Skip to content
项目
群组
代码片段
帮助
当前项目
正在载入...
登录 / 注册
切换导航面板
D
dataease
项目
项目
详情
活动
周期分析
仓库
仓库
文件
提交
分支
标签
贡献者
图表
比较
统计图
议题
0
议题
0
列表
看板
标记
里程碑
合并请求
0
合并请求
0
CI / CD
CI / CD
流水线
作业
日程
统计图
Wiki
Wiki
代码片段
代码片段
成员
成员
折叠边栏
关闭边栏
活动
图像
聊天
创建新问题
作业
提交
问题看板
Open sidebar
zhu
dataease
Commits
46cd6855
提交
46cd6855
authored
8月 31, 2021
作者:
taojinlong
浏览文件
操作
浏览文件
下载
差异文件
Merge branch 'v1.2' of github.com:dataease/dataease into v1.2
上级
2e3152d0
0cbe6b41
显示空白字符变更
内嵌
并排
正在显示
9 个修改的文件
包含
10 行增加
和
10 行删除
+10
-10
XssAndSqlHttpServletRequestWrapper.java
...e/commons/wrapper/XssAndSqlHttpServletRequestWrapper.java
+1
-1
index.vue
frontend/src/components/DeDrag/index.vue
+2
-2
ComponentWrapper.vue
.../components/canvas/components/Editor/ComponentWrapper.vue
+1
-1
Shape.vue
frontend/src/components/canvas/components/Editor/Shape.vue
+1
-1
en.js
frontend/src/lang/en.js
+1
-1
tw.js
frontend/src/lang/tw.js
+1
-1
zh.js
frontend/src/lang/zh.js
+1
-1
index.vue
frontend/src/views/panel/enshrine/index.vue
+1
-1
privateForm.vue
frontend/src/views/system/user/privateForm.vue
+1
-1
没有找到文件。
backend/src/main/java/io/dataease/commons/wrapper/XssAndSqlHttpServletRequestWrapper.java
浏览文件 @
46cd6855
...
...
@@ -235,7 +235,7 @@ public class XssAndSqlHttpServletRequestWrapper extends HttpServletRequestWrappe
if
(
Arrays
.
stream
(
whiteLists
.
split
(
","
)).
anyMatch
(
item
->
url
.
indexOf
(
item
)
!=
-
1
))
return
false
;
}
Pattern
pattern
=
Pattern
.
compile
(
"(.*\\=.*\\-\\-.*)|(.*(\\+).*)|(.*\\w+(%|\\$|#|&)\\w+.*)|(.*\\|\\|.*)|(.*\\s+(and|or)\\s+.*)"
+
"|(.*\\b(select|update|union|and|or|delete|insert|trancate|char|into|substr|ascii|declare|exec|count|master|into|drop|execute)\\b.*)"
);
"|(.*\\b(select|update|union|and|or|delete|insert|trancate|char|into|substr|ascii|declare|exec|count|master|into|drop|execute
|sleep|extractvalue|updatexml|substring|database|concat|rand
)\\b.*)"
);
Matcher
matcher
=
pattern
.
matcher
(
orders
.
toLowerCase
());
return
matcher
.
find
();
}
...
...
frontend/src/components/DeDrag/index.vue
浏览文件 @
46cd6855
...
...
@@ -20,7 +20,7 @@
@mouseenter="enter"
@mouseleave="leave"
>
<edit-bar
style=
"transform: translateZ(10px)"
v-if=
"active||linkageSettingStatus
"
:active-model=
"'edit'"
:element=
"element"
@
showViewDetails=
"showViewDetails"
/>
<edit-bar
v-if=
"active||linkageSettingStatus"
style=
"transform: translateZ(10px)
"
:active-model=
"'edit'"
:element=
"element"
@
showViewDetails=
"showViewDetails"
/>
<div
v-for=
"(handlei, indexi) in actualHandles"
:key=
"indexi"
...
...
@@ -629,7 +629,7 @@ export default {
elementMouseDown
(
e
)
{
// private 设置当前组件数据及状态
this
.
$store
.
commit
(
'setClickComponentStatus'
,
true
)
if
(
this
.
element
.
component
!==
'v-text'
&&
this
.
element
.
component
!==
'rect-shape'
&&
this
.
element
.
component
!==
'de-input-search'
&&
this
.
element
.
component
!==
'de-select-grid'
&&
this
.
element
.
component
!==
'de-number-range'
)
{
if
(
this
.
element
.
component
!==
'v-text'
&&
this
.
element
.
component
!==
'rect-shape'
&&
this
.
element
.
component
!==
'de-input-search'
&&
this
.
element
.
component
!==
'de-select-grid'
&&
this
.
element
.
component
!==
'de-number-range'
&&
this
.
element
.
component
!==
'de-date'
)
{
e
.
preventDefault
()
}
// 阻止冒泡事件
...
...
frontend/src/components/canvas/components/Editor/ComponentWrapper.vue
浏览文件 @
46cd6855
...
...
@@ -104,7 +104,7 @@ export default {
elementMouseDown
(
e
)
{
// private 设置当前组件数据及状态
this
.
