用过滤器对jsp页面中的敏感字段进行过滤-优快云博客

WordWriter.java
package myservlets;

import java.io.IOException;
import java.io.PrintWriter;

import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletResponse;

public class WordWriter implements Filter {

protected FilterConfig filterConfig;
public void destroy() {
this.filterConfig=null;

}

public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException,

ServletException {

request.setCharacterEncoding("UTF-8");
response.setContentType("text/html;charset=UTF-8");
HttpServletResponse res=(HttpServletResponse) response;
PrintWriter out=response.getWriter();
CharResponseWrapper wrapper=new CharResponseWrapper(res);
chain.doFilter(request, wrapper);
String resStr=wrapper.toString();
//敏感字符集
List<String> illegal_wordList = new ArrayList<String>();
illegal_wordList.add("妈的");
illegal_wordList.add("垃圾");
for (Iterator iter = illegal_wordList.iterator(); iter.hasNext();) {
String element = (String) iter.next();
if (resStr.indexOf(element) > 0) {
resStr = resStr.replaceAll(element, "**");
}
} out.println(resStr);
}

public void init(FilterConfig config) throws ServletException {
this.filterConfig=config;

}

public void setFilterConfig(final FilterConfig filterConfig) {
this.filterConfig = filterConfig;
}

}

CharResponseWrapper.java
package myservlets;

import java.io.CharArrayWriter;
import java.io.PrintWriter;

import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpServletResponseWrapper;

public class CharResponseWrapper extends HttpServletResponseWrapper {
private CharArrayWriter output;

public String toString() {
return output.toString();
}

public CharResponseWrapper(HttpServletResponse response) {
super(response);
output = new CharArrayWriter();
}

public PrintWriter getWriter() {
return new PrintWriter(output);
}
}

MyJsp.jsp
<%@ page language="java" pageEncoding="gb2312"%>

<%@ taglib uri="http://struts.apache.org/tags-bean" prefix="bean" %>
<%@ taglib uri="http://struts.apache.org/tags-html" prefix="html" %>
<%@ taglib uri="http://struts.apache.org/tags-logic" prefix="logic" %>
<%@ taglib uri="http://struts.apache.org/tags-tiles" prefix="tiles" %>

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html:html lang="true">
<head>
<html:base />
<title>MyJsp.jsp</title>
</head>

<body>
This a struts page. <br>
真她妈的!垃圾
</body>
</html:html>

web.xml

<filter>

<filter-name>Word Filter</filter-name>

<filter-class>myservlets.WordWriter</filter-class>

</filter>

<filter-mapping>

<filter-name>Word Filter</filter-name>

<url-pattern>/*</url-pattern>

</filter-mapping>

效果:

This a struts page.
真她**!**