github/dataease
github/dataease
3
0
Fork 1
mirror of https://github.com/dataease/dataease.git synced 2025-02-26 05:03:00 +08:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Merge branch 'dev' into pr@dev_memory_component

Browse Source
This commit is contained in:
dataeaseShu 2023-03-24 14:46:05 +08:00
commit 595465a762
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
backend/src/main/java/io/dataease/auth/aop/SqlInjectAop.java
View File

@ -5,6 +5,7 @@ import io.dataease.auth.annotation.SqlInjectValidator;
import io.dataease.commons.exception.DEException; import io.dataease.commons.exception.DEException;
import io.dataease.controller.sys.base.BaseGridRequest; import io.dataease.controller.sys.base.BaseGridRequest;
import org.apache.commons.collections4.CollectionUtils; import org.apache.commons.collections4.CollectionUtils;
import org.apache.commons.lang3.StringUtils;
import org.aspectj.lang.ProceedingJoinPoint; import org.aspectj.lang.ProceedingJoinPoint;
import org.aspectj.lang.Signature; import org.aspectj.lang.Signature;
import org.aspectj.lang.annotation.Around; import org.aspectj.lang.annotation.Around;
@ -63,6 +64,6 @@ public class SqlInjectAop {
return orderList.stream().anyMatch(exp -> return orderList.stream().anyMatch(exp ->
Arrays.stream(exp.toLowerCase().split(",")).anyMatch(word -> Arrays.stream(exp.toLowerCase().split(",")).anyMatch(word ->
Arrays.stream(word.split(" ")).anyMatch(item -> Arrays.stream(word.split(" ")).anyMatch(item ->
!wordList.contains(item)))); StringUtils.isNotBlank(item.trim()) && !wordList.contains(item.trim()))));
} }
} }