用友NC ConfigResourceServlet反序列化
可以看到，直接反序列化
ObjectInputStream ois = new ObjectInputStream(req.getInputStream());
Map<String, String> params = (Map)ois.readObject();
可以看到，直接反序列化
ObjectInputStream ois = new ObjectInputStream(req.getInputStream());
Map<String, String> params = (Map)ois.readObject();