{"id":478257,"date":"2023-08-09T09:29:53","date_gmt":"2023-08-09T09:29:53","guid":{"rendered":""},"modified":"2023-09-05T11:16:22","modified_gmt":"2023-09-05T11:16:22","slug":"ognl-injection","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/cn\/wiki\/ognl-injection\/","title":{"rendered":"OGNL\u6ce8\u5165"},"content":{"rendered":"<p>OGNL\u6ce8\u5165\u7b80\u8981\u4ecb\u7ecd<\/p>\n<p>OGNL\uff08\u5bf9\u8c61\u56fe\u5bfc\u822a\u8bed\u8a00\uff09\u6ce8\u5165\u662f\u4e00\u79cd\u5b89\u5168\u6f0f\u6d1e\uff0c\u5141\u8bb8\u653b\u51fb\u8005\u5728 Web \u5e94\u7528\u7a0b\u5e8f\u7684\u670d\u52a1\u5668\u4e0a\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002\u8fd9\u79cd\u653b\u51fb\u5f62\u5f0f\u6d89\u53ca\u5229\u7528\u67d0\u4e9b Web \u6846\u67b6\uff08\u6700\u8457\u540d\u7684\u662f Apache Struts\uff09\u4e2d\u4f7f\u7528\u7684 OGNL \u8868\u8fbe\u5f0f\u3002OGNL \u6ce8\u5165\u53ef\u80fd\u5bfc\u81f4\u672a\u7ecf\u6388\u6743\u7684\u4fe1\u606f\u6cc4\u9732\u3001\u6570\u636e\u4fee\u6539\uff0c\u751a\u81f3\u6574\u4e2a\u7cfb\u7edf\u88ab\u5165\u4fb5\u3002<\/p>\n<h2>OGNL \u6ce8\u5165\u7684\u8d77\u6e90\u5386\u53f2\u4ee5\u53ca\u9996\u6b21\u63d0\u53ca<\/h2>\n<p>\u968f\u7740\u4f9d\u8d56 OGNL \u8868\u8fbe\u5f0f\u8fdb\u884c\u5404\u79cd\u7528\u9014\uff08\u4f8b\u5982\u6570\u636e\u64cd\u4f5c\u548c UI \u6e32\u67d3\uff09\u7684 Web \u5e94\u7528\u7a0b\u5e8f\u548c\u6846\u67b6\u7684\u589e\u591a\uff0cOGNL \u6ce8\u5165\u4e5f\u9010\u6e10\u4e3a\u4eba\u6240\u77e5\u3002Apache Struts \u662f\u4e00\u79cd\u7528\u4e8e\u5f00\u53d1 Java Web \u5e94\u7528\u7a0b\u5e8f\u7684\u6d41\u884c\u5f00\u6e90\u6846\u67b6\uff0c\u5b83\u6210\u4e3a\u4e86\u6b64\u6f0f\u6d1e\u7684\u4e3b\u8981\u53d7\u5bb3\u8005\u3002<\/p>\n<p>2011 \u5e74\uff0c\u4e00\u540d\u7814\u7a76\u4eba\u5458\u53d1\u73b0\u4e86 Apache Struts2 \u4e2d\u7684\u4e00\u4e2a\u6f0f\u6d1e\uff0cOGNL \u6ce8\u5165\u9996\u6b21\u88ab\u516c\u5f00\u63d0\u53ca\u3002\u8fd9\u4e00\u53d1\u73b0\u6807\u5fd7\u7740\u4e00\u7cfb\u5217\u9488\u5bf9\u4e0e OGNL \u76f8\u5173\u7684\u98ce\u9669\u548c\u653b\u51fb\u5a92\u4ecb\u7684\u8fdb\u4e00\u6b65\u8c03\u67e5\u548c\u53d1\u73b0\u7684\u5f00\u59cb\u3002<\/p>\n<h2>\u5173\u4e8eOGNL\u6ce8\u5165\u7684\u8be6\u7ec6\u4fe1\u606f\uff1a\u6269\u5c55\u4e3b\u9898OGNL\u6ce8\u5165<\/h2>\n<p>OGNL \u6ce8\u5165\u4e0d\u4ec5\u9650\u4e8e Apache Struts\uff0c\u8fd8\u4f1a\u5f71\u54cd\u4f7f\u7528 OGNL \u7684\u5176\u4ed6\u6846\u67b6\u3002\u8fd9\u79cd\u5f3a\u5927\u7684\u8868\u8fbe\u5f0f\u8bed\u8a00\u65e8\u5728\u83b7\u53d6\u548c\u8bbe\u7f6e Java \u5bf9\u8c61\u7684\u5c5e\u6027\u3002\u653b\u51fb\u8005\u53ef\u4ee5\u7f16\u5199\u6076\u610f\u7684 