Merge pull request #9347 from dataease/pr@dev@fix_interface-sql-inject

fix(系统设置): 修复模版查询接口sql注入问题
2024-04-25 17:03:57 +08:00 · 2024-04-25 17:03:57 +08:00 · 7d7377781b
commit 7d7377781b
parent 6ebce4d9d8 a40fe6b88f
1 changed files with 0 additions and 3 deletions
--- a/core/backend/src/main/java/io/dataease/ext/ExtPanelTemplateMapper.xml
+++ b/core/backend/src/main/java/io/dataease/ext/ExtPanelTemplateMapper.xml
@ -80,9 +80,6 @@
                and panel_template.level = #{level}
            </if>
        </where>
-        <if test="sort != null">
-            order by ${sort}
-        </if>
        <if test="sort == null">
            order by panel_template.create_time desc
        </if>