fix: 修复数据集存在SQL注入漏洞

2026-05-14 21:12:33 +08:00 · 2025-10-14 17:35:28 +08:00
parent 083c2e35c7
commit 3c52cc26c4
1 changed files with 3 additions and 0 deletions
--- a/core/core-backend/src/main/java/io/dataease/datasource/provider/EsProvider.java
+++ b/core/core-backend/src/main/java/io/dataease/datasource/provider/EsProvider.java
@@ -95,6 +95,9 @@ public class EsProvider extends Provider {
        try {
            String sql;
            if (datasourceRequest.getTable() != null) {
+                if (!getTables(datasourceRequest).stream().map(DatasetTableDTO::getTableName).collect(Collectors.toList()).contains(datasourceRequest.getTable())) {
+                    DEException.throwException("无效的表名！");
+                }
                sql = "select * from \"" + datasourceRequest.getTable() + "\" limit 0";
            } else {
                sql = datasourceRequest.getQuery();