org.dromara.hutool.http.html

类 HTMLFilter

java.lang.Object

org.dromara.hutool.http.html.HTMLFilter

public final class HTMLFilter
extends Object

HTML过滤器，用于去除XSS(Cross Site Scripting) 漏洞隐患。

此类中的方法非线程安全

     String clean = new HTMLFilter().filter(input);
 

此类来自：http://xss-html-filter.sf.net

作者:

Joseph O'Connell, Cal Hendersen, Michael Semb Wever

构造器概要

构造器

构造器和说明
HTMLFilter() Default constructor.
HTMLFilter(boolean debug) Set debug flag to true.
HTMLFilter(Map<String,Object> conf) Map-parameter configurable constructor.

方法概要

限定符和类型	方法和说明
String	filter(String input) given a user submitted input String, filter out any invalid or restricted html.
static String	htmlSpecialChars(String s) HTML特殊字符替换
boolean	isAlwaysMakeTags() flag determining whether to try to make tags when presented with "unbalanced" angle brackets (e.g.
boolean	isStripComments() flag determining whether comments are allowed in input String.

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

构造器详细资料

HTMLFilter

public HTMLFilter()

Default constructor.

HTMLFilter

public HTMLFilter(boolean debug)

Set debug flag to true. Otherwise use default settings. See the default constructor.

参数:

debug - turn debug on with a true argument

HTMLFilter

public HTMLFilter(Map<String,Object> conf)

Map-parameter configurable constructor.

参数:

conf - map containing configuration. keys match field names.

方法详细资料

htmlSpecialChars

public static String htmlSpecialChars(String s)

HTML特殊字符替换

参数:

s - HTML

返回:

替换后的HTML

filter

public String filter(String input)

given a user submitted input String, filter out any invalid or restricted html.

参数:

input - text (i.e. submitted by a user) than may contain html

返回:

"clean" version of input, with only valid, whitelisted html elements allowed

isAlwaysMakeTags

public boolean isAlwaysMakeTags()

flag determining whether to try to make tags when presented with "unbalanced" angle brackets (e.g. "<b text </b>" becomes "<b> text </g>"). If set to false, unbalanced angle brackets will be html escaped.

返回:

alwaysMakeTags

isStripComments

public boolean isStripComments()

flag determining whether comments are allowed in input String.

返回:

stripComment