From 9dd467ddce341966e4428ed212e002ce470b3523 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E6=A2=81=E7=90=A6=E6=B6=9B?= <liangqitao@syxysoft.com>
Date: Wed, 21 Aug 2024 19:05:37 +0800
Subject: [PATCH] =?UTF-8?q?=E4=BF=AE=E6=94=B9=E8=BF=87=E6=BB=A4=E5=85=B3?=
 =?UTF-8?q?=E9=94=AE=E8=AF=8D=E5=AE=9E=E7=8E=B0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../main/java/com/jero/config/filter/xss/SqlFilter.java  | 9 ++-------
 1 file changed, 2 insertions(+), 7 deletions(-)

diff --git a/laws-base/laws-base-core/src/main/java/com/jero/config/filter/xss/SqlFilter.java b/laws-base/laws-base-core/src/main/java/com/jero/config/filter/xss/SqlFilter.java
index fe453fce..ee985e1a 100644
--- a/laws-base/laws-base-core/src/main/java/com/jero/config/filter/xss/SqlFilter.java
+++ b/laws-base/laws-base-core/src/main/java/com/jero/config/filter/xss/SqlFilter.java
@@ -20,7 +20,7 @@ public class SqlFilter {
     }
 
     public static String sqlInject(String str) {
-        if (StringUtils.isBlank(str)) {
+        if (StringUtils.isBlank(str) || str.contains("itemContent") || str.contains("item_content")){
             return null;
         } else {
             str = StringUtils.replace(str, "\\n", "Line_Break");
@@ -30,12 +30,7 @@ public class SqlFilter {
             String finalStr = str;
             List<String> listErr = new CopyOnWriteArrayList<>();
             list.parallelStream().forEach(p->{
-                int index = StringUtils.indexOfIgnoreCase(finalStr, p + " ");
-                if (index != -1) {
-                    // 判断是否是条款内容
-                    if (finalStr.contains("itemContent") || finalStr.contains("item_content")){
-                        return;
-                    }
+                if (StringUtils.indexOfIgnoreCase(finalStr, p + " ") != -1) {
                     listErr.add("1");
                 }
             });