From 3f33219134d1d5e71c51756e7acf3b06d1a85cf8 Mon Sep 17 00:00:00 2001 From: 若依 <yzz_ivy@163.com> Date: 星期二, 29 十二月 2020 17:14:31 +0800 Subject: [PATCH] !156 修复 用户管理 -> 修改用户 手机号码 和 邮箱 不能清空 Merge pull request !156 from li_oxen/N/A --- ruoyi-common/src/main/java/com/ruoyi/common/utils/html/EscapeUtil.java | 5 ++++- 1 files changed, 4 insertions(+), 1 deletions(-) diff --git a/ruoyi-common/src/main/java/com/ruoyi/common/utils/html/EscapeUtil.java b/ruoyi-common/src/main/java/com/ruoyi/common/utils/html/EscapeUtil.java index 8989ca1..121681b 100644 --- a/ruoyi-common/src/main/java/com/ruoyi/common/utils/html/EscapeUtil.java +++ b/ruoyi-common/src/main/java/com/ruoyi/common/utils/html/EscapeUtil.java @@ -144,7 +144,10 @@ public static void main(String[] args) { - String html = "alert('11111');"; + String html = "<script>alert(1);</script>"; + // String html = "<scr<script>ipt>alert(\"XSS\")</scr<script>ipt>"; + // String html = "<123"; + // String html = "123>"; System.out.println(EscapeUtil.clean(html)); System.out.println(EscapeUtil.escape(html)); System.out.println(EscapeUtil.unescape(html)); -- Gitblit v1.9.2