Skip to content

手动拼接sql参数存在SQL注入风险 #3382

New issue
New issue
Closed
#3393
Closed
手动拼接sql参数存在SQL注入风险#3382
#3393
Labels
contribution welcomekind/enhancementCategory issues or prs related to enhancement.
@ztycool

Description

@ztycool
ztycool
opened on Jul 19, 2020

版本1.3.1
方法：

  1. com.alibaba.nacos.config.server.service.repository.embedded.EmbeddedStoragePersistServiceImpl#configInfoCount(java.lang.String)
  2. com.alibaba.nacos.config.server.service.repository.extrnal.ExternalStoragePersistServiceImpl#configInfoCount(java.lang.String)
    sql

Metadata

Metadata

Assignees

No one assigned

    Labels

    contribution welcomekind/enhancementCategory issues or prs related to enhancement.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions