sec: view

This commit is contained in:
RB 2024-03-04 21:52:18 +08:00
parent f912a78ea0
commit 927e349e6e

View file

@ -216,6 +216,7 @@ public abstract class BaseController extends Controller {
* @return
*/
protected ModelAndView createModelAndView(String view) {
view = view.replaceAll("[^a-zA-Z0-9_/\\-]", "");
return new ModelAndView(view);
}