├── .gitignore ├── LICENSE ├── README.md ├── pom.xml └── src ├── main └── java │ └── com │ └── alibaba │ └── seckit │ ├── AbstractDecorator.java │ ├── Decorator.java │ ├── SecurityUtil.java │ ├── decorator │ ├── AbstractDecorator.java │ ├── Decorator.java │ └── xxe │ │ ├── AbstractXxeDecorator.java │ │ ├── SetFeatureDecorator.java │ │ ├── SetPropertyDecorator.java │ │ └── XMLInputFactoryDecorator.java │ ├── jdbc │ ├── Filter.java │ ├── FilterManager.java │ ├── FilterResult.java │ ├── JdbcTool.java │ ├── JdbcToolImpl.java │ ├── JdbcURLException.java │ ├── JdbcURLNotSupportedException.java │ ├── JdbcURLUnsafeException.java │ ├── UrlParser.java │ ├── filters │ │ ├── ArrowFlightSqlFilter.java │ │ ├── As400Filter.java │ │ ├── BigQueryFilter.java │ │ ├── ClickHouseFilter.java │ │ ├── ColonSeparatedUrlFilter.java │ │ ├── DB2Filter.java │ │ ├── DMFilter.java │ │ ├── DefaultFilter.java │ │ ├── ElasticSearchFilter.java │ │ ├── GreenplumFilter.java │ │ ├── Hive2Filter.java │ │ ├── HiveFilter.java │ │ ├── ImpalaFilter.java │ │ ├── InformixSqliFilter.java │ │ ├── KylinFilter.java │ │ ├── LindormFilter.java │ │ ├── MongoDBFilter.java │ │ ├── MySQLFilter.java │ │ ├── NSFilter.java │ │ ├── OTSFilter.java │ │ ├── OdpsFilter.java │ │ ├── OpenSearchFilter.java │ │ ├── OracleFilter.java │ │ ├── PhoenixThinFilter.java │ │ ├── PostgresFilter.java │ │ ├── PrestoFilter.java │ │ ├── RedisFilter.java │ │ ├── RedshiftFilter.java │ │ ├── SAPFilter.java │ │ ├── SQLServerFilter.java │ │ ├── SemicolonSeparatedUrlFilter.java │ │ ├── SnowFlakeFilter.java │ │ ├── SybaseFilter.java │ │ ├── TDEngineFilter.java │ │ ├── TeradataFilter.java │ │ ├── TrinoFilter.java │ │ └── VerticaFilter.java │ └── parser │ │ ├── BigQueryParser.java │ │ ├── ColonSeparatedUrlParser.java │ │ ├── DB2Parser.java │ │ ├── DMUrlParser.java │ │ ├── DefaultUrlParser.java │ │ ├── ElasticSearchParser.java │ │ ├── Hive2Parser.java │ │ ├── HttpPathUrlParser.java │ │ ├── KylinParser.java │ │ ├── LindormLikeUrlParser.java │ │ ├── MongoDBUrlParser.java │ │ ├── MySQLUrlParser.java │ │ ├── OpenSearchParser.java │ │ ├── OracleUrlParser.java │ │ ├── PhoenixThinUrlParser.java │ │ ├── PostgresParser.java │ │ ├── RedshiftParser.java │ │ ├── SQLServerUrlParser.java │ │ ├── SemicolonSeparatedUrlParser.java │ │ ├── SnowFlakeParser.java │ │ ├── SybaseUrlParser.java │ │ ├── TeradataUrlParser.java │ │ ├── UserPassUrlParser.java │ │ └── oracle │ │ ├── NVFactory.java │ │ ├── NVPair.java │ │ └── NVTokens.java │ ├── ssrf │ ├── HostCachePolicy.java │ ├── HttpClientsAdaptor.java │ ├── NetHooksEvent.java │ ├── NetHooksEventListener.java │ ├── SSRFAdaptor.java │ ├── SSRFChecker.java │ ├── SSRFCheckerImpl.java │ ├── SSRFNetHooksEventListener.java │ ├── SSRFResult.java │ ├── SecurityNetHooksProvider.java │ ├── checkcondition │ │ ├── ExpirationCacheSSRFNetHooksCheckCondition.java │ │ ├── SSRFNetHooksCheckCondition.java │ │ └── ThreadLocalSSRFNetHooksCheckCondition.java │ ├── decorator │ │ ├── HttpAsyncClient5Decorator.java │ │ ├── HttpAsyncClientDecorator.java │ │ ├── HttpClient5Decorator.java │ │ ├── HttpClientDecorator.java │ │ ├── OkHttp3Decorator.java │ │ └── OkHttpDecorator.java │ ├── exception │ │ ├── NetHookUnsupportedException.java │ │ └── SSRFUnsafeConnectionException.java │ ├── interceptor │ │ ├── HttpClient5Interceptor.java │ │ ├── HttpClientInterceptor.java │ │ ├── OK3Interceptor.java │ │ └── OkHttpInterceptor.java │ └── policy │ │ ├── CompatibleSsrfCheckerRegister.java │ │ ├── ExpiredCachedBasedSsrfNetHookStarter.java │ │ ├── SsrfNetHookPolicyFactory.java │ │ ├── SsrfNetHookStarter.java │ │ └── ThreadLocalBasedSsrfNetHookStarter.java │ ├── util │ ├── ClassUtil.java │ ├── EscapeStringEncoder.java │ ├── ExpiringSet.java │ ├── InetAddressResolver.java │ ├── IpFormatter.java │ ├── LRUCache.java │ ├── ReflectionUtil.java │ ├── StringUtil.java │ └── UrlUtil.java │ └── xxe │ ├── XxeTool.java │ └── XxeToolImpl.java └── test ├── java └── com │ └── alibaba │ └── seckit │ ├── jdbc │ └── FilterTest.java │ ├── ssrf │ ├── CheckURLTest.java │ ├── SSRFTest.java │ └── adaptor │ │ ├── HttpClient5Test.java │ │ ├── HttpClientTest.java │ │ ├── OK3Test.java │ │ └── OKHttpTest.java │ ├── util │ ├── EscapeStringEncoderTest.java │ ├── HttpServerForTest.java │ └── IpAddressUtilForTest.java │ └── xxe │ ├── XmlParsers.java │ └── XxeToolTest.java └── resources └── xxe ├── file.xml ├── simple.xml ├── ssrf.xml └── xinclude.xml /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/.gitignore -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/README.md -------------------------------------------------------------------------------- /pom.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/pom.xml -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/AbstractDecorator.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/AbstractDecorator.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/Decorator.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/Decorator.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/SecurityUtil.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/SecurityUtil.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/decorator/AbstractDecorator.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/decorator/AbstractDecorator.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/decorator/Decorator.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/decorator/Decorator.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/decorator/xxe/AbstractXxeDecorator.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/decorator/xxe/AbstractXxeDecorator.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/decorator/xxe/SetFeatureDecorator.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/decorator/xxe/SetFeatureDecorator.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/decorator/xxe/SetPropertyDecorator.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/decorator/xxe/SetPropertyDecorator.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/decorator/xxe/XMLInputFactoryDecorator.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/decorator/xxe/XMLInputFactoryDecorator.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/Filter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/Filter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/FilterManager.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/FilterManager.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/FilterResult.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/FilterResult.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/JdbcTool.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/JdbcTool.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/JdbcToolImpl.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/JdbcToolImpl.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/JdbcURLException.