Commit b1b74cf14a127133e6614ecbed050ca185d67a66

Authored by YunaiV
1 parent 8c4f906d

【漏洞修复】由于自增id可猜测,需避免别有用心之人删除别人的购物车 update /yudao/module/trade/service/cart/CartServiceImpl

yudao-module-mall/yudao-module-trade-biz/src/main/java/cn/iocoder/yudao/module/trade/service/cart/CartServiceImpl.java
... ... @@ -121,7 +121,7 @@ public class CartServiceImpl implements CartService {
121 121 }
122 122  
123 123 // 批量标记删除
124   - cartMapper.deleteByIds(carts.stream().map(CartDO::getId).toList());
  124 + cartMapper.deleteByIds(convertSet(carts, CartDO::getId));
125 125 }
126 126  
127 127 @Override
... ...