Java Tomcat6日志中出现奇怪的struts2异常(操作名称[一些HTML代码!!!!]没有映射操作。)

Java Tomcat6日志中出现奇怪的struts2异常(操作名称[一些HTML代码!!!!]没有映射操作。),java,jakarta-ee,tomcat,struts2,Java,Jakarta Ee,Tomcat,Struts2,我有一个在tomcat6上运行的Web应用程序(Java+Struts2+…)。 我不知道日志显示这种异常的问题是什么: WARNING: Could not find action or result There is no Action mapped for action name ><script src=. - [unknown location] OR There is no Action mapped for action name li><li>&

我有一个在tomcat6上运行的Web应用程序(Java+Struts2+…)。 我不知道日志显示这种异常的问题是什么:

WARNING: Could not find action or result
There is no Action mapped for action name ><script src=. - [unknown location]

OR

There is no Action mapped for action name li><li><a href='. - [unknown location]

OR

There is no Action mapped for action name dth: 342,maxHeight: 400}). - [unknown location]

and more and more...!!!!
警告:找不到操作或结果

没有为Action name>
  • 映射的操作。它看起来像是试图在应用程序中查找XSS漏洞。如果是这样,请注意有人试图攻击您的应用程序。

    看起来您可能输入了脚本src=。在需要表单操作或ajax url(即操作名称)的地方,显然不会有名为script src=。在struts.xml文件中

    @AminSh:这看起来像是在检查攻击者是否可以将链接插入到您页面的导航菜单中(因此
  • ),并诱骗用户单击它。如果是这样,我认为您不必担心,直到您看到struts2报告参数设置问题为止。。。事实上,他们甚至还没有接近实现某种目标。让日志报告导致问题的用户的会话id(或用户id)可能很有趣。可能设置一个struts2错误处理程序就可以了。
    May 18, 2012 12:28:48 AM com.opensymphony.xwork2.util.logging.commons.CommonsLogger warn
    WARNING: Could not find action or result
    There is no Action mapped for action name ><script src=. - [unknown location]
        at com.opensymphony.xwork2.DefaultActionProxy.prepare(DefaultActionProxy.java:178)
        at org.apache.struts2.impl.StrutsActionProxy.prepare(StrutsActionProxy.java:61)
        at org.apache.struts2.impl.StrutsActionProxyFactory.createActionProxy(StrutsActionProxyFactory.java:39)
        at com.opensymphony.xwork2.DefaultActionProxyFactory.createActionProxy(DefaultActionProxyFactory.java:47)
        at org.apache.struts2.dispatcher.Dispatcher.serviceAction(Dispatcher.java:478)
        at org.apache.struts2.dispatcher.FilterDispatcher.doFilter(FilterDispatcher.java:395)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298)
        at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:857)
        at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:588)
        at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)
        at java.lang.Thread.run(Thread.java:636)