限制python代码执行

services/base_from_python.go

@@ -69,8 +69,9 @@ func ExecPythonCode(edbCode, reqCode string) (dataMap models.EdbDataFromPython,
 		}
 	}()
 
+	codeStr := strings.ToLower(reqCode)
 	// 限制python代码的执行，如果包含特殊的关键词，则报错
-	if strings.Contains(edbCode, "drop") || strings.Contains(edbCode, "delete") || strings.Contains(edbCode, "update") || strings.Contains(edbCode, "alter") || strings.Contains(edbCode, "truncate") {
+	if strings.Contains(codeStr, "drop") || strings.Contains(codeStr, "delete") || strings.Contains(codeStr, "update") || strings.Contains(codeStr, "alter") || strings.Contains(codeStr, "truncate") {
 		err = fmt.Errorf("不支持该命令")
 		return
 	}