1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26

// 假设 params 为用户输入， text 为 DOM 节点
// bad：将不可信内容带入HTML标签操作
const { user } = params;
// ...
text.innerHTML = `Follow @${user}`;

// good: innerHTML操作前，对特殊字符编码转义
function htmlEncode(iStr) {
	let sStr = iStr;
	sStr = sStr.replace(/&/g, "&");
	sStr = sStr.replace(/>/g, ">");
	sStr = sStr.replace(/</g, "&lt;");
	sStr = sStr.replace(/"/g, "&quot;");
	sStr = sStr.replace(/'/g, "&#39;");
	return sStr;
}

let { user } = params;
user = htmlEncode(user);
// ...
text.innerHTML = `Follow @${user}`;

// good: 使用安全的DOM API替代innerHTML
const { user } = params;
// ...
text.innerText = `Follow @${user}`;

1

mvn verify -DskipTests=true

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17

<build>
    <plugins>
        <!-- owasp check CVE 检查依赖包是否有漏洞  command: mvn verify -->
        <plugin>
            <groupId>org.owasp</groupId>
            <artifactId>dependency-check-maven</artifactId>
            <version>6.5.1</version>
            <executions>
                <execution>
                    <goals>
                        <goal>check</goal>
                    </goals>
                </execution>
            </executions>
        </plugin>
    </plugins>
</build>

1

wget http://eclipse.stu.edu.tw/mat/1.9.0/rcp/MemoryAnalyzer-1.9.0.20190605-linux.gtk.x86_64.zip

1

vi MemoryAnalyzer.ini

1
2
3
4
5
6

-startup
plugins/org.eclipse.equinox.launcher_1.5.0.v20180512-1130.jar
--launcher.library
plugins/org.eclipse.equinox.launcher.gtk.linux.x86_64_1.1.700.v20180518-1200
-vmargs
-Xmx10240m

1

./ParseHeapDump.sh [hprof文件] org.eclipse.mat.api:suspects org.eclipse.mat.api:overview org.eclipse.mat.api:top_components

1
2
3

export JAVA_HOME=/opt/soft/jdk/jdk1.8.0_66/
export PATH=$JAVA_HOME/bin:$PATH
"$(dirname -- "$0")"/MemoryAnalyzer -consolelog -application org.eclipse.mat.api.parse "$@"

1
2
3
4
5
6
7
8

<!--引用本地jar包-->
<dependency>
    <groupId>com.mytest</groupId>
    <artifactId>test</artifactId>
    <version>1.0</version>
    <scope>system</scope>
    <systemPath>${pom.basedir}/lib/test-1.0.jar</systemPath>
</dependency>

1
2
3
4
5

from faker import Faker

fake = Faker(locale='zh_CN') 
#为生成数据的文化选项，默认为en_US，只有使用了相关文化，才能生成对应的随机信息
#由于文化差异，设置文化的时候会导致有些字段比如省份等会出现方法报错等问题

1
2

pip install pandas
pip install matplotlib

1

pip install numpy

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16

import matplotlib.pyplot as plt

# 设置黑体，支持中文
plt.rcParams['font.sans-serif'] = ['SimHei']
# 设置字体样式
plt.rcParams['font.family'] = 'sans-serif'
# 设置字体大小
plt.rcParams['font.size'] = '16'
# 伸展字体，很少用
plt.rcParams['font.stretch'] = 'normal'
# 字体样式
plt.rcParams['font.style'] = 'normal'
# 小型大写字母，大写字母大一号，小写字母全部大写但是比大写小一号；中文没影响
plt.rcParams['font.variant'] = 'normal'
# 字体粗细，比如加粗bold
plt.rcParams['font.weight'] = 'normal'