修改对外报告-模糊搜索注入%问题

2022-08-10 17:42:06 +08:00
parent d27ce381f0
commit c0c5b905f2
1 changed files with 2 additions and 0 deletions
@@ -74,11 +74,13 @@ public class ExtRepoDataController extends JeroController<ExtRepoData, IExtRepoD
        // 文件名称模糊查询
        String fileName = req.getParameter("fileName");
        if (StringUtils.isNotBlank(fileName)) {
+            fileName = fileName.replace("%","\\%");
            queryWrapper.like(ExtRepoData::getFileName, fileName);
        }
        // 上传人模糊查询
        String createBy = req.getParameter("createBy");
        if (StringUtils.isNotBlank(createBy)) {
+            createBy = createBy.replace("%","\\%");
            queryWrapper.like(ExtRepoData::getCreateBy, createBy);
        }
        // 更新时间查询