#fixed code
                             public static BladeUser getUser() {
		HttpServletRequest request = WebUtil.getRequest();
		// 优先从 request 中获取
		BladeUser bladeUser = (BladeUser) request.getAttribute(BLADE_USER_REQUEST_ATTR);
		if (bladeUser == null) {
			bladeUser = getUser(request);
			if (bladeUser != null) {
				// 设置到 request 中
				request.setAttribute(BLADE_USER_REQUEST_ATTR, bladeUser);
			}
		}
		return bladeUser;
	}
#vulnerable code 
                             public static BladeUser getUser() {
		return getUser(WebUtil.getRequest());
	} 
                            #location 2 
                            #vulnerability type NULL_DEREFERENCE