diff --git a/laws-base/laws-base-core/src/main/java/com/jero/config/filter/xss/SqlFilter.java b/laws-base/laws-base-core/src/main/java/com/jero/config/filter/xss/SqlFilter.java index fe453fce..ee985e1a 100644 --- a/laws-base/laws-base-core/src/main/java/com/jero/config/filter/xss/SqlFilter.java +++ b/laws-base/laws-base-core/src/main/java/com/jero/config/filter/xss/SqlFilter.java @@ -20,7 +20,7 @@ public class SqlFilter { } public static String sqlInject(String str) { - if (StringUtils.isBlank(str)) { + if (StringUtils.isBlank(str) || str.contains("itemContent") || str.contains("item_content")){ return null; } else { str = StringUtils.replace(str, "\\n", "Line_Break"); @@ -30,12 +30,7 @@ public class SqlFilter { String finalStr = str; List listErr = new CopyOnWriteArrayList<>(); list.parallelStream().forEach(p->{ - int index = StringUtils.indexOfIgnoreCase(finalStr, p + " "); - if (index != -1) { - // 判断是否是条款内容 - if (finalStr.contains("itemContent") || finalStr.contains("item_content")){ - return; - } + if (StringUtils.indexOfIgnoreCase(finalStr, p + " ") != -1) { listErr.add("1"); } });