【漏洞修复】由于自增id可猜测，需避免别有用心之人删除别人的购物车 update /yudao/module/trade/service/cart/CartServiceImpl

2024-12-27 21:46:01 +08:00 · 2024-12-27 21:46:01 +08:00 · b1b74cf14a
parent 8c4f906da4
commit b1b74cf14a
1 changed files with 1 additions and 1 deletions
--- a/yudao-module-mall/yudao-module-trade-biz/src/main/java/cn/iocoder/yudao/module/trade/service/cart/CartServiceImpl.java
+++ b/yudao-module-mall/yudao-module-trade-biz/src/main/java/cn/iocoder/yudao/module/trade/service/cart/CartServiceImpl.java
@ -121,7 +121,7 @@ public class CartServiceImpl implements CartService {
        }

        // 批量标记删除
-        cartMapper.deleteByIds(carts.stream().map(CartDO::getId).toList());
+        cartMapper.deleteByIds(convertSet(carts, CartDO::getId));
    }

    @Override