package com.juick.www; import org.springframework.core.annotation.Order; import org.springframework.web.bind.WebDataBinder; import org.springframework.web.bind.annotation.ControllerAdvice; import org.springframework.web.bind.annotation.InitBinder; @ControllerAdvice @Order(10000) public class BinderHandler { @InitBinder public void setAllowedFields(WebDataBinder dataBinder) { String[] denylist = new String[] { "class.*", "Class.*", "*.class.*", "*.Class.*" }; dataBinder.setDisallowedFields(denylist); } }