From a6fe11532b4d5679800be2b89a298d3de4c7db01 Mon Sep 17 00:00:00 2001 From: wangjie Date: Mon, 25 Aug 2025 11:26:28 +0800 Subject: [PATCH 1/2] =?UTF-8?q?fix:=20=E5=8E=BB=E6=8E=89case=20when?= =?UTF-8?q?=E7=AD=89=E7=9A=84=E9=99=90=E5=88=B6?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- lxDb/sql.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lxDb/sql.go b/lxDb/sql.go index ae6d6ef..030327c 100644 --- a/lxDb/sql.go +++ b/lxDb/sql.go @@ -533,7 +533,7 @@ func isSafeSQL(sql string) bool { "ORDER BY", "LIMIT", "OFFSET", "--", "/*", "*/", ";", "@@", "@", "0X", "CHAR(", "ASCII(", "SUBSTRING(", "MID(", "LENGTH(", "LEN(", "CONCAT(", "LOAD_FILE(", "BENCHMARK(", "SLEEP(", "WAITFOR", - "CAST(", "CONVERT(", "IF(", "CASE", "WHEN", "THEN", "END", + "CAST(", "CONVERT(", "IF(", } upperSQL = strings.ReplaceAll(upperSQL, "CREATED_AT", "") From 92aed5b8f22476a7988d2fc8487534242f069d51 Mon Sep 17 00:00:00 2001 From: wangjie Date: Mon, 25 Aug 2025 11:34:34 +0800 Subject: [PATCH 2/2] =?UTF-8?q?fix:=20=E5=8E=BB=E6=8E=89case=20when?= =?UTF-8?q?=E7=AD=89=E7=9A=84=E9=99=90=E5=88=B6?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- lxDb/sql.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lxDb/sql.go b/lxDb/sql.go index 030327c..d390a5f 100644 --- a/lxDb/sql.go +++ b/lxDb/sql.go @@ -526,7 +526,7 @@ func isSafeSQL(sql string) bool { // 转换为大写进行关键字检查 upperSQL := strings.ToUpper(sql) - // 危险关键字列表 + // 危险关键字列表1 dangerousKeywords := []string{ "DROP", "DELETE", "UPDATE", "INSERT", "ALTER", "CREATE", "TRUNCATE", "EXEC", "EXECUTE", "XP_", "SP_", "UNION", "JOIN", "HAVING", "GROUP BY",