diff --git a/bonus-common/bonus-common-core/src/main/java/com/bonus/common/core/utils/SafeUtil.java b/bonus-common/bonus-common-core/src/main/java/com/bonus/common/core/utils/SafeUtil.java index 6a4d2a3..594537e 100644 --- a/bonus-common/bonus-common-core/src/main/java/com/bonus/common/core/utils/SafeUtil.java +++ b/bonus-common/bonus-common-core/src/main/java/com/bonus/common/core/utils/SafeUtil.java @@ -22,7 +22,10 @@ public class SafeUtil { * 安全脚本模式,用于检测脚本注入的正则表达式 * 由于平台中setfilter中使用多个参数时用到&符号,因此未包含&符号 */ - public final static String SAFE_SCRIPT_PATTERN = "(\\||;|\\$|'|\\'|0x0d|0x0a|\\%27|\\%3B)"; +// public final static String SAFE_SCRIPT_PATTERN = "(\\||;|\\$|'|\\'|0x0d|0x0a|\\%27|\\%3B)"; + + public final static String SAFE_SCRIPT_PATTERN = "(\\||\\$|'|\\'|0x0d|0x0a|\\%27|\\%3B)"; + /** * 检查特殊字符的正则表达式