【修改】bug修改

src/main/java/io/office/common/xss/SQLFilter.java

@@ -36,7 +36,7 @@ public class SQLFilter {
         str = str.toLowerCase();
 
         //非法字符
-        String[] keywords = {"master", "truncate", "insert", "select", "delete", "update", "declare", "alter", "drop"};
+        String[] keywords = {"master", "truncate", "insert", "select", "delete", "declare", "alter", "drop"};
 
         //判断是否包含非法字符
         for(String keyword : keywords){

src/main/java/io/office/modules/manage/controller/MedicalController.java

@@ -137,7 +137,7 @@ public class MedicalController extends AbstractController {
     @PostMapping("/api/getList10ByType")
     public R getList10ByType(@RequestBody MedicalEntity medical) {
         QueryWrapper<MedicalEntity> queryWrapper = new QueryWrapper<>();
-        queryWrapper.select("top 10 id,title ");
+        queryWrapper.select("top 7 id,title ");
         queryWrapper.gt("level", "0");
         queryWrapper.eq("status", "1");
         queryWrapper.orderByDesc("level");