提交 59e7b917 authored 作者: fit2cloud-chenyw's avatar fit2cloud-chenyw

fix: sql注入给出提示

上级 aae1fef9
package io.dataease.commons.filter; package io.dataease.commons.filter;
import io.dataease.commons.exception.DEException;
import io.dataease.commons.holder.ThreadLocalContextHolder; import io.dataease.commons.holder.ThreadLocalContextHolder;
import io.dataease.commons.wrapper.XssAndSqlHttpServletRequestWrapper; import io.dataease.commons.wrapper.XssAndSqlHttpServletRequestWrapper;
import org.apache.commons.lang3.StringUtils; import org.apache.commons.lang3.StringUtils;
...@@ -42,9 +43,10 @@ public class SqlFilter implements Filter { ...@@ -42,9 +43,10 @@ public class SqlFilter implements Filter {
if (xssRequest.checkXSSAndSql(param)) { if (xssRequest.checkXSSAndSql(param)) {
response.setCharacterEncoding("UTF-8"); response.setCharacterEncoding("UTF-8");
response.setContentType("application/json;charset=UTF-8"); response.setContentType("application/json;charset=UTF-8");
PrintWriter out = response.getWriter(); // PrintWriter out = response.getWriter();
String msg = ThreadLocalContextHolder.getData().toString(); String msg = ThreadLocalContextHolder.getData().toString();
out.write(msg); // out.write(msg);
DEException.throwException(msg);
return; return;
} }
} }
...@@ -52,9 +54,10 @@ public class SqlFilter implements Filter { ...@@ -52,9 +54,10 @@ public class SqlFilter implements Filter {
if (xssRequest.checkParameter()) { if (xssRequest.checkParameter()) {
response.setCharacterEncoding("UTF-8"); response.setCharacterEncoding("UTF-8");
response.setContentType("application/json;charset=UTF-8"); response.setContentType("application/json;charset=UTF-8");
PrintWriter out = response.getWriter(); // PrintWriter out = response.getWriter();
String msg = ThreadLocalContextHolder.getData().toString(); String msg = ThreadLocalContextHolder.getData().toString();
out.write(msg); // out.write(msg);
DEException.throwException(msg);
return; return;
} }
chain.doFilter(xssRequest, response); chain.doFilter(xssRequest, response);
......
Markdown 格式
0%
您添加了 0 到此讨论。请谨慎行事。
请先完成此评论的编辑!
注册 或者 后发表评论