zoukankan      html  css  js  c++  java
  • servlet Filter过滤javascript

    新建HttpServletRequestWrapper子类XssHttpServletRequestWrapper

    import javax.servlet.http.HttpServletRequest;
    import javax.servlet.http.HttpServletRequestWrapper;
    
    public class XssHttpServletRequestWrapper extends HttpServletRequestWrapper {
    	public XssHttpServletRequestWrapper(HttpServletRequest request){
    		super(request);
    	}
    
    	public String[] getParameterValues(String parameter){
    		String[] values = super.getParameterValues(parameter);
    		if(values==null){
    			return null;
    		}
    		int count = values.length;
    		String[] encodedValues = new String[count];
    		for (int i = 0;i<count;i++){
    			encodedValues[i] = this.cleanXss(values[i]);
    		}
    		return encodedValues;
    	}
    
    	public String getParameter(String parameter){
    		String value = super.getParamerter(parameter);
    		if(valuee == null){
    			return null;
    		}
    		return cleanXss(value);
    	}
    
    	private String cleanXss(String value){
    		value = value.replaceAll("<","&lt").replaceAll(">","&gt");
    		value = value.replaceAll("script","");
    		return value;
    	}
    }
    

     在Fileter中调用

    import javax.servlet.Filter;
    import javax.servlet.FilterChain;
    import javax.servlet.http.HttpServletRequest;
    import javax.servlet.http.HttpServletResponse;
    
    public class HttpMethodFilter implements Filter {
        public void doFilter(ServletRequest request,ServletResponse response,FilterChain chain) throws IOException,ServletException {
            HttpServletRequest hsreq = (HttpServletResponse) request;
            HttpServletResponse hsrep = (HttpServletResponse) response;
            chain.doFilter(new XssHttpServletRequestWrapper((HttpServletRequest) request),response);
        }
    }
  • 相关阅读:
    maven mirrorOf
    使用nexus 搭建本地 maven 服务器
    django 访问静态资源
    django 异常问题总结
    django导入 views.py
    vue js 实现 树形菜单
    vue.js 基础
    css之margin
    Vue项目笔记
    eslint ":"号
  • 原文地址:https://www.cnblogs.com/live365wang/p/5893597.html
Copyright © 2011-2022 走看看