Skip to content

.4062073974432528:8efae86b0657150f8d9de735870fe133_69e8a6eb1ffbb16c7ee09048.69e8eb4b1ffbb16c7ee09237.69e8eb4a38522411e67a3e87:Trae CN.T(2026/4/22 23:37:47) #8

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
CGW516 wants to merge 4 commits into
base: master
Choose a base branch
from
Open

.4062073974432528:8efae86b0657150f8d9de735870fe133_69e8a6eb1ffbb16c7ee09048.69e8eb4b1ffbb16c7ee09237.69e8eb4a38522411e67a3e87:Trae CN.T(2026/4/22 23:37:47) #8

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
df6ab8c
fix: 修复XSS漏洞，使用c:out转义用户输入内容
Apr 22, 2026
5f7dc18
fix(XSS防护): 使用c:out标签防止XSS攻击并优化消息提示方式
Apr 22, 2026
36c85bb
fix(XSS防护): 添加fn标签库并改进消息提示的XSS防护
Apr 22, 2026
f0be5cd
refactor: 简化URL参数处理和消息显示逻辑
Apr 22, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 3 additions & 2 deletions campusHelp/WebContent/adminAddAdmin.jsp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@
<ul class="layui-nav layui-layout-right">
<li class="layui-nav-item"><a href="javascript:;">

${nowadmin.account } </a>
<c:out value="${nowadmin.account}"/> </a>
<dl class="layui-nav-child">
<dd>
<a href="adminIndex.jsp">个人信息</a>
Expand Down Expand Up @@ -145,8 +145,9 @@
</div>

<c:if test="${!empty msg }">
<div id="msg-container" style="display:none;"><c:out value="${msg}"/></div>
<script type="text/javascript">
alert("${msg }");
alert(document.getElementById('msg-container').textContent);
</script>
</c:if>

Expand Down
7 changes: 4 additions & 3 deletions campusHelp/WebContent/adminIndex.jsp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -40,7 +40,7 @@
<ul class="layui-nav layui-layout-right">
<li class="layui-nav-item"><a href="javascript:;">

${nowadmin.account } </a>
<c:out value="${nowadmin.account}"/> </a>
<dl class="layui-nav-child">
<dd>
<a href="adminIndex.jsp">个人信息</a>
Expand Down Expand Up @@ -136,7 +136,7 @@
</tr>
<tr>
<td>登录账号</td>
<td>${nowadmin.account }</td>
<td><c:out value="${nowadmin.account}"/></td>
</tr>
<tr>
<td>注册时间</td>
Expand Down Expand Up @@ -165,8 +165,9 @@
</div>

<c:if test="${!empty msg }">
<div id="msg-container" style="display:none;"><c:out value="${msg}"/></div>
<script type="text/javascript">
alert("${msg }");
alert(document.getElementById('msg-container').textContent);
</script>
</c:if>

Expand Down
5 changes: 3 additions & 2 deletions campusHelp/WebContent/adminPassword.jsp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@
<ul class="layui-nav layui-layout-right">
<li class="layui-nav-item"><a href="javascript:;">

${nowadmin.account } </a>
<c:out value="${nowadmin.account}"/> </a>
<dl class="layui-nav-child">
<dd>
<a href="adminIndex.jsp">个人信息</a>
Expand Down Expand Up @@ -154,8 +154,9 @@
</div>

<c:if test="${!empty msg }">
<div id="msg-container" style="display:none;"><c:out value="${msg}"/></div>
<script type="text/javascript">
alert("${msg }");
alert(document.getElementById('msg-container').textContent);
</script>
</c:if>

Expand Down
7 changes: 4 additions & 3 deletions campusHelp/WebContent/adminSchool.jsp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@
<ul class="layui-nav layui-layout-right">
<li class="layui-nav-item"><a href="javascript:;">

${nowadmin.account } </a>
<c:out value="${nowadmin.account}"/> </a>
<dl class="layui-nav-child">
<dd>
<a href="adminIndex.jsp">个人信息</a>
Expand Down Expand Up @@ -126,7 +126,7 @@
</div>
<fieldset class="layui-elem-field layui-field-title"
style="margin: 20px;margin-bottom: 5px;margin-top: 5px;">
<legend><a>${school.name }</a></legend>
<legend><a><c:out value="${school.name}"/></a></legend>
</fieldset>
<div style="margin-left: 20px;margin-right: 30px;">
<c:if test="${school.state==0 }">
Expand Down Expand Up @@ -156,8 +156,9 @@
</div>

