即将离开稀土掘金，请注意账号财产安全

http://sethsec.blogspot.com/2015/12/exploiting-server-side-request-forgery.html