update springboot 2.6.5 => 2.6.6 修复 CVE-2022-22965 漏洞

疯狂的狮子Li

2022-04-01 4f0a584efcbe51c5c232ab6f75a8d760b15d5e03

 ruoyi-framework/src/main/java/com/ruoyi/framework/handler/PlusDataPermissionHandler.java

@@ -79,7 +79,7 @@
            DataPermissionHelper.setVariable("user", currentUser);
        }
        // 如果是超级管理员，则不过滤数据
        if (ObjectUtil.isNull(currentUser) || LoginHelper.isAdmin(currentUser.getUserId())) {
        if (LoginHelper.isAdmin()) {
            return where;
        }
        String dataFilterSql = buildDataFilter(dataColumns, isSelect);