join 앞뒤 공백 처리
@f99b0259823e07926bb952b83f5913e72ed6b65c
--- src/main/java/itn/com/cmm/util/XssFilterUtil.java
+++ src/main/java/itn/com/cmm/util/XssFilterUtil.java
... | ... | @@ -13,7 +13,7 @@ |
| 13 | 13 |
test_str_low.contains("drop") ||
|
| 14 | 14 |
test_str_low.contains("update") ||
|
| 15 | 15 |
test_str_low.contains("delete") ||
|
| 16 |
- test_str_low.contains("join") ||
|
|
| 16 |
+ test_str_low.contains(" join ") ||
|
|
| 17 | 17 |
test_str_low.contains("from") ||
|
| 18 | 18 |
test_str_low.contains("where") ||
|
| 19 | 19 |
test_str_low.contains("dbms") ||
|
Add a comment
Delete comment
Once you delete this comment, you won't be able to recover it. Are you sure you want to delete this comment?