From c6e1f3ef15ae8789aea85bb7227f1c1f51191e40 Mon Sep 17 00:00:00 2001 From: tianwenbo Date: Tue, 7 Mar 2023 15:34:42 +0800 Subject: [PATCH] =?UTF-8?q?=E3=80=90fix=20sonar=E3=80=91=20XSSUtils.java?= =?UTF-8?q?=E6=96=87=E4=BB=B6?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../src/main/java/com/jero/modules/system/util/XSSUtils.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/jero-boot/jero-boot-module-system/src/main/java/com/jero/modules/system/util/XSSUtils.java b/jero-boot/jero-boot-module-system/src/main/java/com/jero/modules/system/util/XSSUtils.java index 5508f065..8e51c195 100644 --- a/jero-boot/jero-boot-module-system/src/main/java/com/jero/modules/system/util/XSSUtils.java +++ b/jero-boot/jero-boot-module-system/src/main/java/com/jero/modules/system/util/XSSUtils.java @@ -12,7 +12,7 @@ import java.util.regex.Pattern; public class XSSUtils { public static String striptXSS(String value) { if (value != null) { - value = value.replaceAll(" ", ""); + value = value.replace(" ", ""); Pattern scriptPattern = Pattern.compile("", Pattern.CASE_INSENSITIVE); value = scriptPattern.matcher(value).replaceAll(""); scriptPattern = Pattern.compile("src[\r\n]*=[\r\n]*\\\'(.*?)\\\'", Pattern.CASE_INSENSITIVE | Pattern.MULTILINE | Pattern.DOTALL);