center/dataease-dm
center/dataease-dm
13
0
Fork 0
forked from github/dataease
Code Pull Requests Activity

Merge pull request #4839 from dataease/pr@dev@perf_msg_api

Browse Source 
perf(系统管理): 非法排序字段异常
This commit is contained in:
fit2cloud-chenyw 2023-03-21 23:03:03 +08:00 committed by GitHub
commit 4fb63f559d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 3 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
backend/src/main/java/io/dataease/auth/aop/SqlInjectAop.java
View File

@ -46,7 +46,7 @@ public class SqlInjectAop {
String[] value = annotation.value(); String[] value = annotation.value();
boolean illegal = isIllegal(value, request.getOrders()); boolean illegal = isIllegal(value, request.getOrders());
if (illegal) { if (illegal) {
DEException.throwException("Illegal order exp"); DEException.throwException("Illegal sort exp");
} }
return point.proceed(args); return point.proceed(args);
} catch (Throwable e) { } catch (Throwable e) {

6
backend/src/main/java/io/dataease/controller/sys/request/MsgRequest.java
View File

@ -1,15 +1,15 @@
package io.dataease.controller.sys.request; package io.dataease.controller.sys.request;
import io.dataease.controller.sys.base.BaseGridRequest;
import io.swagger.annotations.ApiModel; import io.swagger.annotations.ApiModel;
import io.swagger.annotations.ApiModelProperty; import io.swagger.annotations.ApiModelProperty;
import lombok.Data; import lombok.Data;
import java.io.Serializable; import java.io.Serializable;
import java.util.List;
@Data @Data
@ApiModel("消息条件") @ApiModel("消息条件")
public class MsgRequest implements Serializable { public class MsgRequest extends BaseGridRequest implements Serializable {
private static final long serialVersionUID = 1920091635946508658L; private static final long serialVersionUID = 1920091635946508658L;
@ -19,6 +19,4 @@ public class MsgRequest implements Serializable {
@ApiModelProperty("是否订阅") @ApiModelProperty("是否订阅")
private Boolean status; private Boolean status;
@ApiModelProperty("排序描述")
private List<String> orders;
} }