WAF SQL注入检测和XSS注入检测自动进行URL解码

internal/waf/injectionutils/utils_xss.go

@@ -68,6 +68,11 @@ func DetectXSS(input string) bool {
 				return detectXSSOne(args)
 			}
 		}
+	} else {
+		unescapedInput, err := url.QueryUnescape(input)
+		if err == nil && input != unescapedInput {
+			return detectXSSOne(unescapedInput)
+		}
 	}
 
 	return false