manager/my-worker
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update 排除 char

Browse Source
This commit is contained in:
thinkgem
2024-04-19 19:03:00 +08:00
parent d26d86805a
commit 132ff7a58d
1 changed files with 3 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
common/src/main/java/com/jeesite/common/codec/EncodeUtils.java
View File

@@ -258,12 +258,6 @@ public class EncodeUtils {
case '\"': case '\"':
sb.append("＂"); sb.append("＂");
break; break;
// case '&':
// sb.append("＆");
// break;
// case '#':
// sb.append("＃");
// break;
default: default:
sb.append(c); sb.append(c);
break; break;
@@ -282,10 +276,9 @@ public class EncodeUtils {
// 预编译SQL过滤正则表达式 // 预编译SQL过滤正则表达式
private static Pattern sqlPattern = Pattern.compile( private static Pattern sqlPattern = Pattern.compile(
"(?:')|(?:--)|(/\\*(?:.|[\\n\\r])*?\\*/)|((extractvalue|updatexml|if|mid|database|rand|user)([\\s]*?)\\()|" "(?:')|(?:--)|(/\\*(?:.|[\\n\\r])*?\\*/)|((extractvalue|updatexml|if|mid|database|rand|user)([\\s]*?)\\()"
+ "(\\b(select|update|and|or|delete|insert|trancate|char|into|substr|ascii|declare|exec|count|master|into|" + "|(\\b(select|update|and|or|delete|insert|trancate|substr|ascii|declare|exec|count|master|into"
+ "drop|execute|case when|sleep|union|load_file)\\b)", + "|drop|execute|case when|sleep|union|load_file)\\b)", Pattern.CASE_INSENSITIVE);
Pattern.CASE_INSENSITIVE);
private static Pattern orderByPattern = Pattern.compile("[a-z0-9_\\.\\, ]*", Pattern.CASE_INSENSITIVE); private static Pattern orderByPattern = Pattern.compile("[a-z0-9_\\.\\, ]*", Pattern.CASE_INSENSITIVE);
/** /**