diff --git a/laws-base/laws-base-core/src/main/java/com/jero/config/filter/xss/SqlFilter.java b/laws-base/laws-base-core/src/main/java/com/jero/config/filter/xss/SqlFilter.java index 92a07032..1074643b 100644 --- a/laws-base/laws-base-core/src/main/java/com/jero/config/filter/xss/SqlFilter.java +++ b/laws-base/laws-base-core/src/main/java/com/jero/config/filter/xss/SqlFilter.java @@ -24,7 +24,12 @@ public class SqlFilter { for(int var4 = 0; var4 < var3; ++var4) { String keyword = var2[var4]; - if (StringUtils.indexOfIgnoreCase(str, keyword + " ") != -1) { + int index = StringUtils.indexOfIgnoreCase(str, keyword + " "); + if (index != -1) { + // 判断是否是条款内容 + if (str.contains("itemContent:") || str.contains("item_content:")){ + break; + } throw new JeroBootException("包含非法字符"); } }