Skip to content

过滤所有危险字符 #886

@heimanba

Description

@heimanba

过滤函数为

function shellEscapeStrict(arg){
    if(!arg) {
       return "";
    }
    let char_code_list = [];
    let unsafe_char_code_list = [35,38,59,96,124,42,63,126,60,62,94,40,41,91,93,123,125,36,39,34,10,255];
    for(let i = 0; i<arg.length; i++){
        let char = arg[i];
        let char_code = arg.charCodeAt(i)
        //排除换行符号,;号, 行结束符号, |号杜绝 命令连接写法
        if(unsafe_char_code_list.indexOf(char_code) === -1){
            char_code_list.push(char_code);
        }
        
    }
    let sb = String.fromCharCode(...char_code_list);  
    return sb;
}

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions