返回包的劫持 burp
Do intercept ---response to this request
https://www.owasp.org/index.php/OWASP_java_Encoder_project#tab=Use_the_java_Encoder_project