WL/laws_weilai
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

修改对外报告-模糊搜索注入%问题

Browse Source
This commit is contained in:
gaosong
2022-08-10 17:42:06 +08:00
parent d27ce381f0
commit c0c5b905f2
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
jero-boot/jero-boot-modules/src/main/java/com/jero/modules/extRepo/controller/ExtRepoDataController.java
+2
View File
@@ -74,11 +74,13 @@ public class ExtRepoDataController extends JeroController<ExtRepoData, IExtRepoD
// 文件名称模糊查询 // 文件名称模糊查询
String fileName = req.getParameter("fileName"); String fileName = req.getParameter("fileName");
if (StringUtils.isNotBlank(fileName)) { if (StringUtils.isNotBlank(fileName)) {
fileName = fileName.replace("%","\\%");
queryWrapper.like(ExtRepoData::getFileName, fileName); queryWrapper.like(ExtRepoData::getFileName, fileName);
} }
// 上传人模糊查询 // 上传人模糊查询
String createBy = req.getParameter("createBy"); String createBy = req.getParameter("createBy");
if (StringUtils.isNotBlank(createBy)) { if (StringUtils.isNotBlank(createBy)) {
createBy = createBy.replace("%","\\%");
queryWrapper.like(ExtRepoData::getCreateBy, createBy); queryWrapper.like(ExtRepoData::getCreateBy, createBy);
} }
// 更新时间查询 // 更新时间查询