用友NC ConfigResourceServlet反序列化

可以看到，直接反序列化

 ObjectInputStream ois = new ObjectInputStream(req.getInputStream());
 Map<String, String> params = (Map)ois.readObject();