From 17a910971bcf7954575c8018f59c66682432b000 Mon Sep 17 00:00:00 2001 From: lijiarao Date: Wed, 15 Nov 2023 17:23:50 +0800 Subject: [PATCH] =?UTF-8?q?update=20QueryGenerator=E7=9A=84sql=E6=B3=A8?= =?UTF-8?q?=E5=85=A5=E9=97=AE=E9=A2=98?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../src/main/java/com/jero/common/util/SqlInjectionUtil.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/laws-base/laws-base-core/src/main/java/com/jero/common/util/SqlInjectionUtil.java b/laws-base/laws-base-core/src/main/java/com/jero/common/util/SqlInjectionUtil.java index ceb6a6d2..e34c0b60 100644 --- a/laws-base/laws-base-core/src/main/java/com/jero/common/util/SqlInjectionUtil.java +++ b/laws-base/laws-base-core/src/main/java/com/jero/common/util/SqlInjectionUtil.java @@ -23,7 +23,7 @@ public class SqlInjectionUtil { * （上线修改值 20200501，同步修改前端的盐值） */ private static final String TABLE_DICT_SIGN_SALT = "20200501"; - private static final String XSS_STR = "'|and |exec |insert |select |delete |update |drop |count |chr |mid |master |truncate |char |declare |;|or |+"; + private static final String XSS_STR = "'|and |exec |insert |select |delete |update |drop |count |chr |mid |master |truncate |char |declare |;|or |+|--"; private static final String SYMBOL_CONSTANT = "/\\*.*\\*/"; private static final String SQL_INJECTION_CONSTANT = "请注意，存在SQL注入关键词---> {}";