@@ -15,7 +15,7 @@ public String yamlLoads(String payload) {
 
         try {
             for (String riskyToken : RISKY_STR_ARR) {
-                if (payload.contains("!!")) {
+                if (payload.contains(riskyToken)) {
                     System.out.println("can not has malicious remote script");
                     return "failed";
                 }
Original file line number	Diff line number	Diff line change
@@ -15,7 +15,7 @@ public String yamlLoads(String payload) {
15	15
16	16	try {
17	17	for (String riskyToken : RISKY_STR_ARR) {
18		- if (payload.contains("!!")) {
	18	+ if (payload.contains(riskyToken)) {
19	19	System.out.println("can not has malicious remote script");
20	20	return "failed";
21	21	}