druid BUG: “USER” is always checked by wall filter (ORACLE)

rqenqsqc  于 2021-11-27  发布在  Java
关注(0)|答案(0)|浏览(188)

oracle 11g2


### SQL: INSERT INTO cms_syslog(  ID,"USER")   VALUES( ?,?)

### Cause: java.sql.SQLException: sql injection violation, variable not allow : user : INSERT INTO cms_syslog(  ID,"USER")

		VALUES( ?,?)

1 之前字段叫user,我把关键字user替换成"USER",仍然如上述报错,被wall拦截
2 我把关于variant的所有配置,都加了遍,甚至更改了wall配置文件位置,还是不行,比如
spring.datasource.druid.filter.wall.config.variant-check=false
spring.datasource.druid.filter.wall.config.permit-variants=user
...
3 只有把wall filter整个去掉,才行,好崩溃

暂无答案!

目前还没有任何答案,快来回答吧!

相关问题