OGNL \u8868\u8fbe\u5f0f\uff0c\u5f53\u670d\u52a1\u5668\u8bc4\u4f30\u8fd9\u4e9b\u8868\u8fbe\u5f0f\u65f6\uff0c\u5b83\u4eec\u4f1a\u6267\u884c\u4efb\u610f Java \u4ee3\u7801\u3002<\/p>\n<h3>\u4e25\u91cd\u7a0b\u5ea6<\/h3>\n<p>OGNL \u6ce8\u5165\u53ef\u80fd\u4f1a\u5bf9\u5e94\u7528\u7a0b\u5e8f\u6216\u7cfb\u7edf\u9020\u6210\u4e25\u91cd\u635f\u5bb3\u3002\u5b83\u53ef\u80fd\u5bfc\u81f4\uff1a<\/p>\n<ul>\n<li>\u8d8a\u6743\u5b58\u53d6<\/li>\n<li>\u6570\u636e\u5904\u7406<\/li>\n<li>\u7cfb\u7edf\u63a5\u7ba1<\/li>\n<\/ul>\n<h3>\u653b\u51fb\u5411\u91cf<\/h3>\n<p>\u653b\u51fb\u8005\u5229\u7528\u4e0d\u5b89\u5168\u7684\u7528\u6237\u8f93\u5165\u5904\u7406\u65b9\u5f0f\u6765\u64cd\u7eb5 OGNL \u8868\u8fbe\u5f0f\u3002\u5178\u578b\u7684\u653b\u51fb\u5a92\u4ecb\u5305\u62ec\uff1a<\/p>\n<ul>\n<li>\u64cd\u7eb5 HTTP \u8bf7\u6c42<\/li>\n<li>\u5236\u4f5c\u6076\u610f URL<\/li>\n<li>\u4fee\u6539\u8868\u5355\u53c2\u6570<\/li>\n<\/ul>\n<h2>OGNL\u6ce8\u5165\u7684\u5185\u90e8\u7ed3\u6784\uff1aOGNL\u6ce8\u5165\u7684\u5de5\u4f5c\u539f\u7406<\/h2>\n<p>\u5f53\u653b\u51fb\u8005\u80fd\u591f\u5c06\u6076\u610f OGNL \u8868\u8fbe\u5f0f\u6ce8\u5165\u5e94\u7528\u7a0b\u5e8f\u7684\u8f93\u5165\u65f6\uff0c\u5c31\u4f1a\u53d1\u751f OGNL \u6ce8\u5165\u3002\u4e0b\u9762\u9010\u6b65\u4ecb\u7ecd OGNL \u6ce8\u5165\u7684\u5de5\u4f5c\u539f\u7406\uff1a<\/p>\n<ol>\n<li><strong>\u7528\u6237\u8f93\u5165\u5904\u7406<\/strong>\uff1a\u5e94\u7528\u7a0b\u5e8f\u4e0d\u6b63\u786e\u5904\u7406\u5305\u542b OGNL \u8868\u8fbe\u5f0f\u7684\u7528\u6237\u8f93\u5165\u3002<\/li>\n<li><strong>\u8868\u8fbe\u5f0f\u89e3\u6790<\/strong>\uff1a\u670d\u52a1\u5668\u89e3\u6790\u6076\u610f\u8868\u60c5\u3002<\/li>\n<li><strong>\u4ee3\u7801\u6267\u884c<\/strong>\uff1a\u8be5\u8868\u8fbe\u5f0f\u88ab\u6c42\u503c\uff0c\u5bfc\u81f4\u5728\u670d\u52a1\u5668\u4e0a\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002<\/li>\n<li><strong>\u653b\u51fb\u7ed3\u679c<\/strong>\uff1a\u653b\u51fb\u8005\u83b7\u5f97\u5bf9\u654f\u611f\u6570\u636e\u7684\u672a\u7ecf\u6388\u6743\u7684\u63a7\u5236\u6216\u8bbf\u95ee\u3002<\/li>\n<\/ol>\n<h2>OGNL\u6ce8\u5165\u5173\u952e\u7279\u6027\u5206\u6790<\/h2>\n<p>OGNL \u6ce8\u5165\u7531\u4e8e\u4ee5\u4e0b\u51e0\u4e2a\u7279\u70b9\u800c\u8131\u9896\u800c\u51fa\uff1a<\/p>\n<ul>\n<li><strong>\u591a\u529f\u80fd\u6027<\/strong>\uff1a\u5b83\u53ef\u7528\u4e8e\u5404\u79cd\u6076\u610f\u76ee\u7684\uff0c\u4ece\u6570\u636e\u76d7\u7a83\u5230\u5b8c\u5168\u7cfb\u7edf\u63a7\u5236\u3002<\/li>\n<li><strong>\u590d\u6742<\/strong>\uff1a\u5236\u4f5c\u6076\u610f OGNL \u8868\u8fbe\u5f0f\u9700\u8981\u4e86\u89e3 