public/dataease
1
0
Fork 0
mirror of https://github.com/dataease/dataease.git synced 2026-05-16 05:50:45 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: 【漏洞】Dataease H2 JDBC RCE Bypass

Browse Source
This commit is contained in:
taojinlong
2025-06-03 16:29:31 +08:00
committed by taojinlong
parent 7cd046d279
commit dd35752f29
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
core/core-backend/src/main/java/io/dataease/datasource/type/H2.java
View File

@@ -19,7 +19,7 @@ public class H2 extends DatasourceConfiguration {
public String getJdbc() {
for (String illegalParameter : illegalParameters) {
if (jdbc.toUpperCase().contains(illegalParameter)) {
if (jdbc.toUpperCase().replace("\\", "").contains(illegalParameter)) {
DEException.throwException("Has illegal parameter: " + jdbc);
}
}