diff --git a/javaid.py b/javaid.py
index 80b4d71..408ab42 100644
--- a/javaid.py
+++ b/javaid.py
@@ -50,7 +50,6 @@
     "getRuntime.exec",
     "ProcessBuilder.start",
     "GroovyShell.evaluate"
-
  '''
 
 class javaid(object):
@@ -66,12 +65,12 @@ def _run(self):
         try:
             self.banner()
             self.handlePath(self._dir)
-            print "[-]【JavaID】identify danger function Finished!"    
+            print "[-][JavaID] identify danger function Finished!"
         except:
             raise
 
-    def report_id(self,vul):
-        print "[+]【"+vul+"】identify danger function ["+self._function+"] in file ["+self._filename+"]"
+    def report_id(self,vul,keyword):
+        print "[+][{0}] identified by danger function [{1} -- \"{2}\"] in file [{3}]".format(vul,self._function,keyword,self._filename)
 
     def report_line(self):
         print " --> [+] on line : "+ str(self._line)
@@ -128,7 +127,7 @@ def regexp_search(self,rule_dom,content):
                 exp_pattern = re.compile(regexp_dom.text)
                 if exp_pattern.search(content):
                     #print "identify sfunction is : "+self._function
-                    self.report_id(self._vultype)
+                    self.report_id(self._vultype,regexp_dom.text.replace("\\",""))
                     self.function_search_line()
 
         return True
@@ -150,7 +149,7 @@ def check_regexp(self, content):
     def remove_comment(self,content):
         return content
     def banner(self):
-        print "[-]【JavaID】 Danger function identify tool"
+        print "[-][JavaID] Danger function identify tool"
 if __name__ == '__main__':
     parser = optparse.OptionParser('usage: python %prog [options](eg: python %prog -d /user/java/demo)')
     parser.add_option('-d', '--dir', dest = 'dir', type = 'string', help = 'source code file dir')
diff --git a/regexp.xml b/regexp.xml
index 7ad5d2a..f4d4237 100644
--- a/regexp.xml
+++ b/regexp.xml
@@ -1,287 +1,299 @@
 <root>
-    <javaid vultype='XXE'>
-        <function>
-            <rule name='SAXReader'>
-                <regmatch>
-                    <regexp>new\s+SAXReader\(\)</regexp>
-                </regmatch>
-            </rule>
-        </function>
-        <function>
-            <rule name='SAXBuilder'>
-                <regmatch>
-                    <regexp>new\s+SAXBuilder\(\)</regexp>
-                </regmatch>
-            </rule>
-        </function>
-        <function>
-            <rule name='SAXParser'>
-                <regmatch>
-                    <regexp>newSAXParser\(</regexp>
-                </regmatch>
-            </rule>
-        </function>
-        <function>
-            <rule name='XMLReader'>
-                <regmatch>
-                    <regexp>createXMLReader\(</regexp>
-                </regmatch>
-            </rule>
-        </function>
-        <function>
-            <rule name='DocumentBuilder'>
-                <regmatch>
-                    <regexp>newDocumentBuilder\(</regexp>
-                </regmatch>
-            </rule>
-        </function>
-        <function>
-            <rule name='XMLStreamReader'>
-                <regmatch>
-                    <regexp>createXMLStreamReader\(</regexp>
-                </regmatch>
-            </rule>
-        </function>
-    </javaid>
-    <javaid vultype='ObjectDeserialization'>
-        <function>
-            <rule name='readObject'>
-                <regmatch>
-                    <regexp>\.readObject\(</regexp>
-                </regmatch>
-            </rule>
-        </function>
-        <function>
-            <rule name='parseObject'>
-                <regmatch>
-                    <regexp>JSON\.parseObject\(</regexp>
-                </regmatch>
-            </rule>
-        </function>
-        <function>
-            <rule name='readValue'>
-                <regmatch>
-                    <regexp>ObjectMapper\.readValue</regexp>
-                </regmatch>
-            </rule>
-        </function>
-        <function>
-            <rule name='fromXML'>
-                <regmatch>
-                    <regexp>fromXML\(</regexp>
-                </regmatch>
-            </rule>
-        </function>
-        <function>
