GithubHelp home page GithubHelp logo

Comments (7)

pagehelper avatar pagehelper commented on July 30, 2024

有一个不检查的方法你试试

from mybatis-pagehelper.

fly2086 avatar fly2086 commented on July 30, 2024

有一个不检查的方法你试试

哪一个？

from mybatis-pagehelper.

fly2086 avatar fly2086 commented on July 30, 2024

已有项目存在一些类似的使用，没办法直接升级了，想要使用新功能，就必须修改原有代码。
你这个修改应该加上配置，默认关闭，有需要的才开启，现在是强制开启，太狠了。
如果不小心升级了，编译又没报错，一上线系统到处报警，让人一脸懵逼啊。

from mybatis-pagehelper.

abel533 avatar abel533 commented on July 30, 2024

不这样就影响漏洞检测。。

下个版本加个参数允许关闭。

from mybatis-pagehelper.

pagehelper avatar pagehelper commented on July 30, 2024

当前的设计不支持参数控制order by，后续考虑集成 mybatis-config 后再支持。

from mybatis-pagehelper.

zhangdp avatar zhangdp commented on July 30, 2024

建议增加方法重载可传入参数配置是否需要开启order by sql注入检查而不是全局开关，很多时候参数都是后端直接生成的不是前端传过来的这时候很确定不可能有sql注入，白白浪费性能来检测

from mybatis-pagehelper.

abel533 avatar abel533 commented on July 30, 2024

可以来个PR试试。

建议在自己框架封装个新的PageHelper静态方法，调用不检查注入的方法。（不是PR的建议）

from mybatis-pagehelper.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.