cn.jiangzeyin.common.request

类 XssFilter

java.lang.Object

org.springframework.web.filter.GenericFilterBean

org.springframework.web.filter.OncePerRequestFilter

org.springframework.web.filter.CharacterEncodingFilter

cn.jiangzeyin.common.request.XssFilter

所有已实现的接口:

javax.servlet.Filter, org.springframework.beans.factory.Aware, org.springframework.beans.factory.BeanNameAware, org.springframework.beans.factory.DisposableBean, org.springframework.beans.factory.InitializingBean, org.springframework.context.EnvironmentAware, org.springframework.core.env.EnvironmentCapable, org.springframework.web.context.ServletContextAware

public class XssFilter
extends org.springframework.web.filter.CharacterEncodingFilter

xss 过滤器

作者:

jiangzeyin

创建时间

2017/1/5.

字段概要

从类继承的字段 org.springframework.web.filter.OncePerRequestFilter

ALREADY_FILTERED_SUFFIX

从类继承的字段 org.springframework.web.filter.GenericFilterBean

logger

构造器概要

构造器

构造器和说明
XssFilter()

方法概要

限定符和类型	方法和说明
protected void	doFilterInternal(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, javax.servlet.FilterChain filterChain)
static boolean	isXSS() 返回是否已经xss
static String	xss(String value) xss标签过滤

从类继承的方法 org.springframework.web.filter.CharacterEncodingFilter

getEncoding, isForceRequestEncoding, isForceResponseEncoding, setEncoding, setForceEncoding, setForceRequestEncoding, setForceResponseEncoding

从类继承的方法 org.springframework.web.filter.OncePerRequestFilter

doFilter, getAlreadyFilteredAttributeName, isAsyncDispatch, isAsyncStarted, shouldNotFilter, shouldNotFilterAsyncDispatch, shouldNotFilterErrorDispatch

从类继承的方法 org.springframework.web.filter.GenericFilterBean

addRequiredProperty, afterPropertiesSet, createEnvironment, destroy, getEnvironment, getFilterConfig, getFilterName, getServletContext, init, initBeanWrapper, initFilterBean, setBeanName, setEnvironment, setServletContext

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

构造器详细资料

XssFilter

public XssFilter()

方法详细资料

doFilterInternal

protected void doFilterInternal(javax.servlet.http.HttpServletRequest request,
                                javax.servlet.http.HttpServletResponse response,
                                javax.servlet.FilterChain filterChain)
                         throws javax.servlet.ServletException,
                                IOException

覆盖:

doFilterInternal 在类中 org.springframework.web.filter.CharacterEncodingFilter

抛出:

javax.servlet.ServletException

IOException

xss

public static String xss(String value)

xss标签过滤

参数:

value - 需要过滤的值

返回:

过滤后的

从以下版本开始:

1.2.33

isXSS

public static boolean isXSS()

返回是否已经xss

返回:

配置的状态

从以下版本开始:

1.2.33