FT/foton-slrs-system-rest
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

bug:非法字符处理问题

Browse Source
This commit is contained in:
wxyclub
2023-08-08 13:50:25 +08:00
parent fd8a51f137
commit 9f663904e2
1 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
adc-da-base/src/main/java/com/adc/da/xss/SQLFilter.java
+8 -2
View File
@@ -1,8 +1,14 @@
package com.adc.da.xss; package com.adc.da.xss;
import com.adc.da.exception.AdcDaBaseException; import com.adc.da.exception.AdcDaBaseException;
import com.alibaba.fastjson.JSON;
import com.alibaba.fastjson.JSONObject;
import org.apache.commons.lang3.StringUtils; import org.apache.commons.lang3.StringUtils;
import java.util.Arrays;
import java.util.List;
import java.util.stream.Collectors;
public class SQLFilter { public class SQLFilter {
@@ -13,13 +19,13 @@ public class SQLFilter {
String checkStr= str; String checkStr= str;
checkStr = StringUtils.replace(checkStr, "\\", ""); checkStr = StringUtils.replace(checkStr, "\\", "");
checkStr = checkStr.toLowerCase(); checkStr = checkStr.toLowerCase();
String[] keywords = new String[]{"master", "truncate", "insert", "select", "delete", "update", "declare", "alter", "drop"}; String[] keywords = new String[]{"master ", "truncate ", "insert ", "select ", "delete ", "update", "declare ", "alter ", "drop "};
String[] arr$ = keywords; String[] arr$ = keywords;
int len$ = keywords.length; int len$ = keywords.length;
for(int i$ = 0; i$ < len$; ++i$) { for(int i$ = 0; i$ < len$; ++i$) {
String keyword = arr$[i$]; String keyword = arr$[i$];
if (checkStr.indexOf(keyword) != -1) { if (checkStr.contains(keyword)) {
throw new AdcDaBaseException("包含非法字符"); throw new AdcDaBaseException("包含非法字符");
} }
} }