net.mingsoft.basic.filter

类 XssHttpServletRequestWrapper

java.lang.Object

javax.servlet.ServletRequestWrapper

javax.servlet.http.HttpServletRequestWrapper

net.mingsoft.basic.filter.XssHttpServletRequestWrapper

所有已实现的接口:

javax.servlet.http.HttpServletRequest, javax.servlet.ServletRequest

public class XssHttpServletRequestWrapper
extends javax.servlet.http.HttpServletRequestWrapper

XSS 过滤器 用于请求参数的脚本数据

字段概要

从接口继承的字段 javax.servlet.http.HttpServletRequest

BASIC_AUTH, CLIENT_CERT_AUTH, DIGEST_AUTH, FORM_AUTH

构造器概要

构造器

构造器和说明
XssHttpServletRequestWrapper(javax.servlet.http.HttpServletRequest request)
XssHttpServletRequestWrapper(javax.servlet.http.HttpServletRequest request, List<String> excludesFiled)

方法概要

限定符和类型	方法和说明
String	getHeader(String name) 覆盖getHeader方法，将参数名和参数值都做xss过滤。
javax.servlet.ServletInputStream	getInputStream()
static javax.servlet.http.HttpServletRequest	getOrgRequest(javax.servlet.http.HttpServletRequest req) 获取最原始的request的静态方法
String	getParameter(String name) 覆盖getParameter方法，将参数名和参数值都做xss过滤。
Map	getParameterMap()
String[]	getParameterValues(String name)
javax.servlet.http.HttpServletRequest	getRequest() 获取最原始的request

从类继承的方法 javax.servlet.http.HttpServletRequestWrapper

authenticate, changeSessionId, getAuthType, getContextPath, getCookies, getDateHeader, getHeaderNames, getHeaders, getHttpServletMapping, getIntHeader, getMethod, getPart, getParts, getPathInfo, getPathTranslated, getQueryString, getRemoteUser, getRequestedSessionId, getRequestURI, getRequestURL, getServletPath, getSession, getSession, getTrailerFields, getUserPrincipal, isRequestedSessionIdFromCookie, isRequestedSessionIdFromUrl, isRequestedSessionIdFromURL, isRequestedSessionIdValid, isTrailerFieldsReady, isUserInRole, login, logout, newPushBuilder, upgrade

从类继承的方法 javax.servlet.ServletRequestWrapper

getAsyncContext, getAttribute, getAttributeNames, getCharacterEncoding, getContentLength, getContentLengthLong, getContentType, getDispatcherType, getLocalAddr, getLocale, getLocales, getLocalName, getLocalPort, getParameterNames, getProtocol, getReader, getRealPath, getRemoteAddr, getRemoteHost, getRemotePort, getRequestDispatcher, getScheme, getServerName, getServerPort, getServletContext, isAsyncStarted, isAsyncSupported, isSecure, isWrapperFor, isWrapperFor, removeAttribute, setAttribute, setCharacterEncoding, setRequest, startAsync, startAsync

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

从接口继承的方法 javax.servlet.ServletRequest

getAsyncContext, getAttribute, getAttributeNames, getCharacterEncoding, getContentLength, getContentLengthLong, getContentType, getDispatcherType, getLocalAddr, getLocale, getLocales, getLocalName, getLocalPort, getParameterNames, getProtocol, getReader, getRealPath, getRemoteAddr, getRemoteHost, getRemotePort, getRequestDispatcher, getScheme, getServerName, getServerPort, getServletContext, isAsyncStarted, isAsyncSupported, isSecure, removeAttribute, setAttribute, setCharacterEncoding, startAsync, startAsync

构造器详细资料

XssHttpServletRequestWrapper

public XssHttpServletRequestWrapper(javax.servlet.http.HttpServletRequest request)

XssHttpServletRequestWrapper

public XssHttpServletRequestWrapper(javax.servlet.http.HttpServletRequest request,
                                    List<String> excludesFiled)

方法详细资料

getInputStream

public javax.servlet.ServletInputStream getInputStream()
                                                throws IOException

指定者:

getInputStream 在接口中 javax.servlet.ServletRequest

覆盖:

getInputStream 在类中 javax.servlet.ServletRequestWrapper

抛出:

IOException

getParameter

public String getParameter(String name)

覆盖getParameter方法，将参数名和参数值都做xss过滤。 如果需要获得原始的值，则通过super.getParameterValues(name)来获取 getParameterNames,getParameterValues和getParameterMap也可能需要覆盖

指定者:

getParameter 在接口中 javax.servlet.ServletRequest

覆盖:

getParameter 在类中 javax.servlet.ServletRequestWrapper

getParameterMap

public Map getParameterMap()

指定者:

getParameterMap 在接口中 javax.servlet.ServletRequest

覆盖:

getParameterMap 在类中 javax.servlet.ServletRequestWrapper

getParameterValues

public String[] getParameterValues(String name)

指定者:

getParameterValues 在接口中 javax.servlet.ServletRequest

覆盖:

getParameterValues 在类中 javax.servlet.ServletRequestWrapper

getHeader

public String getHeader(String name)

覆盖getHeader方法，将参数名和参数值都做xss过滤。 如果需要获得原始的值，则通过super.getHeaders(name)来获取 getHeaderNames 也可能需要覆盖

指定者:

getHeader 在接口中 javax.servlet.http.HttpServletRequest

覆盖:

getHeader 在类中 javax.servlet.http.HttpServletRequestWrapper

getRequest

public javax.servlet.http.HttpServletRequest getRequest()

获取最原始的request

覆盖:

getRequest 在类中 javax.servlet.ServletRequestWrapper

返回:

getOrgRequest

public static javax.servlet.http.HttpServletRequest getOrgRequest(javax.servlet.http.HttpServletRequest req)

获取最原始的request的静态方法

返回: