!451 xss请求Wrapper getAttribute方法 问题修复
This commit is contained in:
parent
95aeee54e7
commit
f106afc0f9
@ -63,7 +63,7 @@ public class XssRequestWrapper extends HttpServletRequestWrapper {
|
|||||||
public Object getAttribute(String name) {
|
public Object getAttribute(String name) {
|
||||||
Object value = super.getAttribute(name);
|
Object value = super.getAttribute(name);
|
||||||
if (value instanceof String) {
|
if (value instanceof String) {
|
||||||
xssCleaner.clean((String) value);
|
return xssCleaner.clean((String) value);
|
||||||
}
|
}
|
||||||
return value;
|
return value;
|
||||||
}
|
}
|
||||||
|
Loading…
Reference in New Issue
Block a user