Request path acquisition method and device, computer equipment and storage medium

Abstract

The invention relates to a request path obtaining method and device, computer equipment and a storage medium, and the request path obtaining method comprises the steps of: obtaining a target annotation name, wherein the target annotation name at least comprises a controller class annotation name, and the controller class annotation name is an identifier of a request interface class file; obtaining an original file and reading a to-be-identified annotation name in the original file; comparing a to-be-identified annotation name in the original file with the target annotation name, and if at least one same annotation name exists in the to-be-identified annotation name and the target annotation name, marking the original file as a target file; and reading the annotation content in the target file, and obtaining a request path according to the annotation content. Through adoption of the invention, the problem that the accuracy of obtaining the request path is relatively low is solved, and the technical effect of accurately obtaining the request path is realized.

Description

technical field [0001] The application relates to the field of java data auditing, in particular to a request path method, device, computer equipment and storage medium. Background technique [0002] Web applications are an important form of Internet applications, and are the first choice for portal applications of key social information systems such as finance, operators, government departments, and education departments. With the announcement of various security incidents and security vulnerabilities with huge impact and harm, people are paying more and more attention to the security of the website application itself, and there are more and more requirements for website application security vulnerability detection. Java web development has gone through nearly 20 years since 1999. Spring, Struts, Hibernate, and labtis-based business or database frameworks have been launched. There are many molds in it that have the function of protecting Java web applications from encounter...

AI Technical Summary

Problems solved by technology

But various tools do not achieve greater inspection coverage

This is because audit tools generally use automated crawlers and manual clicks, which can only scan based on the existing request addresses on the interactive page, but it is difficult to obtain the request addresses hidden in the Java package in the underlying structure

[0003] In the related art, the source code of the java file is read by FileReader, and the specified character field in the java file is obtained by using a regular matching method, and then the request path is obtained; however, since the specified character field is specified by the auditor, the accuracy of the character field and the audit The level of personnel is related, so the accuracy rate of obtaining the request path through the regular matching method is low, and there will be false positives in the request path

[0004] At present, no effective solution has been proposed for the technical problem of low accuracy of the request path obtained in related technologies

Images