package cn.lili.common.security.filter;
|
|
|
import org.springframework.stereotype.Component;
|
|
import javax.servlet.*;
|
import javax.servlet.annotation.WebFilter;
|
import javax.servlet.http.HttpServletRequest;
|
import java.io.IOException;
|
|
/**
|
* 防止XSS攻击过滤器
|
*
|
* @author Chopper
|
* @version v1.0
|
* 2021-06-04 10:37
|
*/
|
@WebFilter
|
@Component
|
public class XssFilter implements Filter {
|
FilterConfig filterConfig = null;
|
|
@Override
|
public void init(FilterConfig filterConfig) throws ServletException {
|
this.filterConfig = filterConfig;
|
}
|
|
@Override
|
public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)
|
throws IOException, ServletException {
|
//对请求进行拦截,防xss处理
|
chain.doFilter(new XssHttpServletRequestWrapper((HttpServletRequest) request), response);
|
}
|
|
@Override
|
public void destroy() {
|
this.filterConfig = null;
|
}
|
}
|