<c:if test="${!empty msg }">
<div id="msg-container" style="display:none;"><c:out value="${msg}"/></div>
<script type="text/javascript">
alert("${msg }");
alert(document.getElementById('msg-container').textContent);
</script>
</c:if>

Expand Down
5 changes: 3 additions & 2 deletions campusHelp/WebContent/adminSchoolAdd.jsp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -58,7 +58,7 @@
<div class="layui-form-item">
<label class="layui-form-label">院校名称</label>
<div class="layui-input-inline">
<input type="text" name="name" value="${theSchool.name }"
<input type="text" name="name" value="<c:out value='${theSchool.name}'/>"
lay-verify="name" autocomplete="off"
class="layui-input">
</div>
Expand All @@ -81,8 +81,9 @@
</div>

<c:if test="${!empty msg }">
<div id="msg-container" style="display:none;"><c:out value="${msg}"/></div>
<script type="text/javascript">
alert("${msg }");
alert(document.getElementById('msg-container').textContent);
</script>
</c:if>

Expand Down
5 changes: 3 additions & 2 deletions campusHelp/WebContent/adminSchoolSetting.jsp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -68,7 +68,7 @@
<div class="layui-form-item">
<label class="layui-form-label">院校名称</label>
<div class="layui-input-inline">
<input type="text" name="name" value="${theSchool.name }"
<input type="text" name="name" value="<c:out value='${theSchool.name}'/>"
lay-verify="oldpassword" autocomplete="off"
class="layui-input">
</div>
Expand Down Expand Up @@ -114,8 +114,9 @@
</div>

<c:if test="${!empty msg }">
<div id="msg-container" style="display:none;"><c:out value="${msg}"/></div>
<script type="text/javascript">
alert("${msg }");
alert(document.getElementById('msg-container').textContent);
</script>
</c:if>
<script src="${pageContext.request.contextPath }/layui/layui.all.js"></script>
Expand Down
14 changes: 8 additions & 6 deletions campusHelp/WebContent/adminTask.jsp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,7 @@
%>
<%@taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core"%>
<%@taglib prefix="fmt" uri="http://java.sun.com/jsp/jstl/fmt"%>
<%@taglib prefix="fn" uri="http://java.sun.com/jsp/jstl/functions"%>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
Expand Down Expand Up @@ -38,7 +39,7 @@
<ul class="layui-nav layui-layout-right">
<li class="layui-nav-item"><a href="javascript:;">

${nowadmin.account } </a>
<c:out value="${nowadmin.account}"/> </a>
<dl class="layui-nav-child">
<dd>
<a href="adminIndex.jsp">个人信息</a>
Expand Down Expand Up @@ -131,24 +132,24 @@
</div>
<fieldset class="layui-elem-field layui-field-title"
style="margin: 20px;margin-bottom: 5px;margin-top: 5px;">
<legend><a>${task.taskname }</a></legend>
<legend><a><c:out value="${task.taskname}"/></a></legend>
</fieldset>
<div style="margin-left: 20px;margin-right: 30px;">
<span class="layui-badge layui-bg-gray">详细描述</span>
<span class="layui-badge layui-bg-gray">${task.publishUserName }</span>
<span class="layui-badge layui-bg-gray"><c:out value="${task.publishUserName}"/></span>
<span class="layui-badge layui-bg-gray">发布时间：<fmt:formatDate value="${task.addtime }" pattern=" yyyy-MM-dd HH:mm:ss" /></span>
<c:if test="${task.state!=0 }">
<span class="layui-badge layui-bg-gray">结束时间：<fmt:formatDate value="${task.endtime }" pattern=" yyyy-MM-dd HH:mm:ss" /></span>
</c:if>
<span class="layui-badge layui-bg-gray">奖励：${task.reward }</span>
</div>
<div style="margin-left: 30px;margin-right: 30px;margin-top: 10px;">
<h3>${task.taskcontext }</h3>
<h3><c:out value="${task.taskcontext}"/></h3>
</div>
<div style="margin-left: 30px;margin-right: 30px;margin-top: 10px;margin-bottom: 30px;">
<a onclick="getAuser(${task.publishUserId })" class="layui-btn layui-btn-sm layui-btn-primary layui-btn-radius">查看发布者信息</a>
<c:if test="${task.state==0 }">
<a href="admin/taskclose.do?words=${words }&schoolidstr=${schoolidstr }&tidstr=${task.taskid }" class="layui-btn layui-btn-sm layui-btn-primary layui-btn-radius">取消该任务</a>
<a href="admin/taskclose.do?words=${words}&schoolidstr=${schoolidstr}&tidstr=${task.taskid }" class="layui-btn layui-btn-sm layui-btn-primary layui-btn-radius">取消该任务</a>
</c:if>
<c:if test="${task.state==1 }">
<button class="layui-btn layui-btn-sm layui-btn-disabled layui-btn-radius">任务已关闭</button>
Expand All @@ -175,7 +176,8 @@

