zxl
2025-11-12 724a26b26c11060c0c0cdec86006138981f2ac80
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
Êþº¾=S
 java/lang/Object<init>()V
    
 com/ycl/common/utils/StringUtils
isNotEmpty(Ljava/lang/String;)Z
   com/ycl/common/utils/sql/SqlUtilisValidOrderBySql&com/ycl/common/exception/UtilException*参数不符合规范,不能进行查询
 (Ljava/lang/String;)V
 length(Ljava/lang/CharSequence;)I0参数已超过最大限制,不能进行查询      !" SQL_PATTERNLjava/lang/String;
$%& ' java/lang/Stringmatches
) * isEmpty    , -"    SQL_REGEX/\|
1 23split9(Ljava/lang/String;Ljava/lang/String;)[Ljava/lang/String;
5 67indexOfIgnoreCase3(Ljava/lang/CharSequence;Ljava/lang/CharSequence;)I9参数存在SQL注入风险;†and |extractvalue|updatexml|exec |insert |select |delete |update |drop |count |chr |mid |master |truncate |char |declare |or |+|user()=[a-zA-Z0-9_\ \,\.]+ORDER_BY_MAX_LENGTHI ConstantValueôCodeLineNumberTableLocalVariableTablethis"Lcom/ycl/common/utils/sql/SqlUtil;escapeOrderBySql&(Ljava/lang/String;)Ljava/lang/String;value StackMapTable filterKeyword
sqlKeyword sqlKeywords[Ljava/lang/String;N<clinit>
SourceFile SqlUtil.java!    -"    !">?@AB/*·±C D EF    GHBr.*¸™*¸ š »Y·¿*¸ô¤ »Y·¿*°C!#%"',)D .I"J     B2*²¶#¬C1D I"    KB¹@*¸(™±²+.¸0L+M,¾>6¢#,2:*¸4¤ »Y8·¿„§ÿݱC"9;=>%@/B9>?ED %L"@I"/MNJÿ$OOøPB' :³+<³±C
QR