update ruoyi-common/src/main/java/com/ruoyi/common/utils/sql/SqlUtil.java.

Signed-off-by: yi-l-i-yi-li <8995991+yi-l-i-yi-li@user.noreply.gitee.com>
This commit is contained in:
yi-l-i-yi-li 2022-08-15 11:18:10 +00:00 committed by Gitee
parent f9da2e5b87
commit c61a805792
No known key found for this signature in database
GPG Key ID: 173E9B9CA92EEF8F
1 changed files with 2 additions and 1 deletions

View File

@ -13,6 +13,7 @@ public class SqlUtil
/**
* 定义常用的 sql关键字
* 删除管道符 "|"左边的空格空格会导致sql注入
* chr |mid |char |and | 去掉空格容易引起误报
*/
public static String SQL_REGEX = "select|insert|delete|update|drop|count|exec|chr |mid |master|truncate|char |and |declare";