From 9c8584e28b170f28fb2de57571acc3ed2dc15150 Mon Sep 17 00:00:00 2001
From: wangjiahao <1522128093@qq.com>
Date: Tue, 16 Jun 2026 14:24:48 +0800
Subject: [PATCH] =?UTF-8?q?fix:=20=E4=BF=AE=E5=A4=8D=20DataVisualizationSe?=
 =?UTF-8?q?rver=20ReDoS=20=E6=BC=8F=E6=B4=9E=EF=BC=8CreplaceAll=20?=
 =?UTF-8?q?=E6=94=B9=E4=B8=BA=20replace?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../dataease/visualization/server/DataVisualizationServer.java  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/core/core-backend/src/main/java/io/dataease/visualization/server/DataVisualizationServer.java b/core/core-backend/src/main/java/io/dataease/visualization/server/DataVisualizationServer.java
index 7125e32e52..d6535887ae 100644
--- a/core/core-backend/src/main/java/io/dataease/visualization/server/DataVisualizationServer.java
+++ b/core/core-backend/src/main/java/io/dataease/visualization/server/DataVisualizationServer.java
@@ -926,7 +926,7 @@ public class DataVisualizationServer implements DataVisualizationApi {
             String componentData = newDv.getComponentData();
             // componentData viewId 数据  并保存
             for (CoreChartView viewInfo : viewList) {
-                componentData = componentData.replaceAll(String.valueOf(viewInfo.getCopyFrom()), String.valueOf(viewInfo.getId()));
+                componentData = componentData.replace(String.valueOf(viewInfo.getCopyFrom()), String.valueOf(viewInfo.getId()));
             }
             newDv.setComponentData(componentData);
         }