From 53ae10d82cde2de61010d7ad6139ed308f52cad5 Mon Sep 17 00:00:00 2001 From: ulleo Date: Fri, 26 Apr 2024 17:58:44 +0800 Subject: [PATCH] =?UTF-8?q?feat(X-Pack):=20=E5=8F=96=E6=B6=88=E6=96=B0?= =?UTF-8?q?=E5=BB=BA=E6=95=B0=E6=8D=AE=E5=A1=AB=E6=8A=A5=E6=95=B0=E6=8D=AE?= =?UTF-8?q?=E5=BA=93=E8=A1=A8=E6=97=B6=E5=AF=B9=E8=A1=A8=E5=90=8D=E5=92=8C?= =?UTF-8?q?=E5=AD=97=E6=AE=B5=E5=90=8D=E7=9A=84=E6=95=8F=E6=84=9F=E8=AF=8D?= =?UTF-8?q?=E6=A0=A1=E9=AA=8C?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../dataease/provider/ext/MysqlExtDDLProvider.java | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/core/backend/src/main/java/io/dataease/provider/ext/MysqlExtDDLProvider.java b/core/backend/src/main/java/io/dataease/provider/ext/MysqlExtDDLProvider.java index 14d852a555..78100e0879 100644 --- a/core/backend/src/main/java/io/dataease/provider/ext/MysqlExtDDLProvider.java +++ b/core/backend/src/main/java/io/dataease/provider/ext/MysqlExtDDLProvider.java @@ -39,9 +39,9 @@ public class MysqlExtDDLProvider extends DefaultExtDDLProvider { @Override public String createTableSql(String table, List formFields) { //check inject - if (checkSqlInjection(table)) { + /*if (checkSqlInjection(table)) { throw new RuntimeException("包含SQL注入的参数，请检查参数！"); - } + }*/ List fields = convertTableFields(true, formFields); String fieldSql = convertTableFieldsString(table, fields); @@ -249,9 +249,9 @@ public class MysqlExtDDLProvider extends DefaultExtDDLProvider { } //check inject - if (checkSqlInjection(field.getColumnName())) { + /*if (checkSqlInjection(field.getColumnName())) { throw new RuntimeException("包含SQL注入的参数，请检查参数！"); - } + }*/ //column name str.append("`").append(field.getColumnName()).append("` "); @@ -345,9 +345,9 @@ public class MysqlExtDDLProvider extends DefaultExtDDLProvider { } //check inject - if (checkSqlInjection(table) || checkSqlInjection(indexField.getName())) { + /*if (checkSqlInjection(table) || checkSqlInjection(indexField.getName())) { throw new RuntimeException("包含SQL注入的参数，请检查参数！"); - } + }*/ int count = 0; for (ExtIndexField.ColumnSetting indexFieldColumn : indexField.getColumns()) {