Package org.jeecgframework.minidao.util

Class SqlInjectionUtil

java.lang.Object

org.jeecgframework.minidao.util.SqlInjectionUtil

public class SqlInjectionUtil
extends Object

sql注入校验工具类

Author:

scott

Constructor Summary

Constructors

Constructor	Description
SqlInjectionUtil()

Method Summary

Modifier and Type	Method	Description
static void	check(String value, String customXssString)	校验比较严格
static void	checkSqlAnnotation(String str)	校验是否有sql注释

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

SqlInjectionUtil

public SqlInjectionUtil()

Method Details

check

public static void check(String value,
 String customXssString)

校验比较严格

sql注入过滤处理，遇到注入关键字抛异常

Parameters:

value -

checkSqlAnnotation

public static void checkSqlAnnotation(String str)

校验是否有sql注释