Package net.mingsoft.basic.filter

Class XSSEscapeFilter

java.lang.Object

net.mingsoft.basic.filter.XSSEscapeFilter

All Implemented Interfaces:

jakarta.servlet.Filter

public class XSSEscapeFilter
extends Object
implements jakarta.servlet.Filter

XSS 过滤器 用于请求参数的脚本数据 历史修订: 2022-1-24 把includes删除,改成excludes

Field Summary

Fields

Modifier and Type	Field	Description
List<String>	excludes
static List<String>	excludesField
List<String>	includes

Constructor Summary

Constructors

Constructor	Description
XSSEscapeFilter()

Method Summary

Modifier and Type	Method	Description
void	destroy()
void	doFilter(jakarta.servlet.ServletRequest request, jakarta.servlet.ServletResponse response, jakarta.servlet.FilterChain filterChain)
void	init(jakarta.servlet.FilterConfig filterConfig)
com.fasterxml.jackson.databind.ObjectMapper	xssObjectMapper(org.springframework.http.converter.json.Jackson2ObjectMapperBuilder builder)	过滤json类型的

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

includes

public List<String> includes

excludes

public List<String> excludes

excludesField

public static List<String> excludesField

Constructor Details

XSSEscapeFilter

public XSSEscapeFilter()

Method Details

doFilter

public void doFilter(jakarta.servlet.ServletRequest request,
 jakarta.servlet.ServletResponse response,
 jakarta.servlet.FilterChain filterChain)
              throws IOException,
jakarta.servlet.ServletException

Specified by:

doFilter in interface jakarta.servlet.Filter

Throws:

IOException

jakarta.servlet.ServletException

xssObjectMapper

@Bean
@Primary
public com.fasterxml.jackson.databind.ObjectMapper xssObjectMapper(org.springframework.http.converter.json.Jackson2ObjectMapperBuilder builder)

过滤json类型的

Parameters:

builder -

Returns:

init

public void init(jakarta.servlet.FilterConfig filterConfig)
          throws jakarta.servlet.ServletException

Specified by:

init in interface jakarta.servlet.Filter

Throws:

jakarta.servlet.ServletException

destroy

public void destroy()

Specified by:

destroy in interface jakarta.servlet.Filter