数据库提交

cuikaidong

2025-06-12 066063ed92fdd40da4dfe21770557f3adba3e1af

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
Êþº¾4™
'TUVWX
T
YZ[
\
]^
_`    abcdefgh
ijekl
_mno
_p
_qrestuv
iw
_x
_yz
{|}
log
Lorg/slf4j/Logger;
TABLE_DICT_SIGN_SALT
Ljava/lang/String;
 ConstantValue
xssStr
<init>
()V
Code
LineNumberTable
LocalVariableTable
this
(Lorg/jeecg/common/util/SqlInjectionUtil;
checkDictTableSign
N(Ljava/lang/String;Ljava/lang/String;Ljavax/servlet/http/HttpServletRequest;)V
dictCode
sign
request
'Ljavax/servlet/http/HttpServletRequest;
accessToken
signStr
javaSign
 StackMapTable~
MethodParameters
 filterContent
(Ljava/lang/String;)V

i

I
value
xssArr
[Ljava/lang/String;G
([Ljava/lang/String;)V
values
specialFilterContent
 specialXssStr

Deprecated
RuntimeVisibleAnnotations
Ljava/lang/Deprecated;
#specialFilterContentForOnlineReport
<clinit>

SourceFile
SqlInjectionUtil.java./
X-Access-Token€
java/lang/StringBuilder‚ƒ
&org/jeecg/common/util/SqlInjectionUtil
20200501„…†‡~ˆ‰()
1表字典，SQL注入漏洞签名校验失败 ï¼š
!=

,dictCode=Š‹B
-org/jeecg/common/exception/JeecgBootException
无权限访问！.B
6 è¡¨å­—典，SQL注入漏洞签名校验成功！sign=ŒB
…
n'|and |exec |insert |select |delete |update |drop |count |chr |mid |master |truncate |char |declare |;|or |+|,
\|Ž‘
+请注意，存在SQL注入关键词---> {}‹’
2请注意，值可能存在SQL注入风险!---> {}
java/lang/RuntimeException
/请注意，值可能存在SQL注入风险!--->
o exec | insert | select | delete | update | drop | count | chr | mid | master | truncate | char | declare |;|+|“…”•
Z exec | insert | delete | update | drop | chr | mid | master | truncate | char | declare |–—˜
java/lang/Object
java/lang/String
%javax/servlet/http/HttpServletRequest
    getHeader
&(Ljava/lang/String;)Ljava/lang/String;
append
-(Ljava/lang/String;)Ljava/lang/StringBuilder;
toString
()Ljava/lang/String;
cn/hutool/crypto/SecureUtil
md5
equals
(Ljava/lang/Object;)Z
org/slf4j/Logger
error
info
toLowerCase
split
'(Ljava/lang/String;)[Ljava/lang/String;
indexOf
(Ljava/lang/String;)I
'(Ljava/lang/String;Ljava/lang/Object;)V
trim

startsWith
(Ljava/lang/String;)Z
org/slf4j/LoggerFactory
    getLogger
%(Ljava/lang/Class;)Lorg/slf4j/Logger;!'()*+
,-+
,
./
0/

*·
±1
2
34    560
,¹N»Y·*¶¶-¶¶    :¸
:+¶š;²»Y· ¶+¶¶¶¶*¶¶    ¹»Y·¿²»Y·¶+¶¶*¶¶    ¹±1"     "!)"2#`$j&Ž'2>7+8+
9:    †;+"m<+)f=+>
þj???@ 789    AB0åh*Æ*¶™±*¶K¶L=+¾¢G*+2¶¤6²+2¹²*¹»Y»Y· ¶*¶¶    ·!¿„
§ÿ¹±1.1 2567#8.9;:F;a7g>2 JCDhE+MFG
> ýH
ûCú@
E    AI0
3¶L*M,¾>6¢y,2:Æ ¶™±¶:6+¾¢L+2¶¤9²+2¹²¹»Y»Y· ¶¶¶    ·!¿„
§ÿ³„
§ÿ‡±16 HIJ+K,N3O=PJQXRdS€O†IŒW2*6PCDjE+JG…FG
>(ÿHHH

ü?ü    
ûIùø@
J    KB0
w"L+¶M*Æ*¶™±*¶K>,¾¢T*,2¶£*,2¶#¶$™6²,2¹²*¹»Y»Y· ¶*¶¶    ·!¿„
§ÿ¬±12ab
cdgh%i=jJkUlphvo2*WCDwE+tL+

mFG>ý?Hü
2ú@
EMN
O    PB0
w%L+¶M*Æ*¶™±*¶K>,¾¢T*,2¶£*,2¶#¶$™6²,2¹²*¹»Y»Y· ¶*¶¶    ·!¿„
§ÿ¬±12z{
|}€%‚=ƒJ„U…pvˆ2*WCDwE+tL+

mFG>ý?Hü
2ú@
EMN
OQ/
0!
    ¸&³±
1
 
RS