xss漏洞问题

zhangdaiscott
1 parent 71973adc
Showing 1 changed file with 7 additions and 0 deletions
ant-design-vue-jeecg/src/components/tools/ShowAnnouncement.vue
+import xss from "xss"
 <template>
   <j-modal
     :title="title"
@@ -24,6 +25,7 @@
 <script>
   import {getUserList} from '@/api/api'
+  import xss from 'xss'
   export default {
     name: "SysAnnouncementModal",
     components: {
@@ -70,6 +72,11 @@
         }
         //update-end---author:wangshuai ---date:20220107  for：将其它页面传递过来的用户名改成用户真实姓名
         this.visible = true;
+        //update-begin-author:taoyan date:2022-7-14 for: VUEN-1702 【禁止问题】sql注入漏洞
+        if(record.msgContent){
+          record.msgContent = xss(record.msgContent)
+        }
+        //update-end-author:taoyan date:2022-7-14 for: VUEN-1702 【禁止问题】sql注入漏洞
         this.record = record;
       },
       handleCancel () {