cn.stylefeng.roses.kernel.security.xss

类 XssHttpServletRequestWrapper

java.lang.Object

javax.servlet.ServletRequestWrapper

javax.servlet.http.HttpServletRequestWrapper

cn.stylefeng.roses.kernel.security.xss.XssHttpServletRequestWrapper

所有已实现的接口:

javax.servlet.http.HttpServletRequest, javax.servlet.ServletRequest

public class XssHttpServletRequestWrapper
extends javax.servlet.http.HttpServletRequestWrapper

对原有HttpServletRequest包装，在执行获取参数等操作时候，进行xss过滤

作者:

fengshuonan

字段概要

从接口继承的字段 javax.servlet.http.HttpServletRequest

BASIC_AUTH, CLIENT_CERT_AUTH, DIGEST_AUTH, FORM_AUTH

构造器概要

构造器

构造器和说明
XssHttpServletRequestWrapper(javax.servlet.http.HttpServletRequest servletRequest)

方法概要

限定符和类型	方法和说明
String	getHeader(String name) 获取header的值
String	getParameter(String parameter) 获取单个param方式传参的属性的值
String[]	getParameterValues(String parameter) 获取所有param方式传参的属性的值

从类继承的方法 javax.servlet.http.HttpServletRequestWrapper

authenticate, changeSessionId, getAuthType, getContextPath, getCookies, getDateHeader, getHeaderNames, getHeaders, getHttpServletMapping, getIntHeader, getMethod, getPart, getParts, getPathInfo, getPathTranslated, getQueryString, getRemoteUser, getRequestedSessionId, getRequestURI, getRequestURL, getServletPath, getSession, getSession, getTrailerFields, getUserPrincipal, isRequestedSessionIdFromCookie, isRequestedSessionIdFromUrl, isRequestedSessionIdFromURL, isRequestedSessionIdValid, isTrailerFieldsReady, isUserInRole, login, logout, newPushBuilder, upgrade

从类继承的方法 javax.servlet.ServletRequestWrapper

getAsyncContext, getAttribute, getAttributeNames, getCharacterEncoding, getContentLength, getContentLengthLong, getContentType, getDispatcherType, getInputStream, getLocalAddr, getLocale, getLocales, getLocalName, getLocalPort, getParameterMap, getParameterNames, getProtocol, getReader, getRealPath, getRemoteAddr, getRemoteHost, getRemotePort, getRequest, getRequestDispatcher, getScheme, getServerName, getServerPort, getServletContext, isAsyncStarted, isAsyncSupported, isSecure, isWrapperFor, isWrapperFor, removeAttribute, setAttribute, setCharacterEncoding, setRequest, startAsync, startAsync

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

从接口继承的方法 javax.servlet.ServletRequest

getAsyncContext, getAttribute, getAttributeNames, getCharacterEncoding, getContentLength, getContentLengthLong, getContentType, getDispatcherType, getInputStream, getLocalAddr, getLocale, getLocales, getLocalName, getLocalPort, getParameterMap, getParameterNames, getProtocol, getReader, getRealPath, getRemoteAddr, getRemoteHost, getRemotePort, getRequestDispatcher, getScheme, getServerName, getServerPort, getServletContext, isAsyncStarted, isAsyncSupported, isSecure, removeAttribute, setAttribute, setCharacterEncoding, startAsync, startAsync

构造器详细资料

XssHttpServletRequestWrapper

public XssHttpServletRequestWrapper(javax.servlet.http.HttpServletRequest servletRequest)

方法详细资料

getParameterValues

public String[] getParameterValues(String parameter)

获取所有param方式传参的属性的值

指定者:

getParameterValues 在接口中 javax.servlet.ServletRequest

覆盖:

getParameterValues 在类中 javax.servlet.ServletRequestWrapper

getParameter

public String getParameter(String parameter)

获取单个param方式传参的属性的值

指定者:

getParameter 在接口中 javax.servlet.ServletRequest

覆盖:

getParameter 在类中 javax.servlet.ServletRequestWrapper

getHeader

public String getHeader(String name)

获取header的值

指定者:

getHeader 在接口中 javax.servlet.http.HttpServletRequest

覆盖:

getHeader 在类中 javax.servlet.http.HttpServletRequestWrapper