$store
.
commit
(
'setClickComponentStatus'
,
true
)
if
(
this
.
config
.
component
!==
'v-text'
&&
this
.
config
.
component
!==
'rect-shape'
&&
this
.
config
.
component
!==
'de-input-search'
&&
this
.
config
.
component
!==
'de-select-grid'
&&
this
.
config
.
component
!==
'de-number-range'
)
{
if
(
this
.
config
.
component
!==
'v-text'
&&
this
.
config
.
component
!==
'rect-shape'
&&
this
.
config
.
component
!==
'de-input-search'
&&
this
.
config
.
component
!==
'de-select-grid'
&&
this
.
config
.
component
!==
'de-number-range'
&&
this
.
config
.
component
!==
'de-date'
)
{
e
.
preventDefault
()
}
// 阻止冒泡事件
...
...
frontend/src/components/canvas/components/Editor/Shape.vue
浏览文件 @
46cd6855
...
...
@@ -226,7 +226,7 @@ export default {
handleMouseDownOnShape
(
e
)
{
this
.
$store
.
commit
(
'setClickComponentStatus'
,
true
)
if
(
this
.
element
.
component
!==
'v-text'
&&
this
.
element
.
component
!==
'rect-shape'
&&
this
.
element
.
component
!==
'de-input-search'
&&
this
.
element
.
component
!==
'de-select-grid'
&&
this
.
element
.
component
!==
'de-number-range'
)
{
if
(
this
.
element
.
component
!==
'v-text'
&&
this
.
element
.
component
!==
'rect-shape'
&&
this
.
element
.
component
!==
'de-input-search'
&&
this
.
element
.
component
!==
'de-select-grid'
&&
this
.
element
.
component
!==
'de-number-range'
&&
this
.
element
.
component
!==
'de-date'
)
{
e
.
preventDefault
()
}
...
...
frontend/src/lang/en.js
浏览文件 @
46cd6855
...
...
@@ -542,7 +542,7 @@ export default {
create
:
'Create'
,
modify
:
'Modify'
,
delete
:
'Delete'
,
delete_confirm
:
'
Deleting the organization will be associated with deleting the subordinate organization, Are you sure you want to delete it
?'
,
delete_confirm
:
'
Are you sure you want to delete the organization
?'
,
input_name
:
'Please enter name'
,
select_organization
:
'Please select organization'
,
search_by_name
:
'Search by name'
,
...
...
frontend/src/lang/tw.js
浏览文件 @
46cd6855
...
...
@@ -542,7 +542,7 @@ export default {
create
:
'新建組織'
,
modify
:
'修改組織'
,
delete
:
'刪除組織'
,
delete_confirm
:
'
刪除該組織會關聯刪除該組織的下屬組織,確定要刪除
嗎?'
,
delete_confirm
:
'
確定要刪除該組織
嗎?'
,
input_name
:
'請輸入組織名稱'
,
select_organization
:
'請選擇組織'
,
search_by_name
:
'根據名稱搜索'
,
...
...
frontend/src/lang/zh.js
浏览文件 @
46cd6855
...
...
@@ -542,7 +542,7 @@ export default {
create
:
'新建组织'
,
modify
:
'修改组织'
,
delete
:
'删除组织'
,
delete_confirm
:
'
删除该组织会关联删除该组织的下属组织,确定要删除
吗?'
,
delete_confirm
:
'
确定要删除该组织
吗?'
,
input_name
:
'请输入组织名称'
,
select_organization
:
'请选择组织'
,
search_by_name
:
'根据名称搜索'
,
...
...
frontend/src/views/panel/enshrine/index.vue
浏览文件 @
46cd6855
...
...
@@ -10,7 +10,7 @@
<el-table-column
prop=
"name"
:label=
"$t('commons.name')"
>
<template
:id=
"scope.row.storeId"
slot-scope=
"scope"
>
<div
class=
"start-item"
>
<div
class=
"filter-db-row star-item-content"
@
click=
"showPanel(scope.row)"
>
<div
class=
"filter-db-row star-item-content"
style=
"white-space:nowrap;overflow:hidden;text-overflow:ellipsis;"
@
click=
"showPanel(scope.row)"
>
<svg-icon
icon-class=
"panel"
class=
"ds-icon-scene"
/>
<span>
{{
scope
.
row
.
name
}}
</span>
</div>
...
...
frontend/src/views/system/user/privateForm.vue
浏览文件 @
46cd6855
...
...
@@ -77,7 +77,7 @@ import '@riophae/vue-treeselect/dist/vue-treeselect.css'
import
{
PHONE_REGEX
}
from
'@/utils/validate'
import
{
LOAD_CHILDREN_OPTIONS
,
LOAD_ROOT_OPTIONS
}
from
'@riophae/vue-treeselect'
import
{
getDeptTree
,
treeByDeptId
}
from
'@/api/system/dept'
import
{
allRoles
}
from
'@/api/system/
role
'
import
{
allRoles
}
from
'@/api/system/
user
'
import
{
updatePerson
,
persionInfo
}
from
'@/api/system/user'
export
default
{
...
...
编写
预览
Markdown
格式
0%
重试
或
添加新文件
添加附件
取消
您添加了
0
人
到此讨论。请谨慎行事。
请先完成此评论的编辑!
取消
请
注册
或者
登录
后发表评论