From 33eb365375ba0f7deea9456b0c11f3b42d0f04c4 Mon Sep 17 00:00:00 2001
From: yedf2 <120050102@qq.com>
Date: Mon, 14 Mar 2022 22:15:05 +0800
Subject: [PATCH] add escape

---
 dtmsvr/api_http.go    | 2 +-
 dtmsvr/trans_class.go | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/dtmsvr/api_http.go b/dtmsvr/api_http.go
index 2ba8373..2ca1da0 100644
--- a/dtmsvr/api_http.go
+++ b/dtmsvr/api_http.go
@@ -64,7 +64,7 @@ func registerBranch(c *gin.Context) interface{} {
 	err := c.BindJSON(&data)
 	e2p(err)
 	branch := TransBranch{
-		Gid:      data["gid"],
+		Gid:      dtmimp.Escape(data["gid"]),
 		BranchID: data["branch_id"],
 		Status:   dtmcli.StatusPrepared,
 		BinData:  []byte(data["data"]),
diff --git a/dtmsvr/trans_class.go b/dtmsvr/trans_class.go
index 2eae58c..be60ac8 100644
--- a/dtmsvr/trans_class.go
+++ b/dtmsvr/trans_class.go
@@ -76,6 +76,8 @@ func TransFromContext(c *gin.Context) *TransGlobal {
 	e2p(err)
 	m := TransGlobal{}
 	dtmimp.MustUnmarshal(b, &m)
+	m.Status = dtmimp.Escape(m.Status)
+	m.Gid = dtmimp.Escape(m.Gid)
 	logger.Debugf("creating trans in prepare")
 	m.setupPayloads()
 	m.Ext.Headers = map[string]string{}