路径遍历缺陷19

whycxzp

2023-10-20 57ff884a07bd97bebedf76cde5a60dd3ebdfa9bf

路径遍历缺陷19

 src/main/java/com/whyc/controller/FaceController.java

@@ -235,6 +235,8 @@
    public Response delete(@RequestParam Integer uId,@RequestParam Integer faceId,
                         @RequestParam String uName,HttpServletRequest request){

        //过滤 uName的特殊字符,避免路径遍历攻击
        uName = ActionUtil.filterFileName(uName);
        //更新user_inf和face表
        service.update(uId,faceId);