HTML过滤器改为将html转义

RuoYi

2020-07-28 1bde32814a0e287e335f47c902e6fbe7b94351c2

 src/main/java/com/ruoyi/common/utils/html/EscapeUtil.java

@@ -144,7 +144,10 @@


    public static void main(String[] args)

    {

        String html = "alert('11111');";

        String html = "<script>alert(1);</script>";

        // String html = "<scr<script>ipt>alert(\"XSS\")</scr<script>ipt>";

        // String html = "<123";

        // String html = "123>";

        System.out.println(EscapeUtil.clean(html));

        System.out.println(EscapeUtil.escape(html));

        System.out.println(EscapeUtil.unescape(html));