From d2a36465ff131fede8dac28f4c8110008827d997 Mon Sep 17 00:00:00 2001 From: Joshi <3040996759@qq.com> Date: Sat, 30 Aug 2025 16:56:03 +0800 Subject: [PATCH] =?UTF-8?q?style:=E4=BF=AE=E5=A4=8D=20SQL=20=E6=B3=A8?= =?UTF-8?q?=E5=85=A5=E9=A3=8E=E9=99=A9?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - 移除了 GearPurchasePlanDetailMapper.xml 文件中的 SQL 注入风险点 - 将 ${ew.customSqlSegment()} 修改为 ${ew.customSqlSegment},去除了末尾的括号 --- .../main/resources/mapper/oa/GearPurchasePlanDetailMapper.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gear-oa/src/main/resources/mapper/oa/GearPurchasePlanDetailMapper.xml b/gear-oa/src/main/resources/mapper/oa/GearPurchasePlanDetailMapper.xml index ebb570c..9f081ee 100644 --- a/gear-oa/src/main/resources/mapper/oa/GearPurchasePlanDetailMapper.xml +++ b/gear-oa/src/main/resources/mapper/oa/GearPurchasePlanDetailMapper.xml @@ -44,7 +44,7 @@ s.name as supplierName from gear_purchase_plan_detail d left join gear_supplier s on d.supplier_id = s.supplier_id and s.del_flag = 0 - ${ew.customSqlSegment()} + ${ew.customSqlSegment}