Mybatis-SQL注入

    
    @Test
    public void test02() {
        QueryWrapper queryWrapper = new QueryWrapper<>();
        queryWrapper.select(Result.ID);
        String param = "' and (select * from (select sleep(5)) a) ='";
        String format = String.format(" %s REGEXP CONCAt('(',REPLACE('%s',',','|'),')') ",
                Result.HIT_MIND_LABEL, param);
        System.out.println(format);
        queryWrapper.apply(format);
        List list = resultService.list(queryWrapper);
        System.out.println(JSON.toJSONString(list));
    }

    
    @Test
    public void test03() {
        System.out.println(JSON.toJSONString(resultService.list().stream().map(Result::getHitMindLabel).toArray()));
        QueryWrapper queryWrapper = new QueryWrapper<>();
        queryWrapper.select(Result.ID);
        //queryWrapper.eq(Result.COMPANY_ID, 279);
        //String param=" '' and (select * from (select sleep(5)) a) = '' ";
        String param = "333,444";
        queryWrapper.apply(Result.LABLE+ " REGEXP CONCAt('(',REPLACE({0},',','|'),')') ", param);
        List list = resultMapper.selectList(queryWrapper);
        System.out.println(JSON.toJSONString(list));
    }