net.mingsoft.basic.filter

类 XSSEscapeFilter

java.lang.Object

net.mingsoft.basic.filter.XSSEscapeFilter

所有已实现的接口:

javax.servlet.Filter

public class XSSEscapeFilter
extends Object
implements javax.servlet.Filter

XSS 过滤器 用于请求参数的脚本数据 历史修订: 2022-1-24 把includes删除,改成excludes

字段概要

字段

限定符和类型	字段和说明
List<String>	excludes
static List<String>	excludesField
List<String>	includes

构造器概要

构造器

构造器和说明
XSSEscapeFilter()

方法概要

限定符和类型	方法和说明
void	destroy()
void	doFilter(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response, javax.servlet.FilterChain filterChain)
void	init(javax.servlet.FilterConfig filterConfig)
com.fasterxml.jackson.databind.ObjectMapper	xssObjectMapper(org.springframework.http.converter.json.Jackson2ObjectMapperBuilder builder) 过滤json类型的

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

字段详细资料

includes

public List<String> includes

excludes

public List<String> excludes

excludesField

public static List<String> excludesField

构造器详细资料

XSSEscapeFilter

public XSSEscapeFilter()

方法详细资料

doFilter

public void doFilter(javax.servlet.ServletRequest request,
                     javax.servlet.ServletResponse response,
                     javax.servlet.FilterChain filterChain)
              throws IOException,
                     javax.servlet.ServletException

指定者:

doFilter 在接口中 javax.servlet.Filter

抛出:

IOException

javax.servlet.ServletException

xssObjectMapper

@Bean
 @Primary
public com.fasterxml.jackson.databind.ObjectMapper xssObjectMapper(org.springframework.http.converter.json.Jackson2ObjectMapperBuilder builder)

过滤json类型的

参数:

builder -

返回:

init

public void init(javax.servlet.FilterConfig filterConfig)
          throws javax.servlet.ServletException

指定者:

init 在接口中 javax.servlet.Filter

抛出:

javax.servlet.ServletException

destroy

public void destroy()

指定者:

destroy 在接口中 javax.servlet.Filter