Java \u73af\u5883\u548c\u7279\u5b9a\u6846\u67b6\u3002<\/li>\n<li><strong>\u91cd\u5927\u5f71\u54cd<\/strong>\uff1a\u6210\u529f\u653b\u51fb\u53ef\u80fd\u9020\u6210\u7684\u5de8\u5927\u635f\u5931\u3002<\/li>\n<li><strong>\u96be\u4ee5\u7f13\u89e3<\/strong>\uff1a\u6b63\u786e\u4fdd\u62a4\u5e94\u7528\u7a0b\u5e8f\u514d\u53d7 OGNL \u6ce8\u5165\u9700\u8981\u4ed4\u7ec6\u7684\u8f93\u5165\u9a8c\u8bc1\u548c\u6b63\u786e\u7684\u6846\u67b6\u914d\u7f6e\u3002<\/li>\n<\/ul>\n<h2>OGNL \u6ce8\u5165\u7684\u7c7b\u578b\uff1a\u4f7f\u7528\u8868\u683c\u548c\u5217\u8868\u6765\u7f16\u5199<\/h2>\n<p>OGNL \u6ce8\u5165\u4e3b\u8981\u6709\u4e24\u79cd\u7c7b\u578b\uff1a<\/p>\n<table>\n<thead>\n<tr>\n<th>\u7c7b\u578b<\/th>\n<th>\u63cf\u8ff0<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u7ecf\u5178 OGNL \u6ce8\u5165<\/td>\n<td>\u5229\u7528\u5bf9\u7528\u6237\u8f93\u5165\u7684\u4e0d\u5b89\u5168\u5904\u7406\u5e76\u5bfc\u81f4\u4efb\u610f\u4ee3\u7801\u6267\u884c\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u76f2 OGNL \u6ce8\u5165<\/td>\n<td>\u4e00\u79cd\u66f4\u9690\u79d8\u7684\u53d8\u4f53\uff0c\u653b\u51fb\u8005\u901a\u8fc7\u95f4\u63a5\u65b9\u5f0f\u63a8\u65ad\u4fe1\u606f\uff0c\u4f8b\u5982\u901a\u8fc7\u89c2\u5bdf\u54cd\u5e94\u65f6\u95f4\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>OGNL\u6ce8\u5165\u7684\u4f7f\u7528\u65b9\u6cd5\u3001\u4f7f\u7528\u4e2d\u9047\u5230\u7684\u95ee\u9898\u53ca\u89e3\u51b3\u65b9\u6cd5<\/h2>\n<h3>\u4f7f\u7528\u65b9\u6cd5<\/h3>\n<ol>\n<li><strong>\u4fe1\u606f\u62ab\u9732<\/strong>\uff1a\u4ece\u670d\u52a1\u5668\u63d0\u53d6\u654f\u611f\u4fe1\u606f\u3002<\/li>\n<li><strong>\u8d8a\u6743\u5b58\u53d6<\/strong>\uff1a\u7ed5\u8fc7\u8eab\u4efd\u9a8c\u8bc1\u673a\u5236\u3002<\/li>\n<li><strong>\u7cfb\u7edf\u59a5\u534f<\/strong>\uff1a\u63a5\u7ba1\u6574\u4e2a\u7cfb\u7edf\u3002<\/li>\n<\/ol>\n<h3>\u95ee\u9898\u4e0e\u89e3\u51b3\u65b9\u6848<\/h3>\n<ul>\n<li><strong>\u95ee\u9898<\/strong>\uff1a\u5bf9\u7528\u6237\u8f93\u5165\u7684\u4e0d\u5b89\u5168\u5904\u7406\n<ul>\n<li><strong>\u89e3\u51b3\u65b9\u6848<\/strong>\uff1a\u5b9e\u65bd\u4e25\u683c\u7684\u8f93\u5165\u9a8c\u8bc1\u548c\u6e05\u7406\u3002<\/li>\n<\/ul>\n<\/li>\n<li><strong>\u95ee\u9898<\/strong>\uff1a\u6846\u67b6\u914d\u7f6e\u9519\u8bef\n<ul>\n<li><strong>\u89e3\u51b3\u65b9\u6848<\/strong>\uff1a\u5e94\u7528\u9002\u5f53\u7684\u5b89\u5168\u914d\u7f6e\u5e76\u5b9a\u671f\u5c06\u6846\u67b6\u66f4\u65b0\u5230\u4fee\u8865\u7248\u672c\u3002<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h2>\u4e3b\u8981\u7279\u70b9\u53ca\u4e0e\u540c\u7c7b\u672f\u8bed\u7684\u5176\u4ed6\u6bd4\u8f83\u4ee5\u8868\u683c\u548c\u5217\u8868\u7684\u5f62\u5f0f<\/h2>\n<table>\n<thead>\n<tr>\n<th>\u7279\u5f81<\/th>\n<th>OGNL \u6ce8\u5165<\/th>\n<th>SQL\u6ce8\u5165<\/th>\n<th>\u547d\u4ee4\u6ce8\u5165<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u653b\u51fb\u76ee\u6807<\/td>\n<td>OGNL \u8868\u8fbe\u5f0f<\/td>\n<td>SQL \u67e5\u8be2<\/td>\n<td>\u7cfb\u7edf\u547d\u4ee4<\/td>\n<\/tr>\n<tr>\n<td>\u5f71\u54cd<\/td>\n<td>\u9ad8\u7684<\/td>\n<td>\u9ad8\u7684<\/td>\n<td>\u9ad8\u7684<\/td>\n<\/tr>\n<tr>\n<td>\u590d\u6742<\/td>\n<td>\u4e2d\u5230\u9ad8<\/td>\n<td>\u7f13\u548c<\/td>\n<td>\u7f13\u548c<\/td>\n<\/tr>\n<tr>\n<td>\u5178\u578b\u7684\u7f13\u89e3\u63aa\u65bd<\/td>\n<td>\u8f93\u5165\u9a8c\u8bc1<\/td>\n<td>\u51c6\u5907\u597d\u7684\u8bed\u53e5<\/td>\n<td>\u8f93\u5165\u9a8c\u8bc1\u3001\u8f6c\u4e49<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\u4e0e OGNL \u6ce8\u5165\u76f8\u5173\u7684\u672a\u6765\u524d\u666f\u548c\u6280\u672f<\/h2>\n<p>Web \u6846\u67b6\u548c\u7f16\u7a0b\u8bed\u8a00\u7684\u4e0d\u65ad\u53d1\u5c55\u4f7f\u5a01\u80c1\u5f62\u52bf\u4e0d\u65ad\u6f14\u53d8\uff0c\u5305\u62ec OGNL \u6ce8\u5165\u3002\u672a\u6765\u524d\u666f\u5305\u62ec\uff1a<\/p>\n<ul>\n<li><strong>\u5148\u8fdb\u7684\u68c0\u6d4b\u6280\u672f<\/strong>\uff1a\u5229\u7528\u673a\u5668\u5b66\u4e60\u548c\u4eba\u5de5\u667a\u80fd\u6765\u68c0\u6d4b\u548c\u9632\u6b62 OGNL \u6ce8\u5165\u3002<\/li>\n<li><strong>\u6846\u67b6\u589e\u5f3a\u529f\u80fd<\/strong>\uff1a\u6784\u5efa\u66f4\u5b89\u5168\u7684\u6846\u67b6\uff0c\u4ece\u672c\u8d28\u4e0a\u964d\u4f4e OGNL \u6ce8\u5165\u7684\u98ce\u9669\u3002<\/li>\n<li><strong>\u5b89\u5168\u610f\u8bc6<\/strong>\uff1a\u63d0\u9ad8\u5f00\u53d1\u4eba\u5458\u5bf9\u5b89\u5168\u7f16\u7801\u5b9e\u8df5\u7684\u6559\u80b2\u548c\u8ba4\u8bc6\u3002<\/li>\n<\/ul>\n<h2>\u5982\u4f55\u4f7f\u7528\u4ee3\u7406\u670d\u52a1\u5668\u6216\u5c06\u5176\u4e0e OGNL \u6ce8\u5165\u5173\u8054<\/h2>\n<p>\u7c7b\u4f3c OneProxy \u63d0\u4f9b\u7684\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u5728 OGNL \u6ce8\u5165\u7684\u653b\u51fb\u548c\u9632\u5fa1\u4e2d\u53d1\u6325\u4f5c\u7528\uff1a<\/p>\n<ul>\n<li><strong>\u9632\u5b88\u89d2\u8272<\/strong>\uff1a\u901a\u8fc7\u90e8\u7f72\u6b63\u786e\u914d\u7f6e\u7684\u4ee3\u7406\u670d\u52a1\u5668\uff0c\u7ec4\u7ec7\u53ef\u4ee5\u8fc7\u6ee4\u548c\u76d1\u63a7\u6d41\u91cf\uff0c\u4ece\u800c\u63d0\u4f9b\u9488\u5bf9 OGNL \u6ce8\u5165\u7684\u989d\u5916\u4fdd\u62a4\u5c42\u3002<\/li>\n<li><strong>\u8fdb\u653b\u89d2\u8272<\/strong>\uff1a\u653b\u51fb\u8005\u53ef\u80fd\u4f1a\u5728\u8fdb\u884c