How can I use reflection to enumerate all fields of a request object in a JSP page?
You can use `getClass().getDeclaredFields()` on the request object to retrieve all its fields, including private ones. For example: `Field[] fields = request.getClass().getDeclaredFields();` then iterate and print each field name. This technique is detailed in the article Java Exploitation Techniques - Modifying Properties via Reflection.
reflectiongetDeclaredFieldsrequest objectJSP