diff --git a/laws-base/laws-base-core/src/main/java/com/jero/common/util/SqlInjectionUtil.java b/laws-base/laws-base-core/src/main/java/com/jero/common/util/SqlInjectionUtil.java
index ceb6a6d2..e34c0b60 100644
--- a/laws-base/laws-base-core/src/main/java/com/jero/common/util/SqlInjectionUtil.java
+++ b/laws-base/laws-base-core/src/main/java/com/jero/common/util/SqlInjectionUtil.java
@@ -23,7 +23,7 @@ public class SqlInjectionUtil {
 	 * （上线修改值 20200501，同步修改前端的盐值）
 	 */
 	private static final String TABLE_DICT_SIGN_SALT = "20200501";
-	private static final String XSS_STR = "'|and |exec |insert |select |delete |update |drop |count |chr |mid |master |truncate |char |declare |;|or |+";
+	private static final String XSS_STR = "'|and |exec |insert |select |delete |update |drop |count |chr |mid |master |truncate |char |declare |;|or |+|--";
 
 	private static final String SYMBOL_CONSTANT = "/\\*.*\\*/";
 	private static final String SQL_INJECTION_CONSTANT = "请注意，存在SQL注入关键词---> {}";