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/JdbcURLException.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/JdbcURLNotSupportedException.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/JdbcURLNotSupportedException.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/JdbcURLUnsafeException.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/JdbcURLUnsafeException.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/UrlParser.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/UrlParser.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/ArrowFlightSqlFilter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/ArrowFlightSqlFilter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/As400Filter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/As400Filter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/BigQueryFilter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/BigQueryFilter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/ClickHouseFilter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/ClickHouseFilter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/ColonSeparatedUrlFilter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/ColonSeparatedUrlFilter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/DB2Filter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/DB2Filter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/DMFilter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/DMFilter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/DefaultFilter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/DefaultFilter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/ElasticSearchFilter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/ElasticSearchFilter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/GreenplumFilter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/GreenplumFilter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/Hive2Filter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/Hive2Filter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/HiveFilter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/HiveFilter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/ImpalaFilter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/ImpalaFilter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/InformixSqliFilter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/InformixSqliFilter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/KylinFilter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/KylinFilter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/LindormFilter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/LindormFilter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/MongoDBFilter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/MongoDBFilter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/MySQLFilter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/MySQLFilter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/NSFilter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/NSFilter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/OTSFilter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/OTSFilter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/OdpsFilter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/OdpsFilter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/OpenSearchFilter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/OpenSearchFilter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/OracleFilter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/OracleFilter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/PhoenixThinFilter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/PhoenixThinFilter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/PostgresFilter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/PostgresFilter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/PrestoFilter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/PrestoFilter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/RedisFilter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/RedisFilter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/RedshiftFilter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/RedshiftFilter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/SAPFilter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/SAPFilter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/SQLServerFilter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/SQLServerFilter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/SemicolonSeparatedUrlFilter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/SemicolonSeparatedUrlFilter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/SnowFlakeFilter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/SnowFlakeFilter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/SybaseFilter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/SybaseFilter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/TDEngineFilter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/TDEngineFilter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/TeradataFilter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/TeradataFilter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/TrinoFilter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/TrinoFilter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/filters/VerticaFilter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/filters/VerticaFilter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/parser/BigQueryParser.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/parser/BigQueryParser.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/parser/ColonSeparatedUrlParser.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/parser/ColonSeparatedUrlParser.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/parser/DB2Parser.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/parser/DB2Parser.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/parser/DMUrlParser.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/parser/DMUrlParser.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/parser/DefaultUrlParser.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/parser/DefaultUrlParser.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/parser/ElasticSearchParser.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/parser/ElasticSearchParser.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/parser/Hive2Parser.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/parser/Hive2Parser.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/parser/HttpPathUrlParser.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/parser/HttpPathUrlParser.