JeecgBoot 3.3.0 版本发布，基于代码生成器的企业级低代码平台

ant-design-vue-jeecg/src/components/tools/ShowAnnouncement.vue

@@ -1,3 +1,4 @@
+import xss from "xss"
 <template>
   <j-modal
     :title="title"
@@ -24,6 +25,7 @@
 
 <script>
   import {getUserList} from '@/api/api'
+  import xss from 'xss'
   export default {
     name: "SysAnnouncementModal",
     components: {
@@ -70,6 +72,11 @@
         }
         //update-end---author:wangshuai ---date:20220107  for：将其它页面传递过来的用户名改成用户真实姓名
         this.visible = true;
+        //update-begin-author:taoyan date:2022-7-14 for: VUEN-1702 【禁止问题】sql注入漏洞
+        if(record.msgContent){
+          record.msgContent = xss(record.msgContent)
+        }
+        //update-end-author:taoyan date:2022-7-14 for: VUEN-1702 【禁止问题】sql注入漏洞
         this.record = record;
       },
       handleCancel () {