From 943d5302040290d088389b7332d92f62ce98579a Mon Sep 17 00:00:00 2001
From: yjz <3131811435@qq.com>
Date: Mon, 19 Aug 2024 09:11:00 +0800
Subject: [PATCH] =?UTF-8?q?fix(88798):=20=E6=B6=89=E5=8F=8A=E6=9D=A1?=
 =?UTF-8?q?=E6=AC=BE=E5=86=85=E5=AE=B9=E4=B8=8D=E6=A0=A1=E9=AA=8C=E9=9D=9E?=
 =?UTF-8?q?=E6=B3=95=E5=AD=97=E7=AC=A6?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../main/java/com/jero/config/filter/xss/SqlFilter.java    | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/laws-base/laws-base-core/src/main/java/com/jero/config/filter/xss/SqlFilter.java b/laws-base/laws-base-core/src/main/java/com/jero/config/filter/xss/SqlFilter.java
index 92a07032..1074643b 100644
--- a/laws-base/laws-base-core/src/main/java/com/jero/config/filter/xss/SqlFilter.java
+++ b/laws-base/laws-base-core/src/main/java/com/jero/config/filter/xss/SqlFilter.java
@@ -24,7 +24,12 @@ public class SqlFilter {
 
             for(int var4 = 0; var4 < var3; ++var4) {
                 String keyword = var2[var4];
-                if (StringUtils.indexOfIgnoreCase(str, keyword + " ") != -1) {
+                int index = StringUtils.indexOfIgnoreCase(str, keyword + " ");
+                if (index != -1) {
+                    // 判断是否是条款内容
+                    if (str.contains("itemContent:") || str.contains("item_content:")){
+                        break;
+                    }
                     throw new JeroBootException("包含非法字符");
                 }
             }