代码漏洞修复

soc-common/soc-common-core/src/main/java/com/xunmei/common/core/utils/html/HTMLFilter.java

@@ -222,7 +222,7 @@ public final class HTMLFilter
     private String escapeComments(final String s)
     {
         final Matcher m = P_COMMENTS.matcher(s);
-        final StringBuffer buf = new StringBuffer();
+        final StringBuffer buf = new StringBuffer(1000);
         if (m.find())
         {
             final String match = m.group(1); // (.*?)
@@ -269,7 +269,7 @@ public final class HTMLFilter
     {
         Matcher m = P_TAGS.matcher(s);
 
-        final StringBuffer buf = new StringBuffer();
+        final StringBuffer buf = new StringBuffer(1000);
         while (m.find())
         {
             String replaceStr = m.group(1);
@@ -459,7 +459,7 @@ public final class HTMLFilter
 
     private String decodeEntities(String s)
     {
-        StringBuffer buf = new StringBuffer();
+        StringBuffer buf = new StringBuffer(100);
 
         Matcher m = P_ENTITY.matcher(s);
         while (m.find())
@@ -471,7 +471,7 @@ public final class HTMLFilter
         m.appendTail(buf);
         s = buf.toString();
 
-        buf = new StringBuffer();
+        buf = new StringBuffer(100);
         m = P_ENTITY_UNICODE.matcher(s);
         while (m.find())
         {
@@ -482,7 +482,7 @@ public final class HTMLFilter
         m.appendTail(buf);
         s = buf.toString();
 
-        buf = new StringBuffer();
+        buf = new StringBuffer(100);
         m = P_ENCODE.matcher(s);
         while (m.find())
         {
@@ -499,7 +499,7 @@ public final class HTMLFilter
 
     private String validateEntities(final String s)
     {
-        StringBuffer buf = new StringBuffer();
+        StringBuffer buf = new StringBuffer(100);
 
         // validate entities throughout the string
         Matcher m = P_VALID_ENTITIES.matcher(s);
@@ -518,7 +518,7 @@ public final class HTMLFilter
     {
         if (encodeQuotes)
         {
-            StringBuffer buf = new StringBuffer();
+            StringBuffer buf = new StringBuffer(100);
             Matcher m = P_VALID_QUOTES.matcher(s);
             while (m.find())
             {

soc-modules/soc-modules-system/src/main/java/com/xunmei/system/service/impl/SysWorkTimeServiceImpl.java

@@ -141,7 +141,7 @@ public class SysWorkTimeServiceImpl extends ServiceImpl<SysWorkTimeMapper, SysWo
             //将list 按照orgId分组
             Map<Long, List<SysWorkTimeSet>> orgMap = list.stream().collect(Collectors.groupingBy(SysWorkTimeSet::getOrgId));
             //遍历orgMap
-            StringBuffer sbf = new StringBuffer();
+            StringBuffer sbf = new StringBuffer(1000);
           //  for (Long key : orgMap.keySet()) {
             for(Map.Entry<Long, List<SysWorkTimeSet>> setMap:orgMap.entrySet()){
                 List<SysWorkTimeSet> wo = setMap.getValue();//orgMap.get(key);