<c:if test="${!empty msg }">
<script type="text/javascript">
alert("${msg }");
var msg = "${fn:escapeXml(msg)}";
alert(msg);
</script>
</c:if>

Expand Down
12 changes: 7 additions & 5 deletions campusHelp/WebContent/adminUser.jsp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,7 @@
%>
<%@taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core"%>
<%@taglib prefix="fmt" uri="http://java.sun.com/jsp/jstl/fmt"%>
<%@taglib prefix="fn" uri="http://java.sun.com/jsp/jstl/functions"%>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
Expand Down Expand Up @@ -37,7 +38,7 @@
</ul>
<ul class="layui-nav layui-layout-right">
<li class="layui-nav-item">
<a href="javascript:;">${nowadmin.account } </a>
<a href="javascript:;"><c:out value="${nowadmin.account}"/> </a>
<dl class="layui-nav-child">
<dd>
<a href="adminIndex.jsp">个人信息</a>
Expand Down Expand Up @@ -118,7 +119,7 @@
</div>
<fieldset class="layui-elem-field layui-field-title"
style="margin: 20px;margin-bottom: 5px;margin-top: 5px;">
<legend><a>${user.name }</a></legend>
<legend><a><c:out value="${user.name}"/></a></legend>
</fieldset>
<div style="margin-left: 20px;margin-right: 30px;">
<c:if test="${user.state==0 }">
Expand All @@ -132,10 +133,10 @@
</div>
<div style="margin-left: 30px;margin-right: 30px;margin-top: 10px;margin-bottom: 30px;">
<c:if test="${user.state==0 }">
<a href="admin/userclose.do?keys=${keys }&stuidstr=${user.stuid }" class="layui-btn layui-btn-sm layui-btn-primary layui-btn-radius">限制该用户状态</a>
<a href="admin/userclose.do?keys=${keys}&stuidstr=${user.stuid }" class="layui-btn layui-btn-sm layui-btn-primary layui-btn-radius">限制该用户状态</a>
</c:if>
<c:if test="${user.state!=0 }">
<a href="admin/useropen.do?keys=${keys }&stuidstr=${user.stuid }" class="layui-btn layui-btn-sm layui-btn-primary layui-btn-radius">解除限制</a>
<a href="admin/useropen.do?keys=${keys}&stuidstr=${user.stuid }" class="layui-btn layui-btn-sm layui-btn-primary layui-btn-radius">解除限制</a>
</c:if>
<a onclick="addMoney(${user.stuid })" class="layui-btn layui-btn-sm layui-btn-primary layui-btn-radius">用户信息及余额操作</a>
</div>
Expand All @@ -153,7 +154,8 @@

<c:if test="${!empty msg }">
<script type="text/javascript">
alert("${msg }");
var msg = "${fn:escapeXml(msg)}";
alert(msg);
</script>
</c:if>

Expand Down
7 changes: 4 additions & 3 deletions campusHelp/WebContent/adminUserMoney.jsp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -58,11 +58,11 @@
</tr>
<tr>
<td>用户学号</td>
<td>${theuser.studentid }</td>
<td><c:out value="${theuser.studentid}"/></td>
</tr>
<tr>
<td>用户姓名</td>
<td>${theuser.name }</td>
<td><c:out value="${theuser.name}"/></td>
</tr>
<tr>
<td>用户性别</td>
Expand Down Expand Up @@ -129,8 +129,9 @@
</div>

<c:if test="${!empty msg }">
<div id="msg-container" style="display:none;"><c:out value="${msg}"/></div>
<script type="text/javascript">
alert("${msg }");
alert(document.getElementById('msg-container').textContent);
</script>
</c:if>

Expand Down
18 changes: 11 additions & 7 deletions campusHelp/WebContent/index.jsp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,7 @@
%>
<%@taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core"%>
<%@taglib prefix="fmt" uri="http://java.sun.com/jsp/jstl/fmt"%>
<%@taglib prefix="fn" uri="http://java.sun.com/jsp/jstl/functions"%>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
Expand Down Expand Up @@ -38,7 +39,7 @@
</ul>
<ul class="layui-nav layui-layout-right">
<c:if test="${!empty nowuser }">
<li class="layui-nav-item"><a href="javascript:;">${nowuser.name }</a>
<li class="layui-nav-item"><a href="javascript:;"><c:out value="${nowuser.name}"/></a>
<dl class="layui-nav-child">
<dd>
<a href="userIndex.jsp">个人信息</a>
Expand Down Expand Up @@ -133,7 +134,7 @@
<label class="layui-form-label">关键词</label>
<div class="layui-input-block">
<input type="text" name="words" autocomplete="off"
class="layui-input" value="${words }">
class="layui-input" value="<c:out value='${words}'/>">
</div>
</div>
<div class="layui-input-inline">
Expand Down Expand Up @@ -168,7 +169,7 @@
<div class="fly-panel" style="margin-bottom: 0;">

