使用#替代$，防止SQL注入的风险（主要防止模糊查询sql部分的注入）。

xubinbin

2022-12-28 7b601a3e8f6de4acc9d6b9885ef23d6c90a4f349

 src/main/java/com/genersoft/iot/vmp/storager/dao/PlatformGbStreamMapper.java

@@ -26,7 +26,7 @@
            "(gbStreamId, platformId, catalogId) " +
            "values " +
            "<foreach collection='streamPushItems' index='index' item='item' separator=','> " +
            "(${item.gbStreamId}, '${item.platformId}', '${item.catalogId}')" +
            "(#{item.gbStreamId}, #{item.platformId}, #{item.catalogId})" +
            "</foreach> " +
            "</script>")
    int batchAdd(List<StreamPushItem> streamPushItems);