-            <rule name='readUnshared'>
-                <regmatch>
-                    <regexp>readUnshared\(</regexp>
-                </regmatch>
-            </rule>
-        </function>
-        <function>
-            <rule name='Yaml'>
-                <regmatch>
-                    <regexp>.load\(</regexp>
-                </regmatch>
-            </rule>
-        </function>
-    </javaid>
-    <javaid vultype='SSRF'>
-        <function>
-            <rule name='HttpURLConnection'>
-                <regmatch>
-                    <regexp>openConnection\(|getInputStream\(</regexp>
-                </regmatch>
-            </rule>
-        </function>
-        <function>
-            <rule name='URL'>
-                <regmatch>
-                    <regexp>URL\(|openStream\(</regexp>
-                </regmatch>
-            </rule>
-        </function>
-	<function>
-            <rule name='ImageIO'>
-                <regmatch>
-                    <regexp>ImageIO\.read\(</regexp>
-                </regmatch>
-            </rule>
-        </function>    
-        <function>
-            <rule name='HttpClient'>
-                <regmatch>
-                    <regexp>HttpClient\(|executeMethod\(</regexp>
-                </regmatch>
-            </rule>
-        </function>
-	<function>
-            <rule name='Socket'>
-                <regmatch>
-                    <regexp>new\sSocket\(</regexp>
-                </regmatch>
-            </rule>
-        </function>    
-        <function>
-            <rule name='OkHttpClient'>
-                <regmatch>
-                    <regexp>\.newCall\(|Request.Builder\(\)</regexp>
-                </regmatch>
-            </rule>
-        </function>
-	<function>
-            <rule name='SimpleDriverDataSource'>
-                <regmatch>
-                    <regexp>\.getConnection\(</regexp>
-                </regmatch>
-            </rule>
-        </function>
-	<function>
-            <rule name='DriverManager'>
-                <regmatch>
-                    <regexp>\.getConnection\(</regexp>
-                </regmatch>
-            </rule>
-        </function>
-    </javaid>
-    <javaid vultype='FileUpload'>
-        <function>
-            <rule name='MultipartFile'>
-                <regmatch>
-                    <regexp>\.getOriginalFilename\(|MultipartFile\s</regexp>
-                </regmatch>
-            </rule>
-        </function>
-    </javaid>
-    <javaid vultype='File'>
-        <function>
-            <rule name='createNewFile'>
-                <regmatch>
-                    <regexp>\.createNewFile\(|FileOutputStream\(</regexp>
-                </regmatch>
-            </rule>
-        </function>
-        <function>
-            <rule name='delete'>
-                <regmatch>
-                    <regexp>\.delete\(\)</regexp>
-                </regmatch>
-            </rule>
-        </function>
-        <function>
-            <rule name='FileInputStream'>
-                <regmatch>
-                    <regexp>new\sFileInputStream\(</regexp>
-                </regmatch>
-            </rule>
-        </function>
-    </javaid>
-    <javaid vultype='Autobinding'>
-        <function>
-            <rule name='SessionAttributes'>
-                <regmatch>
-                    <regexp>@SessionAttributes</regexp>
-                </regmatch>
-            </rule>
-        </function>
-        <function>
-            <rule name='ModelAttribute'>
-                <regmatch>
-                    <regexp>@ModelAttribute</regexp>
-                </regmatch>
-            </rule>
-        </function>
-    </javaid>
-    <javaid vultype='URL-Redirect'>
-        <function>
-            <rule name='sendRedirect'>
-                <regmatch>
-                    <regexp>sendRedirect\(</regexp>
-                </regmatch>
-            </rule>
-        </function>
-        <function>
-            <rule name='setHeader'>
-                <regmatch>
-                    <regexp>setHeader\(\"refresh</regexp>
-                </regmatch>
-            </rule>
-        </function>
-        <function>
-            <rule name='forward'>
-                <regmatch>
-                    <regexp>forward\(</regexp>
