From 3347ca4d7484d9141b189462e169b2be4d324632 Mon Sep 17 00:00:00 2001 From: 江强 <jiangq@powerlbs.com> Date: 星期二, 27 七月 2021 09:33:12 +0800 Subject: [PATCH] fix:Issue #I42GRW 修复任意账户越权漏洞 --- ruoyi-system/src/main/resources/mapper/system/SysNoticeMapper.xml | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/ruoyi-system/src/main/resources/mapper/system/SysNoticeMapper.xml b/ruoyi-system/src/main/resources/mapper/system/SysNoticeMapper.xml index 76caf2d..6915a14 100644 --- a/ruoyi-system/src/main/resources/mapper/system/SysNoticeMapper.xml +++ b/ruoyi-system/src/main/resources/mapper/system/SysNoticeMapper.xml @@ -18,7 +18,7 @@ </resultMap> <sql id="selectNoticeVo"> - select notice_id, notice_title, notice_type, notice_content, status, create_by, create_time, update_by, update_time, remark + select notice_id, notice_title, notice_type, cast(notice_content as char) as notice_content, status, create_by, create_time, update_by, update_time, remark from sys_notice </sql> -- Gitblit v1.9.3