QR/laws_chery_serve
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

修改过滤关键词实现

Browse Source
This commit is contained in:
梁琦涛
2024-08-21 19:05:37 +08:00
parent ba6abbb49e
commit 9dd467ddce
1 changed files with 2 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
laws-base/laws-base-core/src/main/java/com/jero/config/filter/xss/SqlFilter.java
+2 -7
View File
@@ -20,7 +20,7 @@ public class SqlFilter {
} }
public static String sqlInject(String str) { public static String sqlInject(String str) {
if (StringUtils.isBlank(str)) { if (StringUtils.isBlank(str) || str.contains("itemContent") || str.contains("item_content")){
return null; return null;
} else { } else {
str = StringUtils.replace(str, "\\n", "Line_Break"); str = StringUtils.replace(str, "\\n", "Line_Break");
@@ -30,12 +30,7 @@ public class SqlFilter {
String finalStr = str; String finalStr = str;
List<String> listErr = new CopyOnWriteArrayList<>(); List<String> listErr = new CopyOnWriteArrayList<>();
list.parallelStream().forEach(p->{ list.parallelStream().forEach(p->{
int index = StringUtils.indexOfIgnoreCase(finalStr, p + " "); if (StringUtils.indexOfIgnoreCase(finalStr, p + " ") != -1) {
if (index != -1) {
// 判断是否是条款内容
if (finalStr.contains("itemContent") || finalStr.contains("item_content")){
return;
}
listErr.add("1"); listErr.add("1");
} }
}); });