From 8036aa44a38f32fd1aba703d7c3d894db52c8bad Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E6=95=B0=E6=8D=AE=E5=B0=8F=E7=8E=8B=E5=AD=90?=
 <dataprince@163.com>
Date: Thu, 7 Mar 2024 10:49:44 +0800
Subject: [PATCH] =?UTF-8?q?=E4=BC=98=E5=8C=96=20=E5=AF=86=E7=A0=81?=
 =?UTF-8?q?=E6=A0=A1=E9=AA=8C=E7=AD=96=E7=95=A5=E5=A2=9E=E5=8A=A0=E9=9D=9E?=
 =?UTF-8?q?=E6=B3=95=E5=AD=97=E7=AC=A6=E9=99=90=E5=88=B6?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/views/register.vue                     |  5 +++--
 src/views/system/user/index.vue            | 10 ++++++++--
 src/views/system/user/profile/resetPwd.vue |  3 ++-
 3 files changed, 13 insertions(+), 5 deletions(-)

diff --git a/src/views/register.vue b/src/views/register.vue
index 492fc72..bcacfa6 100644
--- a/src/views/register.vue
+++ b/src/views/register.vue
@@ -63,7 +63,7 @@ import { to } from 'await-to-js';
 const router = useRouter();
 
 const registerForm = ref<RegisterForm>({
-  tenantId: '',
+  tenantId: 1,
   username: '',
   password: '',
   confirmPassword: '',
@@ -91,7 +91,8 @@ const registerRules: ElFormRules = {
   ],
   password: [
     { required: true, trigger: 'blur', message: '请输入您的密码' },
-    { min: 5, max: 20, message: '用户密码长度必须介于 5 和 20 之间', trigger: 'blur' }
+    { min: 5, max: 20, message: '用户密码长度必须介于 5 和 20 之间', trigger: 'blur' },
+    { pattern: /^[^<>"'|\\]+$/, message: "不能包含非法字符：< > \" ' \\\ |", trigger: "blur" }
   ],
   confirmPassword: [
     { required: true, trigger: 'blur', message: '请再次输入您的密码' },
diff --git a/src/views/system/user/index.vue b/src/views/system/user/index.vue
index 8ccb103..c55d388 100644
--- a/src/views/system/user/index.vue
+++ b/src/views/system/user/index.vue
@@ -425,7 +425,8 @@ const initData: PageData<UserForm, UserQuery> = {
         max: 20,
         message: '用户密码长度必须介于 5 和 20 之间',
         trigger: 'blur'
-      }
+      },
+      { pattern: /^[^<>"'|\\]+$/, message: "不能包含非法字符：< > \" ' \\\ |", trigger: "blur" }
     ],
     email: [
       {
@@ -539,7 +540,12 @@ const handleResetPwd = async (row: UserVO) => {
       cancelButtonText: '取消',
       closeOnClickModal: false,
       inputPattern: /^.{5,20}$/,
-      inputErrorMessage: '用户密码长度必须介于 5 和 20 之间'
+      inputErrorMessage: '用户密码长度必须介于 5 和 20 之间',
+      inputValidator: (value) => {
+        if (/<|>|"|'|\||\\/.test(value)) {
+          return "不能包含非法字符：< > \" ' \\\ |"
+        }
+      }
     })
   );
   if (!err && res) {
diff --git a/src/views/system/user/profile/resetPwd.vue b/src/views/system/user/profile/resetPwd.vue
index 0a39fb1..6d536da 100644
--- a/src/views/system/user/profile/resetPwd.vue
+++ b/src/views/system/user/profile/resetPwd.vue
@@ -44,7 +44,8 @@ const rules = ref({
       max: 20,
       message: '长度在 6 到 20 个字符',
       trigger: 'blur'
-    }
+    },
+    { pattern: /^[^<>"'|\\]+$/, message: "不能包含非法字符：< > \" ' \\\ |", trigger: "blur" }
   ],
   confirmPassword: [
     { required: true, message: '确认密码不能为空', trigger: 'blur' },