🔒 Fixing security issues. close #3429 日志分页查询 desc asc 字段入参查询存在 SQL 注入

This commit is contained in:
lbw committed 2021-12-08 18:00:05 +08:00
1 parent 5d318f994c
commit 5813aef393
1 file changed
+1 -1
@@ -47,7 +47,7 @@ import java.util.stream.Collectors;
public class SqlFilterArgumentResolver implements HandlerMethodArgumentResolver {
private final static String[] KEYWORDS = { "master", "truncate", "insert", "select", "delete", "update", "declare",
"alter", "drop", "sleep" };
"alter", "drop", "sleep", "extractvalue", "concat" };
/**
* 判断Controller是否包含page 参数