JeroBoot/base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

【fix sonar】 XSSUtils.java文件

Browse Source
This commit is contained in:
tianwenbo
2023-03-07 15:34:42 +08:00
parent 743bf2aa14
commit c6e1f3ef15
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
jero-boot/jero-boot-module-system/src/main/java/com/jero/modules/system/util/XSSUtils.java
+1 -1
View File
@@ -12,7 +12,7 @@ import java.util.regex.Pattern;
public class XSSUtils { public class XSSUtils {
public static String striptXSS(String value) { public static String striptXSS(String value) {
if (value != null) { if (value != null) {
value = value.replaceAll(" ", ""); value = value.replace(" ", "");
Pattern scriptPattern = Pattern.compile("<script>(.*?)</script>", Pattern.CASE_INSENSITIVE); Pattern scriptPattern = Pattern.compile("<script>(.*?)</script>", Pattern.CASE_INSENSITIVE);
value = scriptPattern.matcher(value).replaceAll(""); value = scriptPattern.matcher(value).replaceAll("");
scriptPattern = Pattern.compile("src[\r\n]*=[\r\n]*\\\'(.*?)\\\'", Pattern.CASE_INSENSITIVE | Pattern.MULTILINE | Pattern.DOTALL); scriptPattern = Pattern.compile("src[\r\n]*=[\r\n]*\\\'(.*?)\\\'", Pattern.CASE_INSENSITIVE | Pattern.MULTILINE | Pattern.DOTALL);