WAF SQL注入检测和XSS注入检测自动进行URL解码

internal/waf/injectionutils/utils_sqli.go

@@ -69,6 +69,11 @@ func DetectSQLInjection(input string) bool {
 				return detectSQLInjectionOne(args)
 			}
 		}
+	} else {
+		unescapedInput, err := url.QueryUnescape(input)
+		if err == nil && input != unescapedInput {
+			return detectSQLInjectionOne(unescapedInput)
+		}
 	}
 
 	return false