fix(core): 新增对分号字符的 path 路径校验

This commit is contained in:
click33 2025-01-09 14:47:50 +08:00
parent 4afc0f9b54
commit 71242c15b5

View File

@ -53,10 +53,12 @@ public final class SaFirewallStrategy {
* 请求 path 不允许出现的字符
*/
public String[] INVALID_CHARACTER = {
"//", "\\",
"//", // //
"\\", // \
"%2e", "%2E", // .
"%2f", "%2F", // /
"%5c", "%5C", // \
";", "%3b", "%3B", // ; // 参考资料https://mp.weixin.qq.com/s/77CIDZbgBwRunJeluofPTA
"%25" // 空格
};