diff --git a/src/main/java/com/baiyee/adcallback/api/filter/SqlFilter.java b/src/main/java/com/baiyee/adcallback/api/filter/SqlFilter.java index 0252712..13f81eb 100644 --- a/src/main/java/com/baiyee/adcallback/api/filter/SqlFilter.java +++ b/src/main/java/com/baiyee/adcallback/api/filter/SqlFilter.java @@ -1,5 +1,6 @@ package com.baiyee.adcallback.api.filter; +import cn.hutool.core.util.StrUtil; import org.springframework.context.annotation.Configuration; import javax.servlet.*; import javax.servlet.annotation.WebFilter; @@ -51,7 +52,17 @@ public class SqlFilter implements Filter{ "information_schema.columns|table_schema|union|where|order|by|" + "'\\*|\\;|\\-|\\--|\\+|\\,|\\//|\\/|\\%|\\#"; //使用正则表达式进行匹配 - return s.matches(badStr); + String[] split = badStr.split("\\|"); + + if (split.length > 0){ + for (String s1 : split) { + if (StrUtil.contains(s, s1)) { + return Boolean.TRUE; + } + } + } + return Boolean.FALSE; +// return s.matches(badStr); } @Override