From 5813aef393774afc11a036ab06f32cb70b773e4e Mon Sep 17 00:00:00 2001 From: lbw Date: Wed, 8 Dec 2021 18:00:05 +0800 Subject: [PATCH] =?UTF-8?q?:lock:=20Fixing=20security=20issues.=20close=20?= =?UTF-8?q?#3429=20=E6=97=A5=E5=BF=97=E5=88=86=E9=A1=B5=E6=9F=A5=E8=AF=A2?= =?UTF-8?q?=20desc=20asc=20=E5=AD=97=E6=AE=B5=E5=85=A5=E5=8F=82=E6=9F=A5?= =?UTF-8?q?=E8=AF=A2=E5=AD=98=E5=9C=A8=20SQL=20=E6=B3=A8=E5=85=A5?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../pigx/common/data/resolver/SqlFilterArgumentResolver.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pigx-common/pigx-common-data/src/main/java/com/pig4cloud/pigx/common/data/resolver/SqlFilterArgumentResolver.java b/pigx-common/pigx-common-data/src/main/java/com/pig4cloud/pigx/common/data/resolver/SqlFilterArgumentResolver.java index b9d50af81..6acff2b88 100644 --- a/pigx-common/pigx-common-data/src/main/java/com/pig4cloud/pigx/common/data/resolver/SqlFilterArgumentResolver.java +++ b/pigx-common/pigx-common-data/src/main/java/com/pig4cloud/pigx/common/data/resolver/SqlFilterArgumentResolver.java @@ -47,7 +47,7 @@ import java.util.stream.Collectors; public class SqlFilterArgumentResolver implements HandlerMethodArgumentResolver { private final static String[] KEYWORDS = { "master", "truncate", "insert", "select", "delete", "update", "declare", - "alter", "drop", "sleep" }; + "alter", "drop", "sleep", "extractvalue", "concat" }; /** * 判断Controller是否包含page 参数