cn.stylefeng.roses.kernel.security.xss

类 XssJacksonDeserializer

java.lang.Object

com.fasterxml.jackson.databind.JsonDeserializer<String>

cn.stylefeng.roses.kernel.security.xss.XssJacksonDeserializer

所有已实现的接口:

com.fasterxml.jackson.databind.deser.NullValueProvider

public class XssJacksonDeserializer
extends com.fasterxml.jackson.databind.JsonDeserializer<String>

针对于jackson反序列化时，xss危险字符串的过滤

作者:

fengshuonan

嵌套类概要

从类继承的嵌套类/接口 com.fasterxml.jackson.databind.JsonDeserializer

com.fasterxml.jackson.databind.JsonDeserializer.None

构造器概要

构造器

构造器和说明
XssJacksonDeserializer(XssProperties xssProperties)

方法概要

限定符和类型	方法和说明
String	deserialize(com.fasterxml.jackson.core.JsonParser jsonParser, com.fasterxml.jackson.databind.DeserializationContext context)

从类继承的方法 com.fasterxml.jackson.databind.JsonDeserializer

deserialize, deserializeWithType, deserializeWithType, findBackReference, getDelegatee, getEmptyAccessPattern, getEmptyValue, getEmptyValue, getKnownPropertyNames, getNullAccessPattern, getNullValue, getNullValue, getObjectIdReader, handledType, isCachable, replaceDelegatee, supportsUpdate, unwrappingDeserializer

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

构造器详细资料

XssJacksonDeserializer

public XssJacksonDeserializer(XssProperties xssProperties)

方法详细资料

deserialize

public String deserialize(com.fasterxml.jackson.core.JsonParser jsonParser,
                          com.fasterxml.jackson.databind.DeserializationContext context)
                   throws IOException

指定者:

deserialize 在类中 com.fasterxml.jackson.databind.JsonDeserializer<String>

抛出:

IOException