filterchain1.配置web &(2)

            return;  

}String currentURL = request.getRequestURI();// add by wangsk 过滤请求特殊字符，扫描跨站式漏洞Map parameters = request.getParameterMap();if (parameters != null && parameters.size() > 0) {for (Iterator iter = parameters.keySet().iterator(); iter.hasNext();) {String key = (String) iter.next();String[] values = (String[]) parameters.get(key);for (int i = 0; i < values.length; i++) {values[i] = guolv(values[i]);System.out.println(values[i]);}}} ????????????????filterChain.doFilter(servletRequest, servletResponse);????

return; }public void init(FilterConfig filterConfig) throws ServletException {}public static String guolv(String a) {a = a。replaceAll("%22", "");a = a。replaceAll("%27", "");a = a。replaceAll("%3E", "");a = a。replaceAll("%3e", "");a = a。replaceAll("%3C", "");a = a。replaceAll("%3c", "");a = a。replaceAll("<", "");a = a。replaceAll(">", "");a = a。replaceAll("\"", "");a = a。replaceAll("'", "");a = a。replaceAll("\\+", "");a = a。replaceAll("\\(", "");a = a。replaceAll("\\)", "");a = a。replaceAll(" and ", "");a = a。

replaceAll(" or ", "");a = a。replaceAll(" 1=1 ", "");return a;}private String getRequestString(HttpServletRequest req) {String requestPath = req。getServletPath()。toString();String queryString = req。getQueryString();if (queryString != null)return requestPath + "?" + queryString;elsereturn requestPath;}public String guolv2(String a) {if (StringUtils。isNotEmpty(a)) {if (a。contains("%22") || a。filterchaincontains("%3E") || a。filterchaincontains("%3e")|| a。contains("%3C") || a。contains("%3c")|| a。contains("<") || a。contains(">") || a。

contains("\"")|| a。contains("'") || a。contains("+") || /** a。contains("%27")* ||*/a。contains(" and ") || a。contains(" or ")|| a。contains("1=1") || a。contains("(") || a。contains(")")) {return "bingo";}}return a;} }

本文来自电脑杂谈，转载请注明本文网址：
http://www.pc-fly.com/a/jisuanjixue/article-69452-2.html