jeecg-boot sql注入漏洞解决

@RequestMapping(value = "/getDictItemsByTable/{table}/{key}/{value}", method = RequestMethod.GET)
    public Object getDictItemsByTable(@PathVariable String table,@PathVariable String key,@PathVariable String value) {
        //return this.ngAlainService.getDictByTable(table,key,value); //by nbacheng 有sql注入漏洞
      return null;
    }

@Override
    public List<Map<String, String>> getDictByTable(String table, String key, String value) {
        return this.mapper.getDictByTableNgAlain(table,key,value);
    }

@Deprecated
  @Select("select ${key} as \"label\",${value} as \"value\" from ${table}")
  public List<Map<String,String>> getDictByTableNgAlain(@Param("table") String table, @Param("key") String key, @Param("value") String value);