mirror of
http://git.pig4cloud.com/pig/pigx.git
synced 2026-11-08 12:39:05 +08:00
🔒 Fixing security issues. close #3429 日志分页查询 desc asc 字段入参查询存在 SQL 注入
This commit is contained in:
1 parent
5d318f994c
commit
5813aef393
1 file changed
+1
-1
+1
-1
@@ -47,7 +47,7 @@ import java.util.stream.Collectors;
|
||||
public class SqlFilterArgumentResolver implements HandlerMethodArgumentResolver {
|
||||
|
||||
private final static String[] KEYWORDS = { "master", "truncate", "insert", "select", "delete", "update", "declare",
|
||||
"alter", "drop", "sleep" };
|
||||
"alter", "drop", "sleep", "extractvalue", "concat" };
|
||||
|
||||
/**
|
||||
* 判断Controller是否包含page 参数
|
||||
|
||||
Reference in new issue
Block a user