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/parser/KylinParser.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/parser/KylinParser.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/parser/LindormLikeUrlParser.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/parser/LindormLikeUrlParser.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/parser/MongoDBUrlParser.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/parser/MongoDBUrlParser.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/parser/MySQLUrlParser.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/parser/MySQLUrlParser.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/parser/OpenSearchParser.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/parser/OpenSearchParser.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/parser/OracleUrlParser.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/parser/OracleUrlParser.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/parser/PhoenixThinUrlParser.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/parser/PhoenixThinUrlParser.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/parser/PostgresParser.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/parser/PostgresParser.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/parser/RedshiftParser.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/parser/RedshiftParser.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/parser/SQLServerUrlParser.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/parser/SQLServerUrlParser.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/parser/SemicolonSeparatedUrlParser.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/parser/SemicolonSeparatedUrlParser.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/parser/SnowFlakeParser.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/parser/SnowFlakeParser.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/parser/SybaseUrlParser.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/parser/SybaseUrlParser.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/parser/TeradataUrlParser.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/parser/TeradataUrlParser.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/parser/UserPassUrlParser.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/parser/UserPassUrlParser.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/parser/oracle/NVFactory.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/parser/oracle/NVFactory.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/parser/oracle/NVPair.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/parser/oracle/NVPair.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/jdbc/parser/oracle/NVTokens.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/jdbc/parser/oracle/NVTokens.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/ssrf/HostCachePolicy.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/ssrf/HostCachePolicy.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/ssrf/HttpClientsAdaptor.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/ssrf/HttpClientsAdaptor.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/ssrf/NetHooksEvent.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/ssrf/NetHooksEvent.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/ssrf/NetHooksEventListener.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/ssrf/NetHooksEventListener.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/ssrf/SSRFAdaptor.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/ssrf/SSRFAdaptor.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/ssrf/SSRFChecker.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/ssrf/SSRFChecker.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/ssrf/SSRFCheckerImpl.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/ssrf/SSRFCheckerImpl.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/ssrf/SSRFNetHooksEventListener.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/ssrf/SSRFNetHooksEventListener.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/ssrf/SSRFResult.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/ssrf/SSRFResult.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/ssrf/SecurityNetHooksProvider.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/ssrf/SecurityNetHooksProvider.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/ssrf/checkcondition/ExpirationCacheSSRFNetHooksCheckCondition.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/ssrf/checkcondition/ExpirationCacheSSRFNetHooksCheckCondition.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/ssrf/checkcondition/SSRFNetHooksCheckCondition.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/ssrf/checkcondition/SSRFNetHooksCheckCondition.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/ssrf/checkcondition/ThreadLocalSSRFNetHooksCheckCondition.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/ssrf/checkcondition/ThreadLocalSSRFNetHooksCheckCondition.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/ssrf/decorator/HttpAsyncClient5Decorator.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/ssrf/decorator/HttpAsyncClient5Decorator.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/ssrf/decorator/HttpAsyncClientDecorator.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/ssrf/decorator/HttpAsyncClientDecorator.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/ssrf/decorator/HttpClient5Decorator.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/ssrf/decorator/HttpClient5Decorator.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/ssrf/decorator/HttpClientDecorator.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/ssrf/decorator/HttpClientDecorator.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/ssrf/decorator/OkHttp3Decorator.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/ssrf/decorator/OkHttp3Decorator.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/ssrf/decorator/OkHttpDecorator.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/ssrf/decorator/OkHttpDecorator.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/ssrf/exception/NetHookUnsupportedException.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/ssrf/exception/NetHookUnsupportedException.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/ssrf/exception/SSRFUnsafeConnectionException.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/ssrf/exception/SSRFUnsafeConnectionException.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/ssrf/interceptor/HttpClient5Interceptor.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/ssrf/interceptor/HttpClient5Interceptor.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/ssrf/interceptor/HttpClientInterceptor.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/ssrf/interceptor/HttpClientInterceptor.