@Controller
public class RestController {
  @GET
  public String returnString() {
     String str = "hello"; 
     return "hi " + str;         //here is the issue
}

fortify将字符串连接标记为跨站点脚本。如何更改此连接以使其不跨站点脚本。我试过使用string.concat，但还是一样的问题。