diff --git a/jero-boot/jero-boot-module-system/src/main/java/com/jero/modules/system/util/XSSUtils.java b/jero-boot/jero-boot-module-system/src/main/java/com/jero/modules/system/util/XSSUtils.java index 31f57771..2c65302d 100644 --- a/jero-boot/jero-boot-module-system/src/main/java/com/jero/modules/system/util/XSSUtils.java +++ b/jero-boot/jero-boot-module-system/src/main/java/com/jero/modules/system/util/XSSUtils.java @@ -35,8 +35,9 @@ public class XSSUtils { value = scriptPattern.matcher(value).replaceAll(""); scriptPattern = Pattern.compile("onload(.*?)=", Pattern.CASE_INSENSITIVE | Pattern.MULTILINE | Pattern.DOTALL); value = scriptPattern.matcher(value).replaceAll(""); + return HtmlUtils.htmlEscape(value); } - return HtmlUtils.htmlEscape(value); + return null; } public static void main(String[] args) {