d

igirl-channel-web/app/base/controller/impl/trademark/tmqueryCtl.js

@@ -41,6 +41,9 @@ class tmqueryCtl extends CtlBase {
             if (!pobj.actionType) {
             if (!pobj.actionType) {
                 return system.getResult(null, "actionType不能为空");
                 return system.getResult(null, "actionType不能为空");
             }
             }
+            if (pobj.actionType.indexOf(";")>=0) {
+                return system.getResult(null, "非法参数");
+            }
             if (!pobj.actionBody) {
             if (!pobj.actionBody) {
                 return system.getResult(null, "actionBody不能为空");
                 return system.getResult(null, "actionBody不能为空");
             }
             }