修改参数

igirl-channel-web/app/base/controller/impl/trademark/tmqueryCtl.js

@@ -41,9 +41,13 @@ class tmqueryCtl extends CtlBase {
             if (!pobj.actionType) {
             if (!pobj.actionType) {
                 return system.getResult(null, "actionType不能为空");
                 return system.getResult(null, "actionType不能为空");
             }
             }
-            if (pobj.actionType.indexOf(";")>=0) {
+            let text_keyword_tags = pobj.actionType.replace(/[,`~!@#$%^&*:;><|.\\ \/=]/g, "");
+            if(text_keyword_tags.length!=pobj.actionType.length){
                 return system.getResult(null, "非法参数");
                 return system.getResult(null, "非法参数");
             }
             }
+            // if (pobj.actionType.indexOf(";")>=0||pobj.actionType.indexOf("|")>=0) {
+            //     return system.getResult(null, "非法参数");
+            // }
             if (!pobj.actionBody) {
             if (!pobj.actionBody) {
                 return system.getResult(null, "actionBody不能为空");
                 return system.getResult(null, "actionBody不能为空");
             }
             }
@@ -764,7 +768,6 @@ class tmqueryCtl extends CtlBase {
 
 
     //----------------------------gsb------操作------------end
     //----------------------------gsb------操作------------end
 
 
-
     async getUserByPin(pobj, qobj, req) {
     async getUserByPin(pobj, qobj, req) {
         var user = req.session.userPinInfo;
         var user = req.session.userPinInfo;
         if (!user) {
         if (!user) {
@@ -775,6 +778,7 @@ class tmqueryCtl extends CtlBase {
         }
         }
         return system.getResultSuccess(user);
         return system.getResultSuccess(user);
     }
     }
+
 }
 }
 
 
-module.exports = tmqueryCtl;
+module.exports = tmqueryCtl;
\ No newline at end of file