lsm/sa-token
1
0
Fork 0
mirror of https://gitee.com/dromara/sa-token.git synced 2025-05-03 20:27:54 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix(core): 新增对分号字符的 path 路径校验

Browse Source
This commit is contained in:
click33 2025-01-09 14:47:50 +08:00
parent 4afc0f9b54
commit 71242c15b5
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
sa-token-core/src/main/java/cn/dev33/satoken/strategy/SaFirewallStrategy.java
View File

@ -53,11 +53,13 @@ public final class SaFirewallStrategy {
* 请求 path 不允许出现的字符 * 请求 path 不允许出现的字符
*/ */
public String[] INVALID_CHARACTER = { public String[] INVALID_CHARACTER = {
"//", "\\", "//", // //
"\\", // \
"%2e", "%2E", // . "%2e", "%2E", // .
"%2f", "%2F", // / "%2f", "%2F", // /
"%5c", "%5C", // \ "%5c", "%5C", // \
"%25" // 空格 ";", "%3b", "%3B", // ; // 参考资料：https://mp.weixin.qq.com/s/77CIDZbgBwRunJeluofPTA
"%25" // 空格
}; };
/** /**