README.md

Debugger for SpEL

This application is a debugger for the Spring Expression Language (SpEL).

Showcase

Installation

It's easiest to install the application using Docker:

docker run -d \
  --name spel-debugger \
  -p 8080:8080 \
  ghcr.io/axelrindle/spel-debugger:latest

Security Considerations

The application does not provide any authentication mechanisms. As the SpEL is quite powerful and will execute arbitrary Java code, harm could be done by unauthorized users. Consider installing an authentication middleware such as HTTP Basic.

Read more on this topic here:

• https://0xn3va.gitbook.io/cheat-sheets/framework/spring/spel-injection#spel-injection
• https://xvnpw.medium.com/hacking-spel-part-1-d2ff2825f62a

Development

Requirements

• JDK 17
• Node.js 18

Backend

1. Open the project in your favorite IDE (I prefer IntelliJ)
2. Fire up the SpelDebuggerApplication class.
3. The api url is http://localhost:8080/. If you'd like to use Swagger, go to http://localhost:8080/swagger-ui/index.html

Frontend

1. cd into the frontend directory
2. Run npm ci
3. Run npm run dev
4. Open http://localhost:5173/

License

GPLv3

Attribution

Spring is a registered trademark of Pivotal Software, Inc.

Icon created using IconKitchen.