponding type

---- Anqixin , You can't detect it