center/dataease-dm
center/dataease-dm
13
0
Fork 0
forked from github/dataease
Code Pull Requests Activity

perf(消息api): 排序字段报错

Browse Source
This commit is contained in:
fit2cloud-chenyw 2023-03-24 14:38:24 +08:00
parent 7985e26fcd
commit 79e8be4355
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
backend/src/main/java/io/dataease/auth/aop/SqlInjectAop.java
View File

@ -5,6 +5,7 @@ import io.dataease.auth.annotation.SqlInjectValidator;
import io.dataease.commons.exception.DEException;
import io.dataease.controller.sys.base.BaseGridRequest;
import org.apache.commons.collections4.CollectionUtils;
import org.apache.commons.lang3.StringUtils;
import org.aspectj.lang.ProceedingJoinPoint;
import org.aspectj.lang.Signature;
import org.aspectj.lang.annotation.Around;
@ -63,6 +64,6 @@ public class SqlInjectAop {
return orderList.stream().anyMatch(exp ->
Arrays.stream(exp.toLowerCase().split(",")).anyMatch(word ->
Arrays.stream(word.split(" ")).anyMatch(item ->
!wordList.contains(item))));
StringUtils.isNotBlank(item.trim()) && !wordList.contains(item.trim()))));
}
}