最近新做了个网站，在阿里云sts检查出了BUG，请问如何解决

错误提示是参数: null, 可被注入: null
{
    "assertList": [
        {
            "express": "equal",
            "source": "200",
            "val": "200",
            "var": "HTTPCODE"
        },
        {
            "express": "regexmatch",
            "source": "...Index of...",
            "val": "directory\\slisting\\sfor|index\\sof",
            "var": "TITLE"
        }
    ],
    "inputIndex": 0,
    "lockKey": "${URLPATH}_index_uploads",
    "message": "目录浏览",
    "otherProperty": {},
    "pluginName": "",
    "postBody": "",
    "requestHeaders": {
        "Accept": "*/*",
        "Connection": "keep-alive",
        "Content-Type": "text/html",
        "Host": "www.xxx.com",
        "Referer": "http://www.xxx.com",
        "User-Agent": "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;Alibaba.Security.Heimdall.786105)"
    },
    "ruleItemName": "infoleak_index_uploads",
    "ruleName": "sts"
}
POC重现:http://www.xxx.com/uploads/