Method Test

JarFileReader.java:6–20

(String jarName,String classname)

public class JarFileReader {
    public static void Test(String jarName,String classname) throws IOException {
        URL url1 = new URL("jar:file:"+jarName.replaceAll("\\","/")+"!"+classname);
        URL url2 = new URL("jar:file:"+jarName.replaceAll("\\","/")+"!"+classname);
// 标准输入流
        try {
            InputStream is1 = url1.openStream();
            InputStream is2 = url2.openStream();
            if (processEvilPackage(is1)&&processReadObject(is2)) {
                System.out.println(classname + "       this class maybe have XXE!!!!!!!!!");
            }
        }catch (Exception e)
        {
            System.out.println(classname + "  java.io.FileNotFoundException");
        }
    }

    private static boolean processEvilPackage(InputStream input) throws IOException {
        InputStreamReader isr = new InputStreamReader(input);