|
|
|
@ -281,7 +281,7 @@ public class XssAndSqlHttpServletRequestWrapper extends HttpServletRequestWrappe |
|
|
|
if (flag) { |
|
|
|
return flag; |
|
|
|
} |
|
|
|
scriptPattern = Pattern.compile("\\b(and|exec|insert|select|drop|grant|alter|delete|update|count|chr|mid|master|truncate|char|declare|or)\\b|(\\*|;|\\+|'|%)", |
|
|
|
scriptPattern = Pattern.compile("\\b(and|exec|insert|drop|grant|alter|delete|update|count|chr|mid|master|truncate|char|declare|or)\\b|(\\*|;|\\+|'|%)", |
|
|
|
Pattern.CASE_INSENSITIVE | Pattern.MULTILINE | Pattern.DOTALL); |
|
|
|
flag = scriptPattern.matcher(value).find(); |
|
|
|
if (flag) { |
|
|
|
|