java - 在控制器使用解码为什么会引起安全性问题?

Question

URLDecoder.decode这句话为什么会被安全测试工具测到了造成了注入攻击?

Answer 1

It should not be an injection attack caused by this sentence itself. It should be that the result after you decode the URL contains injectable parameters. Specific suggestions are to post some code and debugging logs