-                </regmatch>
-            </rule>
-        </function>
-    </javaid>
-    <javaid vultype='EXEC'>
-        <function>
-            <rule name='getRuntime'>
-                <regmatch>
-                    <regexp>getRuntime\(\)\.exec\(</regexp>
-                </regmatch>
-            </rule>
-        </function>
-        <function>
-            <rule name='ProcessBuilder'>
-                <regmatch>
-                    <regexp>ProcessBuilder|ProcessBuilder\.start</regexp>
-                </regmatch>
-            </rule>
-        </function>
-        <function>
-            <rule name='GroovyShell'>
-                <regmatch>
-                    <regexp>GroovyShell\.evaluate</regexp>
-                </regmatch>
-            </rule>
-        </function>
-    </javaid>
-    <javaid vultype='SPelInjection'>
-        <function>
-            <rule name='SpelExpressionParser'>
-                <regmatch>
-                    <regexp>SpelExpressionParser</regexp>
-                </regmatch>
-            </rule>
-        </function>
-        <function>
-            <rule name='getValue'>
-                <regmatch>
-                    <regexp>getValue\(\)</regexp>
-                </regmatch>
-            </rule>
-        </function>
-    </javaid>
-    <javaid vultype='SQLi'>
-        <function>
-            <rule name='select'>
-                <regmatch>
-                    <regexp>(into|where)[^\$]*(\$\{[^,#=\s]+\})</regexp>
-                </regmatch>
-            </rule>
-        </function>
-    </javaid>
-    <javaid vultype='Info-disclosure'>
-        <function>
-            <rule name='actuator'>
-                <regmatch>
-                    <regexp>spring-boot-starter-actuator</regexp>
-                </regmatch>
-            </rule>
-        </function>
-    </javaid>
-	<!--
 	<javaid vultype='XXE'>
-        <function>
-            <rule name='SAXReader'>
-                <regmatch>
-                    <regexp>new\s+SAXReader\(\)</regexp>
-                </regmatch>
-            </rule>
-        </function>
-    </javaid>
-	-->
+		<function>
+			<rule name='SAXReader'>
+				<regmatch>
+					<regexp>new\s+SAXReader\(\)</regexp>
+				</regmatch>
+			</rule>
+		</function>
+		<function>
+			<rule name='SAXBuilder'>
+				<regmatch>
+					<regexp>new\s+SAXBuilder\(\)</regexp>
+				</regmatch>
+			</rule>
+		</function>
+		<function>
+			<rule name='SAXParser'>
+				<regmatch>
+					<regexp>newSAXParser\(</regexp>
+				</regmatch>
+			</rule>
+		</function>
+		<function>
+			<rule name='XMLReader'>
+				<regmatch>
+					<regexp>createXMLReader\(</regexp>
+				</regmatch>
+			</rule>
+		</function>
+		<function>
+			<rule name='DocumentBuilder'>
+				<regmatch>
+					<regexp>newDocumentBuilder\(</regexp>
+				</regmatch>
+			</rule>
+		</function>
+		<function>
+			<rule name='XMLStreamReader'>
+				<regmatch>
+					<regexp>createXMLStreamReader\(</regexp>
+				</regmatch>
+			</rule>
+		</function>
+		<function>
+			<rule name='StreamingReader'>
+				<regmatch>
+					<regexp>StreamingReader\.builder\(\)</regexp>
+				</regmatch>
+			</rule>
+		</function>
+		<function>
+			<rule name='XSSFWorkbook'>
+				<regmatch>
+					<regexp>new\s+XSSFWorkbook\(</regexp>
+				</regmatch>
+			</rule>
+		</function>
+	</javaid>
+	<javaid vultype='ObjectDeserialization'>
+		<function>
+			<rule name='readObject'>
+				<regmatch>
+					<regexp>\.readObject\(</regexp>
+				</regmatch>
+			</rule>
+		</function>
+		<function>
+			<rule name='parseObject'>
+				<regmatch>
+					<regexp>JSON\.parseObject\(</regexp>
+				</regmatch>
+			</rule>
+		</function>
+		<function>
+			<rule name='readValue'>
+				<regmatch>
+					<regexp>ObjectMapper\.readValue</regexp>
+				</regmatch>
+			</rule>
+		</function>
+		<function>
+			<rule name='fromXML'>
+				<regmatch>
+					<regexp>fromXML\(</regexp>
+				</regmatch>
+			</rule>
+		</function>
+		<function>
+			<rule name='readUnshared'>
+				<regmatch>
+					<regexp>readUnshared\(</regexp>
+				</regmatch>
+			</rule>
+		</function>
+		<function>
+			<rule name='Yaml'>
+				<regmatch>
+					<regexp>\.load\(</regexp>
+				</regmatch>
+			</rule>
+		</function>
+		<function>
+			<rule name='XMLDecoder'>
+				<regmatch>
