https://x7peeps.com/tags/Jinja2/index.htmlHugozh-CNFri, 24 Jul 2026 14:00:00 +0800https://x7peeps.com/%E5%AE%89%E5%85%A8/%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95/03-%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/%E6%9C%8D%E5%8A%A1%E7%AB%AFWeb%E6%A1%86%E6%9E%B6%E4%B8%8E%E6%A8%A1%E6%9D%BF%E5%BC%95%E6%93%8E/%E6%9C%8D%E5%8A%A1%E7%AB%AFWeb%E6%A1%86%E6%9E%B6%E4%B8%8E%E6%A8%A1%E6%9D%BF%E5%BC%95%E6%93%8E%E9%AB%98%E5%8D%B1%E6%94%BB%E5%87%BB%E9%93%BE%E4%B8%93%E9%A2%98/index.htmlFri, 24 Jul 2026 14:00:00 +0800https://x7peeps.com/%E5%AE%89%E5%85%A8/%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95/03-%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/%E6%9C%8D%E5%8A%A1%E7%AB%AFWeb%E6%A1%86%E6%9E%B6%E4%B8%8E%E6%A8%A1%E6%9D%BF%E5%BC%95%E6%93%8E/%E6%9C%8D%E5%8A%A1%E7%AB%AFWeb%E6%A1%86%E6%9E%B6%E4%B8%8E%E6%A8%A1%E6%9D%BF%E5%BC%95%E6%93%8E%E9%AB%98%E5%8D%B1%E6%94%BB%E5%87%BB%E9%93%BE%E4%B8%93%E9%A2%98/index.html系统梳理 Django / Jinja2 / Laravel / Next.js / Ruby on Rails / Thymeleaf 等主流服务端 Web 框架与模板引擎的 16 个高危漏洞，涵盖 SSTI 模板注入、沙箱逃逸 RCE、反序列化、认证绕过、HTTP 请求走私等核心攻击链，附完整 PoC 代码与 Nuclei 检测模板。