201206030/novel
1
0
Fork 0
mirror of https://github.com/201206030/novel.git synced 2025-04-27 07:30:50 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

update books.sql and fix xss

Browse Source
This commit is contained in:
xiongxiaoyang 2020-04-23 09:00:05 +08:00
parent 8aa724bd69
commit 9c1d954bfd
3 changed files with 5 additions and 21 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
novel-front/src/main/java/xyz/zinglizingli/books/web/BookController.java
View File

@ -321,7 +321,7 @@ public class BookController {
@ResponseBody
public Map<String, Object> sendBullet(@RequestParam("contentId") Long contentId, @RequestParam("bullet") String bullet) {
Map<String, Object> result = new HashMap<>(2);
bookService.sendBullet(contentId, bullet);
bookService.sendBullet(contentId, bullet.replaceAll("<", "&lt;").replaceAll(">", "&gt;"));
result.put("code", 1);
result.put("desc", "ok");
return result;

2
novel-front/src/main/resources/templates/books/book_content.html
View File

@ -195,7 +195,7 @@
}
//发送弹幕
function sendBullet(){
var bullet = $("#screenBulletText").val();
var bullet = $("#screenBulletText").val().replace(/</g, "&lt;").replace(/>/g, "&gt;");
var contentId = $("#contentIdHidden").val();
if (bullet && contentId) {
if(bullet.length > 100){

22
sql/books.sql
View File

@ -1,23 +1,4 @@
/*
Navicat MySQL Data Transfer
Source Server : aliyun_books
Source Server Version : 80018
Source Host : 47.106.243.172:3306
Source Database : books
Target Server Type : MYSQL
Target Server Version : 80018
File Encoding : 65001
Date: 2019-11-15 06:10:36
*/
-- ----------------------------
-- Table structure for `book`
-- ----------------------------
DROP TABLE IF EXISTS `book`;
CREATE TABLE `book` (
`id` bigint(20) NOT NULL AUTO_INCREMENT,
@ -1044,3 +1025,6 @@ INSERT INTO `book_update_time_log` VALUES ('7', '7', NOW());
ALTER TABLE book_parse_log drop INDEX uq_key_bookurl;
alter table book_parse_log add column `priority` TINYINT(2) not null default 10 ;
alter table book_parse_log add column `update_count` TINYINT(2) not null default 0 ;