admin/lx-admin-backend
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update 优化 xss包装器 变量命名错误

Browse Source
This commit is contained in:
疯狂的狮子li 2022-12-27 09:45:32 +08:00
parent f1a09711c1
commit 4761237849
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
ruoyi-common/src/main/java/com/ruoyi/common/filter/XssHttpServletRequestWrapper.java
View File

@ -33,12 +33,12 @@ public class XssHttpServletRequestWrapper extends HttpServletRequestWrapper {
String[] values = super.getParameterValues(name); String[] values = super.getParameterValues(name);
if (values != null) { if (values != null) {
int length = values.length; int length = values.length;
String[] escapseValues = new String[length]; String[] escapesValues = new String[length];
for (int i = 0; i < length; i++) { for (int i = 0; i < length; i++) {
// 防xss攻击和过滤前后空格 // 防xss攻击和过滤前后空格
escapseValues[i] = HtmlUtil.cleanHtmlTag(values[i]).trim(); escapesValues[i] = HtmlUtil.cleanHtmlTag(values[i]).trim();
} }
return escapseValues; return escapesValues;
} }
return super.getParameterValues(name); return super.getParameterValues(name);
} }