mirror of
https://gitee.com/dromara/sa-token.git
synced 2025-05-03 12:17:57 +08:00
fix(core): 新增对分号字符的 path 路径校验
This commit is contained in:
parent
4afc0f9b54
commit
71242c15b5
@ -53,11 +53,13 @@ public final class SaFirewallStrategy {
|
||||
* 请求 path 不允许出现的字符
|
||||
*/
|
||||
public String[] INVALID_CHARACTER = {
|
||||
"//", "\\",
|
||||
"//", // //
|
||||
"\\", // \
|
||||
"%2e", "%2E", // .
|
||||
"%2f", "%2F", // /
|
||||
"%5c", "%5C", // \
|
||||
"%25" // 空格
|
||||
";", "%3b", "%3B", // ; // 参考资料:https://mp.weixin.qq.com/s/77CIDZbgBwRunJeluofPTA
|
||||
"%25" // 空格
|
||||
};
|
||||
|
||||
/**
|
||||
|
Loading…
Reference in New Issue
Block a user