RuoYi
2021-06-08 fd33fe869dfad2364503f13bc90a239fccba5dc3
ruoyi-common/src/main/java/com/ruoyi/common/utils/html/EscapeUtil.java
@@ -22,7 +22,7 @@
        // special HTML characters
        TEXT['\''] = "'".toCharArray(); // 单引号
        TEXT['"'] = """.toCharArray(); // 单引号
        TEXT['"'] = """.toCharArray(); // 双引号
        TEXT['&'] = "&".toCharArray(); // &符
        TEXT['<'] = "&#60;".toCharArray(); // 小于号
        TEXT['>'] = "&#62;".toCharArray(); // 大于号
@@ -144,7 +144,10 @@
    public static void main(String[] args)
    {
        String html = "alert('11111');";
        String html = "<script>alert(1);</script>";
        // String html = "<scr<script>ipt>alert(\"XSS\")</scr<script>ipt>";
        // String html = "<123";
        // String html = "123>";
        System.out.println(EscapeUtil.clean(html));
        System.out.println(EscapeUtil.escape(html));
        System.out.println(EscapeUtil.unescape(html));