201206030/novel
1
0
Fork 0
mirror of https://github.com/201206030/novel.git synced 2025-06-23 23:58:30 +00:00
Code Issues Packages Projects Releases Wiki Activity

update books.sql and fix xss

Browse Source
This commit is contained in:
xiongxiaoyang
2020-04-23 09:00:05 +08:00
parent 8aa724bd69
commit 9c1d954bfd
3 changed files with 5 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
novel-front/src/main/java/xyz/zinglizingli/books/web/BookController.java
View File

@ -321,7 +321,7 @@ public class BookController {
@ResponseBody
public Map<String, Object> sendBullet(@RequestParam("contentId") Long contentId, @RequestParam("bullet") String bullet) {
Map<String, Object> result = new HashMap<>(2);
bookService.sendBullet(contentId, bullet);
bookService.sendBullet(contentId, bullet.replaceAll("<", "&lt;").replaceAll(">", "&gt;"));
result.put("code", 1);
result.put("desc", "ok");
return result;

2
novel-front/src/main/resources/templates/books/book_content.html
View File

@ -195,7 +195,7 @@
}
//发送弹幕
function sendBullet(){
var bullet = $("#screenBulletText").val();
var bullet = $("#screenBulletText").val().replace(/</g, "&lt;").replace(/>/g, "&gt;");
var contentId = $("#contentIdHidden").val();
if (bullet && contentId) {
if(bullet.length > 100){