//HTTP頭設置引用者過濾
string Referer = request 2 . get header(" Referer ")；//刷新
如果(引用者！= null & amp& ampreferer . index of(base path)& lt；0){
request 2 . getrequest dispatcher(request 2 . getrequest uri())。轉發(請求2，響應)；
}
3.密碼字段未禁用自動完成HTML屬性
修復任務:將“自動完成”屬性正確設置為“關閉”
秘密代碼:
& ltinput name = " userinfo . user pwd " type = " password " autocomplete = " off "/& gt；