`
lzkyo
  • 浏览: 471871 次
  • 性别: Icon_minigender_1
  • 来自: 北京
社区版块
存档分类
最新评论

用过滤器对jsp页面中的敏感字段进行过滤

    博客分类：
  • Java
JSPStrutsServletJavaApache 
阅读更多
WordWriter.java
package myservlets;

import java.io.IOException;
import java.io.PrintWriter;

import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletResponse;

public class WordWriter implements Filter {

protected FilterConfig filterConfig;
public void destroy() {
   this.filterConfig=null;
 
}

public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException,

ServletException {
 
   request.setCharacterEncoding("UTF-8");
   response.setContentType("text/html;charset=UTF-8");
   HttpServletResponse res=(HttpServletResponse) response;
   PrintWriter out=response.getWriter();
   CharResponseWrapper wrapper=new CharResponseWrapper(res);
   chain.doFilter(request, wrapper);
   String resStr=wrapper.toString();
    //敏感字符集
   List<String> illegal_wordList = new ArrayList<String>();
   illegal_wordList.add("妈的");
   illegal_wordList.add("垃圾");
   for (Iterator iter = illegal_wordList.iterator(); iter.hasNext();) {
   String element = (String) iter.next();
   if (resStr.indexOf(element) > 0) {
    resStr = resStr.replaceAll(element, "**");
   }  
  }   out.println(resStr);
}

public void init(FilterConfig config) throws ServletException {
   this.filterConfig=config;
 
}

public void setFilterConfig(final FilterConfig filterConfig) {
   this.filterConfig = filterConfig;
}

}

CharResponseWrapper.java
package myservlets;

import java.io.CharArrayWriter;
import java.io.PrintWriter;

import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpServletResponseWrapper;

public class CharResponseWrapper extends HttpServletResponseWrapper {
private CharArrayWriter output;

public String toString() {
   return output.toString();
}

public CharResponseWrapper(HttpServletResponse response) {
   super(response);
   output = new CharArrayWriter();
}

public PrintWriter getWriter() {
   return new PrintWriter(output);
}
}

MyJsp.jsp
<%@ page language="java" pageEncoding="gb2312"%>

<%@ taglib uri="http://struts.apache.org/tags-bean" prefix="bean" %>
<%@ taglib uri="http://struts.apache.org/tags-html" prefix="html" %>
<%@ taglib uri="http://struts.apache.org/tags-logic" prefix="logic" %>
<%@ taglib uri="http://struts.apache.org/tags-tiles" prefix="tiles" %>

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html:html lang="true">
   <head>
     <html:base />
     <title>MyJsp.jsp</title>
   </head>
 
   <body>
     This a struts page. <br>
     真她妈的!垃圾
   </body>
</html:html>

web.xml

<filter>

        <filter-name>Word Filter</filter-name>

        <filter-class>myservlets.WordWriter</filter-class>

    </filter>

    <filter-mapping>

        <filter-name>Word Filter</filter-name>

        <url-pattern>/*</url-pattern>

    </filter-mapping>


效果:

This a struts page.
真她**!**
分享到：
| Java数据库操作基本流程：取得数据库连接 - ...
评论
发表评论

您还没有登录,请您登录后再发表评论

相关推荐

Magicbox
Global site tag (gtag.js) - Google Analytics