center/dataease-dm
center/dataease-dm
13
0
Fork 0
forked from github/dataease
Code Pull Requests Activity

Merge pull request #4879 from dataease/pr@dev@fix_msg_api

Browse Source 
perf(消息api): 排序字段报错
This commit is contained in:
fit2cloud-chenyw 2023-03-24 14:40:53 +08:00 committed by GitHub
commit a78044ed5e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
backend/src/main/java/io/dataease/auth/aop/SqlInjectAop.java
View File

@ -5,6 +5,7 @@ import io.dataease.auth.annotation.SqlInjectValidator;
import io.dataease.commons.exception.DEException;
import io.dataease.controller.sys.base.BaseGridRequest;
import org.apache.commons.collections4.CollectionUtils;
import org.apache.commons.lang3.StringUtils;
import org.aspectj.lang.ProceedingJoinPoint;
import org.aspectj.lang.Signature;
import org.aspectj.lang.annotation.Around;
@ -63,6 +64,6 @@ public class SqlInjectAop {
return orderList.stream().anyMatch(exp ->
Arrays.stream(exp.toLowerCase().split(",")).anyMatch(word ->
Arrays.stream(word.split(" ")).anyMatch(item ->
!wordList.contains(item))));
StringUtils.isNotBlank(item.trim()) && !wordList.contains(item.trim()))));
}
}