OGNL \u6ce8\u5165\u653b\u51fb\u65f6\u4f7f\u7528\u4ee3\u7406\u670d\u52a1\u5668\u6765\u9690\u85cf\u5176\u8eab\u4efd\uff0c\u4ece\u800c\u4f7f\u68c0\u6d4b\u548c\u5f52\u56e0\u66f4\u52a0\u56f0\u96be\u3002<\/li>\n<\/ul>\n<h2>\u76f8\u5173\u94fe\u63a5<\/h2>\n<ol>\n<li><a href=\"https:\/\/struts.apache.org\/security\/\" target=\"_new\" rel=\"noopener nofollow\">Apache Struts \u5b89\u5168\u516c\u544a<\/a><\/li>\n<li><a href=\"https:\/\/owasp.org\/www-project-web-security-testing-guide\/latest\/4-Web_Application_Security_Testing\/07-Input_Validation_Testing\/12-Testing_for_OGNL_Injection\" target=\"_new\" rel=\"noopener nofollow\">OWASP OGNL \u6ce8\u5165\u6d4b\u8bd5\u6307\u5357<\/a><\/li>\n<li><a href=\"https:\/\/cwe.mitre.org\/data\/definitions\/917.html\" target=\"_new\" rel=\"noopener nofollow\">CWE \u5173\u4e8e OGNL \u6ce8\u5165\u7684\u8be6\u7ec6\u4fe1\u606f<\/a><\/li>\n<\/ol>\n<p>\u672c\u6307\u5357\u5185\u5bb9\u8be6\u5c3d\uff0c\u5168\u9762\u4ecb\u7ecd\u4e86 OGNL \u6ce8\u5165\uff0c\u91cd\u70b9\u4ecb\u7ecd\u4e86\u5176\u5386\u53f2\u3001\u673a\u5236\u3001\u529f\u80fd\u3001\u7c7b\u578b\u4ee5\u53ca\u4e0e OneProxy \u7b49\u4ee3\u7406\u670d\u52a1\u5668\u7684\u5173\u7cfb\u3002\u5b83\u5f3a\u8c03\u4e86\u91c7\u53d6\u5f3a\u6709\u529b\u7684\u5b89\u5168\u63aa\u65bd\u6765\u9632\u5fa1\u6b64\u7c7b\u590d\u6742\u4e14\u6781\u5177\u7834\u574f\u6027\u7684\u653b\u51fb\u7684\u5fc5\u8981\u6027\u3002<\/p>","protected":false},"featured_media":478258,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-478257","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>OGNL Injection<\/mark>","faq_items":[{"question":"What is OGNL Injection?","answer":"<p>OGNL Injection is a type of security vulnerability that allows an attacker to execute arbitrary code on a web application's server by exploiting OGNL expressions, which are commonly used in certain web frameworks like Apache Struts. The impact can range from unauthorized information disclosure to complete system compromise.<\/p>"},{"question":"What are the main types of OGNL Injection?","answer":"<p>There are primarily two types of OGNL Injection: Classic OGNL Injection, which exploits insecure handling of user inputs and leads to arbitrary code execution, and Blind OGNL Injection, a stealthier variant where the attacker gains information through indirect means, such as response times.<\/p>"},{"question":"How does OGNL Injection work?","answer":"<p>OGNL Injection occurs when an attacker injects malicious OGNL expressions into the application's input, which the server then parses and evaluates. This leads to the execution of arbitrary code on the server, and the attacker may gain unauthorized control or access to sensitive data.