改进SQL注入检测

2022-03-19 15:41:25 +08:00
parent b44fd58aed
commit dc5612a66f
1 changed files with 1 additions and 1 deletions
@@ -376,7 +376,7 @@ func HTTPFirewallTemplate() *HTTPFirewallPolicy {
 				IsOn:              true,
 				Param:             "${requestAll}",
 				Operator:          HTTPFirewallRuleOperatorMatch,
-				Value:             `(updatexml|extractvalue|ascii|ord|char|chr|count|concat|rand|floor|substr|length|len|user|database|benchmark|analyse)\s*\(`,
+				Value:             `\b(updatexml|extractvalue|ascii|ord|char|chr|count|concat|rand|floor|substr|length|len|user|database|benchmark|analyse)\s*\(.*\)`,
 				IsCaseInsensitive: true,
 			})