Commit fb436ac189ed89bfc68cd960082d5f7dced47a25
Committed by
Gitee
Gitee
1 parent
9faee918
【漏洞修复】由于自增id可猜测，需避免别有用心之人删除别人的购物车 update /yudao/module/trade/service/cart/CartServiceImpl.java.
Signed-off-by: 山野羡民 <liyujiang_tk@yeah.net>
Showing
1 changed file
with
1 additions
and
1 deletions
yudao-module-mall/yudao-module-trade-biz/src/main/java/cn/iocoder/yudao/module/trade/service/cart/CartServiceImpl.java
| @@ -121,7 +121,7 @@ public class CartServiceImpl implements CartService { | @@ -121,7 +121,7 @@ public class CartServiceImpl implements CartService { | ||
| 121 | } | 121 | } |
| 122 | 122 | ||
| 123 | // 批量标记删除 | 123 | // 批量标记删除 |
| 124 | - cartMapper.deleteBatchIds(ids); | 124 | + cartMapper.deleteByIds(carts.stream().map(CartDO::getId).toList()); |
| 125 | } | 125 | } |
| 126 | 126 | ||
| 127 | @Override | 127 | @Override |