fastjson/src/main/java/com/alibaba/fastjson/support/spring/FastJsonJsonView.java

Line 271 in 75a0024

| | String value = request.getParameter(name); |

fastjson/src/main/java/com/alibaba/fastjson/support/spring/FastJsonJsonView.java

Line 278 in 75a0024

| | logger.debug("Ignoring invalid jsonp parameter value: "+ value); |

如果程序允许日志记录未经验证的用户输入，会导致日志伪造攻击甚至是注入恶意信息。