【xss】java 修复XSS跨站脚本漏洞XssFilter实现防止XSS攻击

qq_35320491

已于 2024-07-11 17:45:31 修改

阅读量1.4k

点赞数 13

文章标签： xss java spring

于 2024-07-11 17:44:10 首次发布

本文链接：https://blog.youkuaiyun.com/qq_35320491/article/details/140358098

版权

配置 web.xml

<filter>
    <filter-name>xssFilter</filter-name>
    <filter-class>com.wj.apps.base.filter.XssFilter</filter-class>
</filter>
<filter-mapping>
    <filter-name>xssFilter</filter-name>
    <url-pattern>/*</url-pattern>
</filter-mapping>

XssFilter类创建

import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;
import javax.servlet.*;
import javax.servlet.http.HttpServletRequest;
import java.io.IOException;

public class XssFilter implements Filter {

    private static final Log log = LogFactory.getLog(XssFilter.class);

    @Override
    public void init(FilterConfig filterConfig) throws ServletException {
        // 初始化过滤器，如果有需要的话
        log.info("XssFilter Begin");
    }

    @Override
    public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)
            throws IOExcept