<div class="fly-panel-title fly-filter">
<a class="layui-this">任务</a> <span class="fly-mid"></span> <a>${words }</a>
<a class="layui-this">任务</a> <span class="fly-mid"></span> <a><c:out value="${words}"/></a>
<span class="fly-mid"></span> <span
class="fly-filter-right layui-hide-xs"> <a
class="layui-this">最新</a>
Expand All @@ -181,10 +182,10 @@
<li style="padding-left: 15px;">
<h2>
<a class="layui-badge">待解决</a> <a
onclick="getTask(${task.taskid })">${task.taskname }</a>
onclick="getTask(${task.taskid })"><c:out value="${task.taskname}"/></a>
</h2>
<div class="fly-list-info">
<a onclick="getPuser(${task.publishUserId })" link> <cite>${task.publishUserName }</cite></a>
<a onclick="getPuser(${task.publishUserId })" link> <cite><c:out value="${task.publishUserName}"/></cite></a>
<span><fmt:formatDate value="${task.addtime }"
pattern=" yyyy-MM-dd HH:mm:ss" /></span> <span
class="fly-list-kiss layui-hide-xs"> <i
Expand Down Expand Up @@ -220,7 +221,8 @@

<c:if test="${!empty msg }">
<script type="text/javascript">
alert("${msg }");
var msg = "${fn:escapeXml(msg)}";
alert(msg);
</script>
</c:if>

Expand Down Expand Up @@ -279,7 +281,9 @@
var optionStr = "";
optionStr += "<option value='" + obj[i].schoolid + "'>" + obj[i].name + "</option>";
$("#schoolidstr").append(optionStr);
$("#schoolidstr").val(${schoolidstr});
// 安全地设置选中值
var selectedSchoolId = parseInt('${schoolidstr}') || -1;
$("#schoolidstr").val(selectedSchoolId);
form.render('select', 'formFilter');//加载完毕后更新表单显示（统一样式）
}
}
Expand Down
3 changes: 2 additions & 1 deletion campusHelp/WebContent/login.jsp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -147,8 +147,9 @@
</div>

<c:if test="${!empty msg }">
<div id="msg-container" style="display:none;"><c:out value="${msg}"/></div>
<script type="text/javascript">
alert("${msg }");
alert(document.getElementById('msg-container').textContent);
</script>
</c:if>

Expand Down
3 changes: 2 additions & 1 deletion campusHelp/WebContent/register.jsp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -133,8 +133,9 @@
</div>

<c:if test="${!empty msg }">
<div id="msg-container" style="display:none;"><c:out value="${msg}"/></div>
<script type="text/javascript">
alert("${msg }");
alert(document.getElementById('msg-container').textContent);
</script>
</c:if>

Expand Down
10 changes: 6 additions & 4 deletions campusHelp/WebContent/taskInfo.jsp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,7 @@
%>
<%@taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core"%>
<%@taglib prefix="fmt" uri="http://java.sun.com/jsp/jstl/fmt"%>
<%@taglib prefix="fn" uri="http://java.sun.com/jsp/jstl/functions"%>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
Expand Down Expand Up @@ -67,15 +68,15 @@
<tbody>
<tr>
<td>任务标题</td>
<td>${theTask.taskname }</td>
<td><c:out value="${theTask.taskname}"/></td>
</tr>
<tr>
<td>详细描述</td>
<td>${theTask.taskcontext }</td>
<td><c:out value="${theTask.taskcontext}"/></td>
</tr>
<tr>
<td>发布者</td>
<td>${theTask.publishUserName }</td>
<td><c:out value="${theTask.publishUserName}"/></td>
</tr>
<tr>
<td>奖励</td>
Expand Down Expand Up @@ -114,7 +115,8 @@

<c:if test="${!empty msg }">
<script type="text/javascript">
alert("${msg }");
var msg = "${fn:escapeXml(msg)}";
alert(msg);
</script>
</c:if>
<script src="${pageContext.request.contextPath }/layui/layui.all.js"></script>
Expand Down
Loading