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/ssrf/interceptor/OK3Interceptor.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/ssrf/interceptor/OK3Interceptor.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/ssrf/interceptor/OkHttpInterceptor.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/ssrf/interceptor/OkHttpInterceptor.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/ssrf/policy/CompatibleSsrfCheckerRegister.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/ssrf/policy/CompatibleSsrfCheckerRegister.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/ssrf/policy/ExpiredCachedBasedSsrfNetHookStarter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/ssrf/policy/ExpiredCachedBasedSsrfNetHookStarter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/ssrf/policy/SsrfNetHookPolicyFactory.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/ssrf/policy/SsrfNetHookPolicyFactory.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/ssrf/policy/SsrfNetHookStarter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/ssrf/policy/SsrfNetHookStarter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/ssrf/policy/ThreadLocalBasedSsrfNetHookStarter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/ssrf/policy/ThreadLocalBasedSsrfNetHookStarter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/util/ClassUtil.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/util/ClassUtil.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/util/EscapeStringEncoder.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/util/EscapeStringEncoder.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/util/ExpiringSet.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/util/ExpiringSet.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/util/InetAddressResolver.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/util/InetAddressResolver.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/util/IpFormatter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/util/IpFormatter.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/util/LRUCache.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/util/LRUCache.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/util/ReflectionUtil.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/util/ReflectionUtil.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/util/StringUtil.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/util/StringUtil.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/util/UrlUtil.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/util/UrlUtil.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/xxe/XxeTool.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/xxe/XxeTool.java -------------------------------------------------------------------------------- /src/main/java/com/alibaba/seckit/xxe/XxeToolImpl.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/main/java/com/alibaba/seckit/xxe/XxeToolImpl.java -------------------------------------------------------------------------------- /src/test/java/com/alibaba/seckit/jdbc/FilterTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/test/java/com/alibaba/seckit/jdbc/FilterTest.java -------------------------------------------------------------------------------- /src/test/java/com/alibaba/seckit/ssrf/CheckURLTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/test/java/com/alibaba/seckit/ssrf/CheckURLTest.java -------------------------------------------------------------------------------- /src/test/java/com/alibaba/seckit/ssrf/SSRFTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/test/java/com/alibaba/seckit/ssrf/SSRFTest.java -------------------------------------------------------------------------------- /src/test/java/com/alibaba/seckit/ssrf/adaptor/HttpClient5Test.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/test/java/com/alibaba/seckit/ssrf/adaptor/HttpClient5Test.java -------------------------------------------------------------------------------- /src/test/java/com/alibaba/seckit/ssrf/adaptor/HttpClientTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/test/java/com/alibaba/seckit/ssrf/adaptor/HttpClientTest.java -------------------------------------------------------------------------------- /src/test/java/com/alibaba/seckit/ssrf/adaptor/OK3Test.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/test/java/com/alibaba/seckit/ssrf/adaptor/OK3Test.java -------------------------------------------------------------------------------- /src/test/java/com/alibaba/seckit/ssrf/adaptor/OKHttpTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/test/java/com/alibaba/seckit/ssrf/adaptor/OKHttpTest.java -------------------------------------------------------------------------------- /src/test/java/com/alibaba/seckit/util/EscapeStringEncoderTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/test/java/com/alibaba/seckit/util/EscapeStringEncoderTest.java -------------------------------------------------------------------------------- /src/test/java/com/alibaba/seckit/util/HttpServerForTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/test/java/com/alibaba/seckit/util/HttpServerForTest.java -------------------------------------------------------------------------------- /src/test/java/com/alibaba/seckit/util/IpAddressUtilForTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/test/java/com/alibaba/seckit/util/IpAddressUtilForTest.java -------------------------------------------------------------------------------- /src/test/java/com/alibaba/seckit/xxe/XmlParsers.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/test/java/com/alibaba/seckit/xxe/XmlParsers.java -------------------------------------------------------------------------------- /src/test/java/com/alibaba/seckit/xxe/XxeToolTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/test/java/com/alibaba/seckit/xxe/XxeToolTest.java -------------------------------------------------------------------------------- /src/test/resources/xxe/file.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/test/resources/xxe/file.xml -------------------------------------------------------------------------------- /src/test/resources/xxe/simple.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/test/resources/xxe/simple.xml -------------------------------------------------------------------------------- /src/test/resources/xxe/ssrf.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/test/resources/xxe/ssrf.xml -------------------------------------------------------------------------------- /src/test/resources/xxe/xinclude.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/alibaba/seckit/HEAD/src/test/resources/xxe/xinclude.xml --------------------------------------------------------------------------------