防止sql注入%

This commit is contained in:
sxu 2025-07-10 10:25:43 +08:00
parent 43490a106f
commit 35ba4ea213
2 changed files with 4 additions and 1 deletions

View File

@ -13,6 +13,7 @@ import io.swagger.annotations.ApiOperation;
import org.springframework.beans.factory.annotation.Autowired; import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.web.bind.annotation.*; import org.springframework.web.bind.annotation.*;
import javax.servlet.http.HttpServletResponse; import javax.servlet.http.HttpServletResponse;
import javax.validation.Valid;
import java.util.List; import java.util.List;
/** /**
@ -34,7 +35,7 @@ public class KitchenSettingController extends BaseController {
@ApiOperation(value = "查询功能参数配置列表") @ApiOperation(value = "查询功能参数配置列表")
//@RequiresPermissions("kitchen:setting:list") //@RequiresPermissions("kitchen:setting:list")
@GetMapping("/list") @GetMapping("/list")
public TableDataInfo list(KitchenSetting kitchenSetting) { public TableDataInfo list(@Valid KitchenSetting kitchenSetting) {
startPage(); startPage();
List<KitchenSetting> list = kitchenSettingService.selectKitchenSettingList(kitchenSetting); List<KitchenSetting> list = kitchenSettingService.selectKitchenSettingList(kitchenSetting);
return getDataTable(list); return getDataTable(list);

View File

@ -2,6 +2,7 @@ package com.bonus.canteen.core.kitchen.domain;
import com.bonus.common.core.annotation.Excel; import com.bonus.common.core.annotation.Excel;
import com.bonus.common.core.web.domain.BaseEntity; import com.bonus.common.core.web.domain.BaseEntity;
import com.bonus.common.security.annotation.NoPercent;
import io.swagger.annotations.ApiModelProperty; import io.swagger.annotations.ApiModelProperty;
import lombok.Data; import lombok.Data;
import lombok.ToString; import lombok.ToString;
@ -25,6 +26,7 @@ public class KitchenSetting extends BaseEntity {
/** 参数键名 */ /** 参数键名 */
@Excel(name = "参数键名") @Excel(name = "参数键名")
@ApiModelProperty(value = "参数键名") @ApiModelProperty(value = "参数键名")
@NoPercent
private String itemName; private String itemName;
/** 参数主键 */ /** 参数主键 */