DongTai
DongTai copied to clipboard
HXSecurity
[Bug]: SQL注入加净化方法后，正常SQL注入漏洞也无法检出
Preflight Checklist
- [X] I agree to follow the Code of Conduct that this project adheres to.
- [X] I have searched the issue tracker for an issue that matches the one I want to file, without success.
- [X] I am not looking for support or already pursued the available support channels without success.
Version
1.7.1
Installation Type
Other (specify below)
Service Name
DongTai-Web
Describe the details of the bug and the steps to reproduce it
web 配置自定义规则，添加过滤方法规则。规则类型选择SQL注入，添加新的过滤方法:aaa.bbb.ccc.D(java.lang.String), 导致原有的危险方法规则中SQL注入类型的所有方法都变成了过滤方法。
Additional Information
使用方可以针对每个漏洞规则，自定义过滤方法规则。
Logs
No response