+					<regexp>new\s+XMLDecoder\(</regexp>
+				</regmatch>
+			</rule>
+		</function>
+	</javaid>
+	<javaid vultype='SSRF'>
+		<function>
+			<rule name='HttpURLConnection'>
+				<regmatch>
+					<regexp>openConnection\(|getInputStream\(</regexp>
+				</regmatch>
+			</rule>
+		</function>
+		<function>
+			<rule name='URL'>
+				<regmatch>
+					<regexp>URL\(|openStream\(</regexp>
+				</regmatch>
+			</rule>
+		</function>
+		<function>
+			<rule name='ImageIO'>
+				<regmatch>
+					<regexp>ImageIO\.read\(</regexp>
+				</regmatch>
+			</rule>
+		</function>
+		<function>
+			<rule name='HttpClient'>
+				<regmatch>
+					<regexp>HttpClient\(|executeMethod\(</regexp>
+				</regmatch>
+			</rule>
+		</function>
+		<function>
+			<rule name='Socket'>
+				<regmatch>
+					<regexp>new\sSocket\(</regexp>
+				</regmatch>
+			</rule>
+		</function>
+		<function>
+			<rule name='OkHttpClient'>
+				<regmatch>
+					<regexp>\.newCall\(|Request.Builder\(\)</regexp>
+				</regmatch>
+			</rule>
+		</function>
+		<function>
+			<rule name='SimpleDriverDataSource'>
+				<regmatch>
+					<regexp>\.getConnection\(</regexp>
+				</regmatch>
+			</rule>
+		</function>
+		<function>
+			<rule name='DriverManager'>
+				<regmatch>
+					<regexp>\.getConnection\(</regexp>
+				</regmatch>
+			</rule>
+		</function>
+	</javaid>
+	<javaid vultype='FileUpload'>
+		<function>
+			<rule name='MultipartFile'>
+				<regmatch>
+					<regexp>\.getOriginalFilename\(|MultipartFile\s</regexp>
+				</regmatch>
+			</rule>
+		</function>
+	</javaid>
+	<javaid vultype='File'>
+		<function>
+			<rule name='createNewFile'>
+				<regmatch>
+					<regexp>\.createNewFile\(|FileOutputStream\(</regexp>
+				</regmatch>
+			</rule>
+		</function>
+		<function>
+			<rule name='delete'>
+				<regmatch>
+					<regexp>\.delete\(\)</regexp>
+				</regmatch>
+			</rule>
+		</function>
+		<function>
+			<rule name='FileInputStream'>
+				<regmatch>
+					<regexp>new\sFileInputStream\(</regexp>
+				</regmatch>
+			</rule>
+		</function>
+	</javaid>
+	<javaid vultype='Autobinding'>
+		<function>
+			<rule name='SessionAttributes'>
+				<regmatch>
+					<regexp>@SessionAttributes</regexp>
+				</regmatch>
+			</rule>
+		</function>
+		<function>
+			<rule name='ModelAttribute'>
+				<regmatch>
+					<regexp>@ModelAttribute</regexp>
+				</regmatch>
+			</rule>
+		</function>
+	</javaid>
+	<javaid vultype='URL-Redirect'>
+		<function>
+			<rule name='sendRedirect'>
+				<regmatch>
+					<regexp>sendRedirect\(</regexp>
+				</regmatch>
+			</rule>
+		</function>
+		<function>
+			<rule name='setHeader'>
+				<regmatch>
+					<regexp>setHeader\(\"refresh</regexp>
+				</regmatch>
+			</rule>
+		</function>
+		<function>
+			<rule name='forward'>
+				<regmatch>
+					<regexp>forward\(</regexp>
+				</regmatch>
+			</rule>
+		</function>
+	</javaid>
+	<javaid vultype='EXEC'>
+		<function>
+			<rule name='getRuntime'>
+				<regmatch>
+					<regexp>getRuntime\(\)\.exec\(</regexp>
+				</regmatch>
+			</rule>
+		</function>
+		<function>
+			<rule name='ProcessBuilder'>
+				<regmatch>
+					<regexp>ProcessBuilder|ProcessBuilder\.start</regexp>
+				</regmatch>
+			</rule>
+		</function>
+		<function>
+			<rule name='GroovyShell'>
+				<regmatch>
+					<regexp>GroovyShell\.evaluate</regexp>
+				</regmatch>
+			</rule>
+		</function>
+	</javaid>
+	<javaid vultype='SPelInjection'>
+		<function>
+			<rule name='SpelExpressionParser'>
+				<regmatch>
+					<regexp>SpelExpressionParser</regexp>
+				</regmatch>
+			</rule>
+		</function>
+		<function>
+			<rule name='getValue'>
+				<regmatch>
+					<regexp>getValue\(\)</regexp>
+				</regmatch>
+			</rule>
+		</function>
+	</javaid>
+	<javaid vultype='SQLi'>
+		<function>
+			<rule name='select'>
+				<regmatch>
+					<regexp>(into|where)[^\$]*(\$\{[^,#=\s]+\})</regexp>
+				</regmatch>
+			</rule>
+		</function>
+	</javaid>
+	<javaid vultype='Info-disclosure'>
+		<function>
+			<rule name='actuator'>
+				<regmatch>
+					<regexp>spring-boot-starter-actuator</regexp>
+				</regmatch>
+			</rule>
+		</function>
+	</javaid>
+	<!-- <javaid vultype='XXE'> <function> <rule name='SAXReader'> <regmatch> 
+		<regexp>new\s+SAXReader\(\)</regexp> </regmatch> </rule> </function> </javaid> -->
 </root>