DeXun/GEAR-OA
9
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

style:修复 SQL 注入风险

Browse Source 
- 移除了 GearPurchasePlanDetailMapper.xml 文件中的 SQL 注入风险点
- 将 ${ew.customSqlSegment()} 修改为 ${ew.customSqlSegment}，去除了末尾的括号
This commit is contained in:
Joshi
2025-08-30 16:56:03 +08:00
parent d8d8759644
commit d2a36465ff
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
gear-oa/src/main/resources/mapper/oa/GearPurchasePlanDetailMapper.xml
View File

@@ -44,7 +44,7 @@
s.name as supplierName s.name as supplierName
from gear_purchase_plan_detail d from gear_purchase_plan_detail d
left join gear_supplier s on d.supplier_id = s.supplier_id and s.del_flag = 0 left join gear_supplier s on d.supplier_id = s.supplier_id and s.del_flag = 0
${ew.customSqlSegment()} ${ew.customSqlSegment}
</select> </select>