From f5ad899773a43eace41ba0acfb9410e13abe746c Mon Sep 17 00:00:00 2001
From: ddlucky <ddlucky@sina.com>
Date: Thu, 25 Apr 2024 23:03:30 +0800
Subject: [PATCH] =?UTF-8?q?c#=20=E6=AD=A3=E5=88=99=E8=A1=A8=E8=BE=BE?=
 =?UTF-8?q?=E5=BC=8F=20=E4=B8=8D=E5=8C=B9=E9=85=8Dgo=E5=89=8D=E5=90=8E?=
 =?UTF-8?q?=E5=90=8C=E6=97=B6=E4=B8=BA=E7=A9=BA=E6=A0=BC=E6=8D=A2=E8=A1=8C?=
 =?UTF-8?q?=E6=88=96=E8=A1=8C=E5=BC=80=E5=A7=8B=E5=92=8C=E7=BB=93=E5=B0=BE?=
 =?UTF-8?q?=20=E4=BD=86=E5=8C=B9=E9=85=8Dgo=E5=89=8D=E6=88=96=E8=80=85?=
 =?UTF-8?q?=E5=90=8E=E4=B8=BA=E5=AD=97=E6=AF=8D=E6=95=B0=E5=AD=97=E4=B8=8B?=
 =?UTF-8?q?=E5=88=92=E7=BA=BF?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 DSWeb/Areas/SoftMng/Common/Common.cs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/DSWeb/Areas/SoftMng/Common/Common.cs b/DSWeb/Areas/SoftMng/Common/Common.cs
index 45941019..99e7963a 100644
--- a/DSWeb/Areas/SoftMng/Common/Common.cs
+++ b/DSWeb/Areas/SoftMng/Common/Common.cs
@@ -19,7 +19,7 @@ namespace DSWeb.SoftMng.Common
         /// <returns>如果参数存在不安全字符，则返回true</returns>
         public static bool SqlFilterExist(string source)
         {
-            string pattern = @"(insert|(?<!is)delete(?!(?<=isdelete))|database|\Bgo\B|db_name|sys.|exec|create|grant|revoke|alter|execute|drop|openrowset|drop table|update|truncate|asc\(|mid\(|char\(|xp_cmdshell|netlocalgroup administrators|net user|dec|exec|database|chr|declare)([\s+.*]|$)";
+            string pattern = @"(insert|(?<!is)delete(?!(?<=isdelete))|database|(?<=[\p{L}\p{N}_])\bgo\b(?=[\p{L}\p{N}_])|(?<!\s)\bgo\b(?!\s)(?:(?!\r?\n).)*|(?<=\r?\n)\bgo\b(?:(?!\r?\n).)*(?=\r?\n)|\bgo\b(?=(?:(?!\r?\n).)*\s*$)|db_name|sys.|exec|create|grant|revoke|alter|execute|drop|openrowset|drop table|update|truncate|asc\(|mid\(|char\(|xp_cmdshell|netlocalgroup administrators|net user|dec|exec|database|chr|declare)([\s+.*]|$)";
             if (Regex.IsMatch(source, pattern, RegexOptions.IgnoreCase))
                 return true;
             return false;