• Home
• com.cybermkd
• ICEWall
• 1.0.0.0
• source code
• MongoInjection.java

×

Project download

Many resources are needed to download a project. Please understand that we have to compensate our server costs. Thank you in advance.
Project price only 1 $

You can buy this project and download/modify it how often you want.

com.cybermkd.icewall.attack.MongoInjection Maven / Gradle / Ivy

package com.cybermkd.icewall.attack;

import org.apache.commons.lang.StringUtils;

/**
 * Mongodb防注入
 */
public class MongoInjection implements Istrip {

    private static String[] blackList={"{", "}", "$ne", "$gte", "$gt", "$lt", "$lte", "$in", "$nin", "$exists", "$where", "tojson", "==", "db.","$where"};
    /**
     * @param value 待处理内容
     * @return
     * @Description MongoDB防注入
     */
    @Override
    public String strip(String value) {


        for (int i=0;i