实名认证特殊符号校验

src/main/java/com/sqx/modules/app/controller/app/AppController.java

@@ -37,6 +37,7 @@ import org.springframework.web.bind.annotation.*;
 import javax.servlet.http.HttpServletRequest;
 import java.util.Date;
 import java.util.Map;
+import java.util.regex.Pattern;
 
 /**
  * APP登录授权
@@ -171,12 +172,21 @@ public class AppController {
                                @RequestParam String city,
                                @RequestParam String bankBranch
     ) {
+
         // 判断身份证号是否有空格
         if (certNum.contains("  ")) {
             userService.addBlackUser(userId, "恶意实名");
             log.warn("恶意实名认证: {}", userId);
             return Result.success();
         }
+        // 定义正则表达式，匹配只包含数字、X、x 和 * 的字符串
+        String regex = "^[0-9Xx*]+$";
+        if (!Pattern.matches(regex, certNum)) {
+            userService.addBlackUser(userId, "恶意实名2");
+            log.warn("恶意实名认证2: {}", userId);
+            return Result.success();
+        }
+
         certNum = certNum.trim();
         if (StrUtil.isAllBlank(certName, certNum, accountNo, mobile)) {
             return Result.error("真实姓名、身份证号码、银行卡号、银行预留手机号缺一不可");
@@ -345,4 +355,5 @@ public class AppController {
         return Result.success();
     }
 
+
 }