QR/laws_chery_serve
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(88798): 涉及条款内容不校验非法字符

Browse Source
This commit is contained in:
yjz
2024-08-19 09:11:00 +08:00
parent 7013703225
commit 943d530204
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
laws-base/laws-base-core/src/main/java/com/jero/config/filter/xss/SqlFilter.java
+6 -1
View File
@@ -24,7 +24,12 @@ public class SqlFilter {
for(int var4 = 0; var4 < var3; ++var4) { for(int var4 = 0; var4 < var3; ++var4) {
String keyword = var2[var4]; String keyword = var2[var4];
if (StringUtils.indexOfIgnoreCase(str, keyword + " ") != -1) { int index = StringUtils.indexOfIgnoreCase(str, keyword + " ");
if (index != -1) {
// 判断是否是条款内容
if (str.contains("itemContent:") || str.contains("item_content:")){
break;
}
throw new JeroBootException("包含非法字符"); throw new JeroBootException("包含非法字符");
} }
} }