fix: 移除“#” 判断

This commit is contained in:
tjlygdx
2026-05-12 15:00:31 +08:00
parent bdb9f58545
commit c3d4629a23

View File

@@ -34,7 +34,7 @@ public class Utils {
public static final List<Pattern> SQL_INJECTION_PATTERNS_FOR_VALUES =
Arrays.asList(
Pattern.compile("[\";`]"),
Pattern.compile("--\\s*|#"),
Pattern.compile("--\\s*"),
Pattern.compile(
"\\b(or|and|union|select|insert|delete|update|drop|alter|exec|xp_cmdshell)\\b",
Pattern.CASE_INSENSITIVE),