|
|
|
@ -1,5 +1,6 @@
|
|
|
|
|
package com.baiyee.adcallback.api.filter;
|
|
|
|
|
|
|
|
|
|
import cn.hutool.core.util.StrUtil;
|
|
|
|
|
import org.springframework.context.annotation.Configuration;
|
|
|
|
|
import javax.servlet.*;
|
|
|
|
|
import javax.servlet.annotation.WebFilter;
|
|
|
|
@ -51,7 +52,17 @@ public class SqlFilter implements Filter{
|
|
|
|
|
"information_schema.columns|table_schema|union|where|order|by|" +
|
|
|
|
|
"'\\*|\\;|\\-|\\--|\\+|\\,|\\//|\\/|\\%|\\#";
|
|
|
|
|
//使用正则表达式进行匹配
|
|
|
|
|
return s.matches(badStr);
|
|
|
|
|
String[] split = badStr.split("\\|");
|
|
|
|
|
|
|
|
|
|
if (split.length > 0){
|
|
|
|
|
for (String s1 : split) {
|
|
|
|
|
if (StrUtil.contains(s, s1)) {
|
|
|
|
|
return Boolean.TRUE;
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
return Boolean.FALSE;
|
|
|
|
|
// return s.matches(badStr);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
@Override
|
|
|
|
|