From dd35752f298b1a4079d9993b622220d321b0c8a6 Mon Sep 17 00:00:00 2001 From: taojinlong Date: Tue, 3 Jun 2025 16:29:31 +0800 Subject: [PATCH] =?UTF-8?q?fix:=20=E3=80=90=E6=BC=8F=E6=B4=9E=E3=80=91Data?= =?UTF-8?q?ease=20H2=20JDBC=20RCE=20Bypass?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../src/main/java/io/dataease/datasource/type/H2.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/core/core-backend/src/main/java/io/dataease/datasource/type/H2.java b/core/core-backend/src/main/java/io/dataease/datasource/type/H2.java index cb6e42d6ef..f4c56f6dd9 100644 --- a/core/core-backend/src/main/java/io/dataease/datasource/type/H2.java +++ b/core/core-backend/src/main/java/io/dataease/datasource/type/H2.java @@ -19,7 +19,7 @@ public class H2 extends DatasourceConfiguration { public String getJdbc() { for (String illegalParameter : illegalParameters) { - if (jdbc.toUpperCase().contains(illegalParameter)) { + if (jdbc.toUpperCase().replace("\\", "").contains(illegalParameter)) { DEException.throwException("Has illegal parameter: " + jdbc); } }