<\/p>"},{"question":"What are the key features of OGNL Injection?","answer":"<p>The key features of OGNL Injection include its versatility in malicious purposes, the complexity in crafting malicious expressions, the high impact resulting from a successful attack, and the difficulty in mitigating the vulnerability.<\/p>"},{"question":"How can OGNL Injection be prevented?","answer":"<p>OGNL Injection can be prevented by implementing strict input validation and sanitization, applying proper security configurations, and regularly updating the framework to patched versions.<\/p>"},{"question":"How is OGNL Injection different from other injections like SQL Injection?","answer":"<p>While OGNL Injection targets OGNL expressions and can lead to arbitrary code execution, SQL Injection targets SQL queries and can manipulate database queries. Command Injection, on the other hand, targets system commands. The impact is high for all these injections, but the targets and mitigation strategies vary.<\/p>"},{"question":"What are the future perspectives related to OGNL Injection?","answer":"<p>Future perspectives related to OGNL Injection include the development of advanced detection techniques using machine learning and AI, enhancements in web frameworks to minimize the risk, and increasing security awareness among developers.<\/p>"},{"question":"How can proxy servers like OneProxy be associated with OGNL Injection?","answer":"<p>Proxy servers like OneProxy can play a defensive role by filtering and monitoring traffic to provide protection against OGNL Injection. Conversely, attackers might also use proxy servers to hide their identity while conducting an OGNL Injection attack.<\/p>"},{"question":"Where can I find more information about OGNL Injection?","answer":"<p>You can find more information about OGNL Injection from sources like Apache Struts Security Bulletins, the OWASP Guide on Testing for OGNL Injection, and CWE details on OGNL Injection, all of which provide detailed insights into the vulnerability.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/478257","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/478257\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media\/478258"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media?parent=478257"}],"curies":[{"name":"\u53ef\u6e7f\u6027\u7c89\u5242","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}