java过滤xss_java XSS漏洞过滤

利用 Java 的 xssprotect(Open Source Library)对出现 xss 漏洞的参数进行过滤。

项目web.xml配置过滤器：

xssAndSqlFilter

com.tp.XSS.XssHttpServletFilter

isFilter

true

xssAndSqlFilter

/*

java代码：

package com.tp.XSS;

import java.io.IOException;

import javax.servlet.Filter;

import javax.servlet.FilterChain;

import javax.servlet.FilterConfig;

import javax.servlet.ServletException;

import javax.servlet.ServletRequest;

import javax.servlet.ServletResponse;

import javax.servlet.http.HttpServletRequest;

public class XssHttpServletFilter implements Filter {

private boolean isXss = false;

@Override

public void destroy() {

}

@Override

public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {

if (isXss)

{

chain.doFilter(new XssHttpServletRequestWrapper((HttpServletRequest) request), response);

}

else

{

chain.doFilter(request, response);

}

}

@Override

public void init(FilterConfig arg0) throws ServletException {

//w